This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer File: moBTvNLE2KeioyXit0ZBZqXkjd0.cer (raw, json) Hash identifier: jIbSwX2obZjtWL3jUs3trV3ibptYi0l8jMwW6KzgO8w= Subject key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8954990FC21DF5FEA3A2A2D2B4A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39862 AS: 41761 IP: 45.132.92.0/22 IP: 193.34.140.0/23 IP: 194.50.254.0/24 IP: 2a0e:69c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:89:54:99:0f:c2:1d:f5:fe:a3:a2:a2:d2:b4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:f8:0b:3a:a3:f0:45:41:b6:c0:10:a1:c8: ee:71:c1:90:16:55:58:59:6e:03:f7:6e:be:40:b4: b0:88:bf:0d:b4:22:50:9a:54:1c:73:8f:ef:33:e5: 26:0a:d5:a8:ef:48:01:a6:1d:c1:e9:98:88:53:91: 02:80:a2:c9:62:10:a8:46:54:77:4b:d7:0b:4b:7d: 65:4a:52:3e:1f:ca:57:64:16:c1:35:06:d3:dd:8f: 94:fe:c9:0f:ac:b9:fa:12:a0:8b:6c:90:4a:44:3c: ca:16:45:69:c8:24:06:2a:db:14:96:80:b5:11:3e: 59:0c:37:bc:05:cf:59:dc:49:26:05:df:cf:2e:dc: a9:c0:32:28:9e:31:b2:3e:80:b9:d2:f5:79:1a:1b: 42:54:b4:89:e2:5b:13:05:32:82:a0:31:95:8e:a0: 35:2c:d7:2a:01:34:e2:06:4c:bb:14:68:bf:07:23: 96:1f:b1:1b:25:6d:ad:ab:cf:1a:0e:ba:1f:3e:ab: 43:6c:b3:9a:a7:3b:0c:50:06:1b:a1:14:d0:e8:c3: 38:ee:91:61:6b:67:37:cd:34:3c:59:78:bd:19:5e: 32:b6:8c:4e:7d:60:58:00:3e:91:e1:c3:a5:7a:38: 0a:b4:0c:48:de:f9:76:55:f0:95:44:9e:a7:55:31: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.92.0/22 193.34.140.0/23 194.50.254.0/24 IPv6: 2a0e:69c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39862 41761 Signature Algorithm: sha256WithRSAEncryption 1c:9f:a9:af:bd:a5:f2:df:08:24:13:b4:cc:b8:91:0b:6a:55: 23:66:b8:0d:32:e1:05:6d:9c:96:f9:af:d0:2e:60:90:e0:dd: bc:c2:4f:55:b5:f5:75:6a:28:25:5d:26:ce:9f:e9:05:4b:2b: 50:30:7d:88:b0:26:02:d7:8c:97:92:39:b2:fe:76:07:ab:bf: be:34:89:64:e0:91:9d:96:e7:ba:48:a7:42:bb:79:1d:8d:eb: 8d:28:a1:49:54:61:98:95:8e:b1:60:55:5a:29:88:51:35:a2: 3a:f7:db:f1:b6:46:00:23:2d:5f:02:d6:68:31:9c:43:09:5f: d2:db:08:e2:27:8d:93:0f:03:68:b7:00:5c:76:91:f1:40:a9: 7b:c2:2f:6c:f0:b8:60:db:57:54:ee:0d:12:dd:b1:f9:ff:83: e5:d2:4f:a4:19:46:40:68:d6:2a:b8:fc:de:df:35:f4:65:78: 0b:f8:12:2d:0c:ca:4c:ce:e9:e7:e1:b0:7a:24:c6:29:b7:63: 1a:3b:7e:7c:11:29:77:64:03:bb:18:3b:8c:8a:39:a9:ce:be: e5:b5:92:86:11:09:62:d1:fc:2b:03:06:cf:7a:67:73:0f:2a: 12:4b:c3:57:00:71:93:c9:4c:d2:01:a2:c4:1a:6b:e5:4a:30: b6:aa:08:7b -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt6WolUmQ/CHfX+o6Ki0rSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTgwNTNiY2QyYzRkOGE3YTJhMzI1ZTJiNzQ2NDE2NmE1ZTQ4ZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RL4Czqj8EVBtsAQocjuccGQFlVY WW4D926+QLSwiL8NtCJQmlQcc4/vM+UmCtWo70gBph3B6ZiIU5ECgKLJYhCoRlR3 S9cLS31lSlI+H8pXZBbBNQbT3Y+U/skPrLn6EqCLbJBKRDzKFkVpyCQGKtsUloC1 ET5ZDDe8Bc9Z3EkmBd/PLtypwDIonjGyPoC50vV5GhtCVLSJ4lsTBTKCoDGVjqA1 LNcqATTiBky7FGi/ByOWH7EbJW2tq88aDrofPqtDbLOapzsMUAYboRTQ6MM47pFh a2c3zTQ8WXi9GV4ytoxOfWBYAD6R4cOlejgKtAxI3vl2VfCVRJ6nVTHH5QIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFJqAU7zSxNinoqMl4rdGQWal5I3dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2Q5NjE4 OS1lZWUxLTRlOWYtOWQ2MC05NWU4ZDgyOTMwOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZDk2MTg5 LWVlZTEtNGU5Zi05ZDYwLTk1ZThkODI5MzA5OC8xL21vQlR2TkxFMktlaW95WGl0 MFpCWnFYa2pkMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLYRcAwQBwSKMAwQAwjL+MA0EAgACMAcDBQMq DmnAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCbtgIDAKMhMA0GCSqGSIb3DQEB CwUAA4IBAQAcn6mvvaXy3wgkE7TMuJELalUjZrgNMuEFbZyW+a/QLmCQ4N28wk9V tfV1aiglXSbOn+kFSytQMH2IsCYC14yXkjmy/nYHq7++NIlk4JGdlue6SKdCu3kd jeuNKKFJVGGYlY6xYFVaKYhRNaI699vxtkYAIy1fAtZoMZxDCV/S2wjiJ42TDwNo twBcdpHxQKl7wi9s8Lhg21dU7g0S3bH5/4Pl0k+kGUZAaNYquPze3zX0ZXgL+BIt DMpMzunn4bB6JMYpt2MaO358ESl3ZAO7GDuMijmpzr7ltZKGEQli0fwrAwbPemdz DyoSS8NXAHGTyUzSAaLEGmvlSjC2qgh7 -----END CERTIFICATE-----Generated at Mon Jan 12 02:16:55 2026 by rpki-client