This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer File: mlVQ6QipuWiMKarJiVNT3qg2xFo.cer (raw, json) Hash identifier: 9rOYYnJ3DWvBVe5rNIVKGauZ49aPbMy6F5mZ17iSlBU= Subject key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AEC28BAA6467AD88435635C8450EB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 149.126.72.0/21 IP: 185.11.124.0/22 IP: 2a02:e980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ec:28:ba:a6:46:7a:d8:84:35:63:5c:84:50:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a5550e908a9b9688c29aac9895353dea836c45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:e3:af:46:a7:2d:96:49:89:be:51:6a:a6: 77:e0:be:5f:52:df:79:d8:06:86:47:53:e4:a9:e3: be:f6:93:ad:81:e1:a8:20:99:42:a8:74:74:16:4f: 75:2d:3a:72:7a:e6:c3:5c:2f:ec:ed:1b:ce:56:44: 58:03:f1:93:d6:ec:43:bf:12:65:02:af:1b:ef:6e: 6a:26:c7:77:1f:14:d8:2c:79:a6:7a:07:08:ac:08: 29:40:a1:da:6e:ea:e7:ef:6f:94:ab:40:db:a3:5c: 71:c3:50:a3:88:4f:04:10:6e:69:d1:9f:91:02:15: 10:65:b7:bf:e8:61:df:df:67:1a:cf:fb:52:b2:ad: 2c:51:e5:d5:66:00:fd:0f:75:19:ef:8a:12:d8:2b: 00:fb:85:55:9e:49:f7:80:f5:b7:5f:66:84:4e:92: cd:ce:38:83:00:b0:87:74:f8:a5:2e:7f:a2:2a:24: ac:25:93:df:49:bc:ab:fe:23:07:0d:09:99:fc:3d: 8a:b0:64:0b:c3:8a:88:07:ea:c4:e4:66:c0:fc:c0: 68:53:dd:80:34:0f:14:90:ef:66:79:f9:73:77:8d: 62:4b:b5:1a:f4:d8:ff:d0:cc:50:05:11:53:17:4d: e2:3f:2c:07:16:8a:1a:02:19:e6:7a:74:a9:b4:5d: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.126.72.0/21 185.11.124.0/22 IPv6: 2a02:e980::/29 Signature Algorithm: sha256WithRSAEncryption 44:a2:ec:88:9b:a9:7d:f7:85:8c:5e:08:d5:0e:23:f2:b2:90: c3:0f:8c:fd:d3:da:11:93:bb:ce:ea:4f:b5:43:32:50:1c:b6: 3e:b8:9d:4c:a6:54:16:b0:59:a6:6c:d0:18:48:24:20:ba:47: ca:75:9c:eb:3f:42:ad:43:03:d3:fc:49:08:96:98:e4:41:59: 0b:16:60:cf:45:2f:58:ed:25:86:1e:c9:40:5d:45:be:2d:1c: 52:ba:2f:7b:86:3c:ca:ad:a5:d2:36:6d:26:66:93:39:5e:88: 95:31:9b:54:6a:f4:95:4f:ca:6e:c4:d3:0d:25:ff:bd:7f:cb: 7f:05:a1:bc:32:ad:59:21:1d:1b:29:06:a5:22:8b:a2:96:0b: 99:e6:58:33:00:7a:f2:0e:ca:49:12:7a:f2:e0:6c:7b:70:98: 65:c3:36:9d:c8:2c:25:db:2a:e3:d3:5d:9e:83:bc:54:20:e6: 38:21:2b:97:a7:f6:66:9a:a4:e6:69:0a:a3:05:91:9e:d0:e3: 20:0e:fa:cf:54:96:8e:c9:a1:a9:94:6c:0b:27:6b:a7:ed:ed: b9:98:6e:05:c9:d0:87:2f:56:c7:fe:c3:80:af:49:ee:df:fb: f6:5b:c7:ec:3d:e6:93:dd:c4:44:f3:1d:72:7f:e1:ee:fd:91: 03:41:8b:47 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9WuwouqZGetiENWNchFDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTU1NTBlOTA4YTliOTY4OGMyOWFhYzk4OTUzNTNkZWE4MzZjNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifLjr0anLZZJib5RaqZ34L5fUt95 2AaGR1PkqeO+9pOtgeGoIJlCqHR0Fk91LTpyeubDXC/s7RvOVkRYA/GT1uxDvxJl Aq8b725qJsd3HxTYLHmmegcIrAgpQKHaburn72+Uq0Dbo1xxw1CjiE8EEG5p0Z+R AhUQZbe/6GHf32caz/tSsq0sUeXVZgD9D3UZ74oS2CsA+4VVnkn3gPW3X2aETpLN zjiDALCHdPilLn+iKiSsJZPfSbyr/iMHDQmZ/D2KsGQLw4qIB+rE5GbA/MBoU92A NA8UkO9meflzd41iS7Ua9Nj/0MxQBRFTF03iPywHFooaAhnmenSptF3EbwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFJpVUOkIqblojCmqyYlTU96oNsRaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2JiYjMw Yi0yNjg4LTRhNmUtYjJhMi0xMzk5YTI4MjIyN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvYmJiMzBi LTI2ODgtNGE2ZS1iMmEyLTEzOTlhMjgyMjI3YS8xL21sVlE2UWlwdVdpTUthckpp Vk5UM3FnMnhGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDlX5IAwQCuQt8MA0EAgACMAcDBQMqAumAMA0G CSqGSIb3DQEBCwUAA4IBAQBEouyIm6l994WMXgjVDiPyspDDD4z909oRk7vO6k+1 QzJQHLY+uJ1MplQWsFmmbNAYSCQgukfKdZzrP0KtQwPT/EkIlpjkQVkLFmDPRS9Y 7SWGHslAXUW+LRxSui97hjzKraXSNm0mZpM5XoiVMZtUavSVT8puxNMNJf+9f8t/ BaG8Mq1ZIR0bKQalIouilguZ5lgzAHryDspJEnry4Gx7cJhlwzadyCwl2yrj012e g7xUIOY4ISuXp/ZmmqTmaQqjBZGe0OMgDvrPVJaOyaGplGwLJ2un7e25mG4FydCH L1bH/sOAr0nu3/v2W8fsPeaT3cRE8x1yf+Hu/ZEDQYtH -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:35 2026 by rpki-client