This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer File: mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer (raw, json) Hash identifier: rG8Yo/Ir6HFTJDBN3dAHJmScb2DYugKEZSNxXr8guk8= Subject key identifier: 9A:62:C4:A3:9A:CE:CC:DE:1E:78:1E:7E:CC:2F:02:29:4F:0C:21:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA04686C25B99A82F5FF1D9C4E31DA29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 11:15:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198311 IP: 194.113.56.0/24 IP: 194.174.72.0/21 IP: 195.93.198.0/23 IP: 2001:67c:2880::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:04:68:6c:25:b9:9a:82:f5:ff:1d:9c:4e:31:da:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 11:15:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a62c4a39aceccde1e781e7ecc2f02294f0c213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:8c:e8:88:f1:75:2c:84:ad:8b:3e:c5:3f: 97:60:b5:1c:56:ca:57:d6:66:8a:38:41:a1:3b:c4: 1c:a8:18:5c:74:68:0a:72:ad:80:bd:a4:5a:7e:52: 94:3b:75:ca:a7:5f:55:da:fc:a6:89:22:03:64:7b: 62:55:1f:84:72:51:16:13:47:27:8a:52:b6:65:aa: bf:12:b1:7a:03:c4:0f:c6:92:6c:0e:08:f6:66:bd: cd:e1:f8:e5:cf:43:b1:60:0e:6f:36:ef:63:8d:cd: 62:13:f3:8d:70:00:ff:4b:6d:d3:b8:fa:8d:c9:24: fc:f4:66:d6:2b:ed:4f:0d:a6:34:e9:44:88:34:27: a6:bc:60:b9:7e:21:dc:df:17:78:88:50:f9:ab:43: 49:49:c7:26:3e:b8:4b:bf:9e:92:b0:66:dd:7d:56: da:8d:cb:64:67:34:89:ac:e2:34:6d:7b:6e:5b:4d: dd:e4:0b:81:56:ab:34:94:ec:4b:8c:78:8a:5a:30: c0:f5:f7:79:d7:ba:88:a2:1c:63:83:81:c9:eb:7d: 2c:aa:c7:a7:49:49:39:a6:45:9f:8b:83:dd:f1:c9: 14:0b:2d:a5:11:de:21:84:64:fc:a4:a5:60:26:55: ca:48:61:f0:30:61:fa:d3:9d:e9:ef:34:43:22:58: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:62:C4:A3:9A:CE:CC:DE:1E:78:1E:7E:CC:2F:02:29:4F:0C:21:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.56.0/24 194.174.72.0/21 195.93.198.0/23 IPv6: 2001:67c:2880::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198311 Signature Algorithm: sha256WithRSAEncryption 49:1c:06:b8:77:ad:8a:33:2a:20:e9:5c:b8:61:c5:3b:d3:bd: c4:d6:f5:e2:74:ca:b7:de:8c:47:e7:1a:f1:35:58:52:32:a5: a5:cd:16:55:ca:3c:35:cc:12:78:d7:dc:bf:14:72:3b:9e:dc: d7:03:da:ce:7a:db:13:2e:44:7c:67:e6:a9:f1:ca:71:b3:0c: 32:07:8f:23:da:58:d2:f0:10:d6:df:d4:63:4a:bf:96:2e:13: 08:46:84:54:f9:ec:0c:68:99:6e:c3:83:b1:fd:d4:c9:9b:da: 0d:e8:c2:91:27:6b:32:c6:30:0f:93:83:ed:80:f8:28:49:e6: de:4f:64:03:7c:dc:b3:4e:70:c1:4d:00:11:2c:28:61:57:70: 99:81:e4:b4:e0:90:65:c3:67:06:3e:4e:fb:8f:6a:95:b4:5a: 6c:ae:c3:18:b5:fb:5e:df:28:8e:c4:d6:2d:ea:89:70:b4:60: 9a:dc:9b:b7:eb:cc:0f:9c:21:bc:75:c8:a3:60:d4:1d:95:4f: 17:48:41:a3:78:b0:77:78:52:76:be:f0:69:78:b1:1d:3c:56: b6:9d:db:48:be:a3:62:e2:51:2c:5a:3f:9c:4d:a4:72:68:c0: 4f:8e:b9:7b:53:e0:15:52:b9:ea:1b:72:f0:98:23:25:af:5e: 3b:bf:f8:9a -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZv6BGhsJbmagvX/HZxOMdopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTExNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTYyYzRhMzlhY2VjY2RlMWU3ODFlN2VjYzJmMDIyOTRmMGMyMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKSM6IjxdSyErYs+xT+XYLUcVspX 1maKOEGhO8QcqBhcdGgKcq2AvaRaflKUO3XKp19V2vymiSIDZHtiVR+EclEWE0cn ilK2Zaq/ErF6A8QPxpJsDgj2Zr3N4fjlz0OxYA5vNu9jjc1iE/ONcAD/S23TuPqN yST89GbWK+1PDaY06USINCemvGC5fiHc3xd4iFD5q0NJSccmPrhLv56SsGbdfVba jctkZzSJrOI0bXtuW03d5AuBVqs0lOxLjHiKWjDA9fd517qIohxjg4HJ630sqsen SUk5pkWfi4Pd8ckUCy2lEd4hhGT8pKVgJlXKSGHwMGH6053p7zRDIlgMUQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFJpixKOazszeHngefswvAilPDCE+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzNhMGM0 MS1lZjgwLTRmNGMtYWJiMi01ZDY4OGRmZDFmYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvM2EwYzQx LWVmODAtNGY0Yy1hYmIyLTVkNjg4ZGZkMWZiOC8xL21tTEVvNXJPek40ZWVCNS16 QzhDS1U4TUlUNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQAwnE4AwQDwq5IAwQBw13GMA8EAgACMAkDBwAg AQZ8KIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwanMA0GCSqGSIb3DQEBCwUA A4IBAQBJHAa4d62KMyog6Vy4YcU7073E1vXidMq33oxH5xrxNVhSMqWlzRZVyjw1 zBJ419y/FHI7ntzXA9rOetsTLkR8Z+ap8cpxswwyB48j2ljS8BDW39RjSr+WLhMI RoRU+ewMaJluw4Ox/dTJm9oN6MKRJ2syxjAPk4PtgPgoSebeT2QDfNyzTnDBTQAR LChhV3CZgeS04JBlw2cGPk77j2qVtFpsrsMYtfte3yiOxNYt6olwtGCa3Ju368wP nCG8dcijYNQdlU8XSEGjeLB3eFJ2vvBpeLEdPFa2ndtIvqNi4lEsWj+cTaRyaMBP jrl7U+AVUrnqG3LwmCMlr147v/ia -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:40 2026 by rpki-client