This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer File: moI9HNrrg3dfH7vV-frkGsXfFxk.cer (raw, json) Hash identifier: MySwHdCxhtcmrnepsP3jlACRw1/sA9J8Pm4mYpVWJMs= Subject key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC978B8C839B2D540ADC2576D88CF12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48044 IP: 46.172.160.0/19 IP: 91.205.240.0/22 IP: 91.215.212.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:78:b8:c8:39:b2:d5:40:ad:c2:57:6d:88:cf:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:cf:73:a9:96:a5:f6:41:b1:9b:64:0f:a6: 39:6c:72:33:92:b3:d9:b7:b5:29:c8:f4:ef:04:93: 40:cf:40:f5:dd:11:9c:6d:d6:9c:f4:48:91:57:6f: 5c:66:74:f3:8e:ce:4a:a3:73:1e:96:53:53:0c:71: 17:c4:02:32:f2:64:89:e1:54:ad:e2:93:0c:32:f2: 55:3b:33:c6:0d:bb:0f:4f:0b:66:38:f7:50:29:59: 18:0f:25:bb:7a:73:7b:fb:34:14:47:7a:20:c0:3b: 54:06:fc:fb:2a:65:f6:20:70:e0:56:d6:c7:97:b5: f7:f7:73:53:9f:b6:99:fa:99:a2:14:5d:39:93:a7: 0b:f5:c7:1e:d8:2c:16:bc:c1:81:f4:75:2a:b2:f1: 09:ba:27:e7:ff:e7:9d:5a:6e:6f:21:49:c3:35:f5: b7:e5:18:39:31:cf:89:4c:cf:8e:06:41:ce:ad:b4: 37:27:7e:d3:5c:16:bc:1f:f3:2d:31:d0:d3:ce:55: 4e:0a:f3:ba:76:ba:e4:09:b6:bc:84:cd:e4:4c:de: 0d:df:70:b1:56:fa:33:0d:33:0d:43:07:8e:58:a4: 65:92:1e:a1:9d:88:a4:ca:0e:17:6e:6b:69:47:9e: 27:7c:81:ed:7c:b1:d3:b5:4b:e2:dc:63:a7:cf:62: ef:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.160.0/19 91.205.240.0/22 91.215.212.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48044 Signature Algorithm: sha256WithRSAEncryption 37:9d:32:85:4b:9c:15:90:33:90:f6:0a:64:19:e6:80:74:25: 56:9d:02:8d:ea:01:a9:a0:d6:99:b0:df:f1:4f:0a:86:78:42: 9e:43:76:ab:c2:b8:51:df:25:a9:4d:ff:ba:53:de:39:f7:65: 14:e9:70:e2:88:30:c5:a9:cc:56:93:96:75:84:8f:bf:4e:e5: 93:e7:2d:ec:b3:8d:b1:57:a5:41:60:e6:17:80:32:78:00:af: b0:a4:24:85:f3:d5:2e:5c:93:f6:0f:84:5e:11:d9:4b:19:c3: ad:23:5f:4b:16:49:cd:4a:f3:ed:78:7f:5a:43:63:3a:f5:24: 5d:2c:2d:06:9c:b1:dc:1a:3e:35:83:52:a3:e6:3f:3f:63:34: 89:a4:2f:35:eb:88:ed:79:81:11:7f:0d:1e:45:ba:f5:b8:65: 13:5f:67:54:04:a1:a5:7a:a6:f9:1c:94:e1:62:3e:84:13:52: 5e:98:49:b3:bd:f9:9e:9a:b7:1a:0b:ff:34:c1:66:bc:29:20: 49:fb:26:bd:73:c5:57:24:f1:2d:33:3d:70:ff:d5:9d:de:c4: 22:fd:33:15:4d:aa:a5:de:ce:af:7b:fa:fd:15:d2:f9:f6:3e: 78:d4:b4:05:78:3a:ba:74:83:18:22:0b:fa:f9:ee:27:84:ad: f2:fd:06:d2 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt9yXi4yDmy1UCtwldtiM8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTgyM2QxY2RhZWI4Mzc3NWYxZmJiZDVmOWZhZTQxYWM1ZGYxNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskfPc6mWpfZBsZtkD6Y5bHIzkrPZ t7UpyPTvBJNAz0D13RGcbdac9EiRV29cZnTzjs5Ko3MellNTDHEXxAIy8mSJ4VSt 4pMMMvJVOzPGDbsPTwtmOPdQKVkYDyW7enN7+zQUR3ogwDtUBvz7KmX2IHDgVtbH l7X393NTn7aZ+pmiFF05k6cL9cce2CwWvMGB9HUqsvEJuifn/+edWm5vIUnDNfW3 5Rg5Mc+JTM+OBkHOrbQ3J37TXBa8H/MtMdDTzlVOCvO6drrkCba8hM3kTN4N33Cx VvozDTMNQweOWKRlkh6hnYikyg4XbmtpR54nfIHtfLHTtUvi3GOnz2Lv/QIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFJqCPRza64N3Xx+71fn65BrF3xcZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzBiZjNi Mi00ZGM0LTRlMjUtOWI5Yi0wMWY5YTdiNDk0ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvMGJmM2Iy LTRkYzQtNGUyNS05YjliLTAxZjlhN2I0OTRkYS8xL21vSTlITnJyZzNkZkg3dlYt ZnJrR3NYZkZ4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQFLqygAwQCW83wAwQCW9fUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwC7rDANBgkqhkiG9w0BAQsFAAOCAQEAN50yhUucFZAzkPYK ZBnmgHQlVp0CjeoBqaDWmbDf8U8KhnhCnkN2q8K4Ud8lqU3/ulPeOfdlFOlw4ogw xanMVpOWdYSPv07lk+ct7LONsVelQWDmF4AyeACvsKQkhfPVLlyT9g+EXhHZSxnD rSNfSxZJzUrz7Xh/WkNjOvUkXSwtBpyx3Bo+NYNSo+Y/P2M0iaQvNeuI7XmBEX8N HkW69bhlE19nVAShpXqm+RyU4WI+hBNSXphJs735npq3Ggv/NMFmvCkgSfsmvXPF VyTxLTM9cP/Vnd7EIv0zFU2qpd7Or3v6/RXS+fY+eNS0BXg6unSDGCIL+vnuJ4St 8v0G0g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:51 2026 by rpki-client