This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer File: mnuajNgZ9KkgM01-cuwjQIcNd0k.cer (raw, json) Hash identifier: BxTxIo7PAiV9/2IM8vN/XEEQIOITo7CXD1dm2wYdSAY= Subject key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED61FCA98EAE2AC6F8BDBB1EA842A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24638 AS: 42481 AS: 44696 AS: 57306 IP: 81.19.64.0/19 IP: 85.202.240.0/20 IP: 91.192.148.0/22 IP: 91.220.133.0/24 IP: 185.110.56.0/22 IP: 195.114.104.0/23 IP: 2a02:6b0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:fc:a9:8e:ae:2a:c6:f8:bd:bb:1e:a8:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:4e:71:da:98:4d:c5:c2:30:93:29:e9:78: 00:28:5d:6e:f7:2d:cf:04:4d:ce:b5:5a:2a:26:32: 56:fd:b4:5f:cd:17:0f:77:45:9a:aa:95:46:31:57: 0e:84:aa:5b:c1:62:5c:55:68:bf:f8:07:75:43:a2: b8:35:41:94:d3:58:3d:e0:d4:f0:88:70:7c:b7:a7: 97:8b:d8:1a:4b:1e:d5:35:d8:fa:2e:e8:b0:a4:c2: 0e:12:1d:34:cc:27:88:8b:3a:8a:ee:4d:d2:e2:bd: bb:f1:a5:3a:3d:dd:37:b9:35:49:13:0a:cc:11:15: 87:c9:99:db:b6:5c:0a:45:69:61:83:04:59:7c:0a: b0:5a:94:a5:d4:c3:f4:f1:44:c8:80:0d:a6:cc:a7: 70:04:73:6d:90:eb:65:11:e6:38:7c:4e:63:3d:ac: 4e:27:20:36:1f:78:8e:5e:c1:08:7a:5b:04:c6:e5: 2f:99:24:ad:d2:65:bb:ee:2d:77:cd:9a:70:68:1a: 03:3f:eb:99:2a:66:50:3f:c3:3a:31:81:20:b9:23: 5b:41:fd:a1:d6:33:df:a4:6b:c6:19:83:c1:1a:bf: 67:9e:58:ca:86:3e:d5:fe:3c:e3:ef:0a:73:71:cd: 32:4d:1b:50:7d:57:fd:39:9f:36:34:d8:ac:60:e1: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.64.0/19 85.202.240.0/20 91.192.148.0/22 91.220.133.0/24 185.110.56.0/22 195.114.104.0/23 IPv6: 2a02:6b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24638 42481 44696 57306 Signature Algorithm: sha256WithRSAEncryption ac:a7:8a:5f:de:37:1f:40:30:e0:ef:b2:90:bd:c6:dd:54:9d: c0:ca:03:c5:49:ac:35:ac:75:18:30:56:e7:b2:66:55:9a:aa: ec:0d:2a:b8:36:ff:c9:93:3c:e5:61:75:d7:bf:39:ae:ba:a4: 86:c0:94:c0:a4:78:3a:83:80:2b:2f:a9:a8:96:e0:b3:d4:4b: 1c:43:18:6d:5d:80:08:4c:a1:a5:3e:34:d7:c0:a6:1d:19:2c: 62:0f:cf:dd:98:eb:f1:7b:80:3f:e9:04:59:87:eb:23:bf:1f: cb:ce:36:d2:63:82:a2:f2:53:be:2f:b5:f4:b5:87:22:e5:df: c8:63:18:24:f0:73:77:d9:c6:ee:25:23:96:7f:98:24:2b:75: 13:b8:4e:14:94:4f:56:84:f7:74:09:9a:d7:13:6b:9e:d2:e9: 29:63:e2:2b:ae:5c:72:37:bc:86:86:e2:78:51:e6:04:42:68: 3a:e1:5b:2b:68:00:f3:ad:f3:1a:87:5e:ae:f6:3b:f4:2d:f5: 35:02:a2:2e:50:f5:9e:a1:6f:50:07:0e:97:cd:da:ad:f7:85: 4d:ab:22:79:07:b7:85:15:b4:1e:5a:8f:26:34:b8:e2:5d:2b: bb:74:bf:06:e8:06:f0:aa:28:06:80:0d:4f:69:a9:e8:ab:54: 57:66:10:47 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt57WH8qY6uKsb4vbseqEKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTdiOWE4Y2Q4MTlmNGE5MjAzMzRkN2U3MmVjMjM0MDg3MGQ3NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHhOcdqYTcXCMJMp6XgAKF1u9y3P BE3OtVoqJjJW/bRfzRcPd0WaqpVGMVcOhKpbwWJcVWi/+Ad1Q6K4NUGU01g94NTw iHB8t6eXi9gaSx7VNdj6LuiwpMIOEh00zCeIizqK7k3S4r278aU6Pd03uTVJEwrM ERWHyZnbtlwKRWlhgwRZfAqwWpSl1MP08UTIgA2mzKdwBHNtkOtlEeY4fE5jPaxO JyA2H3iOXsEIelsExuUvmSSt0mW77i13zZpwaBoDP+uZKmZQP8M6MYEguSNbQf2h 1jPfpGvGGYPBGr9nnljKhj7V/jzj7wpzcc0yTRtQfVf9OZ82NNisYOEemQIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFJp7mozYGfSpIDNNfnLsI0CHDXdJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzdlMGVi Yi00Njg2LTQwNmUtYjk5Zi0yMWZhZjE0NGNiNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2UwZWJi LTQ2ODYtNDA2ZS1iOTlmLTIxZmFmMTQ0Y2I2Mi8xL21udWFqTmdaOUtrZ00wMS1j dXdqUUljTmQway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQFURNAAwQEVcrwAwQCW8CUAwQAW9yFAwQCuW44 AwQBw3JoMA0EAgACMAcDBQAqAgawMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAmA+ AgMApfECAwCumAIDAN/aMA0GCSqGSIb3DQEBCwUAA4IBAQCsp4pf3jcfQDDg77KQ vcbdVJ3AygPFSaw1rHUYMFbnsmZVmqrsDSq4Nv/JkzzlYXXXvzmuuqSGwJTApHg6 g4ArL6moluCz1EscQxhtXYAITKGlPjTXwKYdGSxiD8/dmOvxe4A/6QRZh+sjvx/L zjbSY4Ki8lO+L7X0tYci5d/IYxgk8HN32cbuJSOWf5gkK3UTuE4UlE9WhPd0CZrX E2ue0ukpY+IrrlxyN7yGhuJ4UeYEQmg64VsraADzrfMah16u9jv0LfU1AqIuUPWe oW9QBw6Xzdqt94VNqyJ5B7eFFbQeWo8mNLjiXSu7dL8G6AbwqigGgA1Paanoq1RX ZhBH -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:57 2026 by rpki-client