This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer File: mnF-0dxIgETl4qsAdUM1WM_ejIU.cer (raw, json) Hash identifier: q4efZSSPfClS17sTVxKyK6f+11mkhkjjQN/1vOMJ48w= Subject key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8332EADC0C55BE339C5ECFC6228AE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15425 AS: 30764 IP: 5.53.8.0/21 IP: 31.28.128.0/19 IP: 46.47.128.0/18 IP: 62.129.32.0/19 IP: 78.157.128.0/19 IP: 82.209.0.0/18 IP: 84.16.96.0/19 IP: 84.21.96.0/19 IP: 85.135.0.0/17 IP: 86.61.128.0/17 IP: 89.29.0.0/17 IP: 91.106.240.0/20 IP: 93.181.64.0/18 IP: 94.242.64.0/18 IP: 128.0.176.0/20 IP: 164.215.112.0/20 IP: 176.227.248.0/21 IP: 185.5.68.0/22 IP: 188.134.128.0/17 IP: 193.165.0.0/16 IP: 212.109.176.0/20 IP: 213.216.32.0/19 IP: 2a00:ca8::/32 IP: 2a02:c38::/32 IP: 2a03:6e80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:32:ea:dc:0c:55:be:33:9c:5e:cf:c6:22:8a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:67:53:93:18:b7:14:5a:73:21:a6:1f:39:68: 0f:c4:52:50:45:d0:70:25:1c:53:b1:f4:55:65:c8: 97:d4:7b:be:22:58:44:9d:66:4e:75:57:3f:93:7e: f9:ec:02:16:48:11:2e:a4:01:7e:e1:f0:ff:ba:b4: 34:96:e4:1a:eb:25:8e:86:f9:96:ca:8f:36:5d:de: 59:17:35:c4:91:a7:f1:80:84:f8:ed:23:ea:20:21: 31:04:5e:89:c3:86:f0:6e:82:ca:bb:f4:2d:9b:18: 4e:7e:3b:5a:e4:96:5b:53:e3:2e:cf:cc:3d:18:36: 32:1a:02:57:71:80:92:17:6d:b0:a7:72:42:2e:6e: 91:be:f5:93:52:5a:fb:0f:4d:96:25:4b:66:03:e9: da:5a:98:c6:61:cc:7d:30:d7:a7:14:22:f9:ba:75: a0:63:bc:61:0e:26:c1:ff:0b:8b:78:d2:bd:2d:79: 92:ca:53:37:1c:2a:ad:8b:61:48:e8:63:c7:42:5f: 6d:94:dc:d8:fd:69:ef:89:4e:c0:96:58:14:a6:ac: 42:97:9f:b1:c5:34:53:fe:d5:67:2e:a3:bc:11:c0: 3b:63:a2:33:40:00:5b:e4:51:23:27:98:79:f3:76: d4:01:e4:ee:5c:4e:c6:1e:cf:59:3e:1c:e0:fa:21: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.53.8.0/21 31.28.128.0/19 46.47.128.0/18 62.129.32.0/19 78.157.128.0/19 82.209.0.0/18 84.16.96.0/19 84.21.96.0/19 85.135.0.0/17 86.61.128.0/17 89.29.0.0/17 91.106.240.0/20 93.181.64.0/18 94.242.64.0/18 128.0.176.0/20 164.215.112.0/20 176.227.248.0/21 185.5.68.0/22 188.134.128.0/17 193.165.0.0/16 212.109.176.0/20 213.216.32.0/19 IPv6: 2a00:ca8::/32 2a02:c38::/32 2a03:6e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15425 30764 Signature Algorithm: sha256WithRSAEncryption 4b:f7:b4:19:48:82:ce:5c:0e:73:c4:70:f3:e6:b9:36:35:bc: 9f:96:1a:1a:74:33:90:be:1d:63:42:45:db:76:ea:1f:40:0f: ff:99:ff:c3:6f:0a:f4:b3:65:64:ab:5e:c4:5d:64:a7:64:ca: 03:d2:96:4a:36:08:2b:08:0c:0a:0d:ce:d6:3e:5a:61:c2:06: b8:9e:f3:7b:56:40:be:ee:97:5d:b9:9e:b8:06:85:0d:8d:e3: 2b:26:83:ae:96:c4:ea:fb:80:13:7a:2f:5d:52:93:b5:e9:64: e4:a2:1b:15:69:0e:94:13:72:9c:31:28:71:19:5d:08:25:f5: 53:1f:af:43:e1:73:dc:c5:3e:91:5c:73:b2:cc:90:c1:1b:6e: b5:83:c3:97:06:bd:8b:dc:97:79:34:58:7d:2e:06:23:da:f5: 2d:ce:5c:76:9d:60:ad:7a:2a:37:22:75:5b:76:9c:c4:1a:ba: 49:2f:c7:02:d3:2f:65:d0:11:3d:13:b7:eb:ba:c1:5d:d6:41: 4e:89:fc:1f:42:9b:5a:d4:f1:00:62:08:91:ea:27:0a:17:72: a2:1a:97:6b:b5:8d:1c:1a:04:ba:51:07:0f:de:9d:2a:c0:8a: 07:7e:8d:19:d9:a6:1d:65:f9:af:87:bd:7a:b3:af:0c:69:21: 7b:99:d4:37 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgISAZt/gzLq3AxVvjOcXs/GIorhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTcxN2VkMWRjNDg4MDQ0ZTVlMmFiMDA3NTQzMzU1OGNmZGU4Yzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGdTkxi3FFpzIaYfOWgPxFJQRdBw JRxTsfRVZciX1Hu+IlhEnWZOdVc/k3757AIWSBEupAF+4fD/urQ0luQa6yWOhvmW yo82Xd5ZFzXEkafxgIT47SPqICExBF6Jw4bwboLKu/QtmxhOfjta5JZbU+Muz8w9 GDYyGgJXcYCSF22wp3JCLm6RvvWTUlr7D02WJUtmA+naWpjGYcx9MNenFCL5unWg Y7xhDibB/wuLeNK9LXmSylM3HCqti2FI6GPHQl9tlNzY/WnviU7AllgUpqxCl5+x xTRT/tVnLqO8EcA7Y6IzQABb5FEjJ5h583bUAeTuXE7GHs9ZPhzg+iGd0wIDAQAB o4IDQjCCAz4wHQYDVR0OBBYEFJpxftHcSIBE5eKrAHVDNVjP3oyFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2QyNjFj MS1kN2YzLTRmZTgtYWJjNi0xMDk0MzkxNjY5ZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvZDI2MWMx LWQ3ZjMtNGZlOC1hYmM2LTEwOTQzOTE2NjllZi8xL21uRi0wZHhJZ0VUbDRxc0Fk VU0xV01fZWpJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG9BggrBgEF BQcBBwEB/wSBrTCBqjCBigQCAAEwgYMDBAMFNQgDBAUfHIADBAYuL4ADBAU+gSAD BAVOnYADBAZS0QADBAVUEGADBAVUFWADBAdVhwADBAdWPYADBAdZHQADBARbavAD BAZdtUADBAZe8kADBASAALADBASk13ADBAOw4/gDBAK5BUQDBAe8hoADAwDBpQME BNRtsAMEBdXYIDAbBAIAAjAVAwUAKgAMqAMFACoCDDgDBQAqA26AMB0GCCsGAQUF BwEIAQH/BA4wDKAKMAgCAjxBAgJ4LDANBgkqhkiG9w0BAQsFAAOCAQEAS/e0GUiC zlwOc8Rw8+a5NjW8n5YaGnQzkL4dY0JF23bqH0AP/5n/w28K9LNlZKtexF1kp2TK A9KWSjYIKwgMCg3O1j5aYcIGuJ7ze1ZAvu6XXbmeuAaFDY3jKyaDrpbE6vuAE3ov XVKTtelk5KIbFWkOlBNynDEocRldCCX1Ux+vQ+Fz3MU+kVxzssyQwRtutYPDlwa9 i9yXeTRYfS4GI9r1Lc5cdp1grXoqNyJ1W3acxBq6SS/HAtMvZdARPRO367rBXdZB Ton8H0KbWtTxAGIIkeonChdyohqXa7WNHBoEulEHD96dKsCKB36NGdmmHWX5r4e9 erOvDGkhe5nUNw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:44 2026 by rpki-client