This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer File: mpGLgMuzJzekayRIaaatVQlUP6E.cer (raw, json) Hash identifier: /RFUQJrtmoiXHnSCa0XzCnCpu+9Fjid1qDXl1GqW1Aw= Subject key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B93C4865542623E5CF9DBA61FC18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51347 IP: 91.247.72.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b9:3c:48:65:54:26:23:e5:cf:9d:ba:61:fc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a918b80cbb32737a46b244869a6ad5509543fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:cf:22:df:85:77:98:14:34:dd:64:22:f8: 42:d3:83:53:92:36:c3:8a:2c:90:a1:a4:6f:4f:f5: 32:42:7d:ae:fe:d8:cf:1c:47:fd:9e:f9:f4:25:21: 99:d6:b1:69:7f:a2:fb:06:e7:ea:a6:37:81:0d:73: b0:b9:41:a0:b8:60:74:78:aa:ab:a7:df:02:ce:e9: c2:91:dd:87:13:0b:55:12:6b:27:2e:49:28:dd:46: a6:f5:a3:2f:82:57:4e:6a:da:c7:62:12:bb:46:a6: 55:6f:42:43:14:f2:d5:37:0c:97:be:05:df:b1:40: d0:c6:00:6a:51:2c:2f:be:33:f9:79:01:ee:11:03: 77:86:b2:56:57:e6:fc:51:2c:47:b4:00:92:c4:a4: a9:21:71:85:3d:84:95:4a:f4:d8:3b:6b:77:6a:87: 65:87:d6:23:9a:e8:8e:97:d2:ac:19:05:d6:bc:7d: 71:a7:21:cb:67:78:d3:c3:84:f7:55:59:40:4d:73: 1f:70:9b:c8:54:2f:37:57:1b:37:4e:c3:fc:f1:e5: 91:1c:b3:6c:a7:75:1d:ad:f4:e5:4c:cf:f7:e0:59: 31:58:1c:5f:3b:45:c0:1e:b8:fb:73:38:8a:0f:67: 0d:23:7d:ca:b0:cc:27:c3:32:5e:fa:a7:20:b2:9f: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.72.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51347 Signature Algorithm: sha256WithRSAEncryption a7:a7:97:3d:a0:aa:ab:2e:4e:0b:e1:67:4d:50:da:ce:f7:9a: e1:8f:07:f9:84:1e:f7:49:f3:b2:15:8f:df:e5:6d:5a:cc:cb: 99:7c:2c:7b:c5:8e:fc:89:02:78:99:4f:13:2f:d8:ba:25:28: 65:0c:ec:d8:f8:e4:2e:6e:d4:3a:fe:96:a0:03:12:97:8d:55: 3f:88:9c:f1:bf:07:cf:af:66:c9:7e:30:3e:97:a0:3d:34:0e: 20:4b:14:50:7a:ae:ee:c6:e3:88:f8:e2:f5:11:6b:5a:f0:e9: 96:c7:00:70:61:53:14:c8:f8:97:62:a3:a8:bf:0c:84:29:fd: 2a:db:fb:ce:de:91:b3:47:fb:a3:05:c9:b7:2a:66:56:f7:ee: 68:2c:2f:e9:36:cb:a9:88:36:8b:92:9d:46:a3:0b:4c:7f:ce: 4a:6b:46:25:b8:51:95:2f:c9:9b:33:05:7d:e2:fa:7d:1e:20: 42:c6:4b:c2:d7:a9:6b:33:66:99:3b:f0:e4:97:f5:b1:a8:db: ee:64:93:e6:65:d2:35:6b:db:cd:12:3d:f3:97:94:cf:eb:c7: 2f:dc:7c:4c:0b:76:ad:d7:b3:bd:df:96:33:61:b5:a6:97:73: 33:e7:8e:44:10:11:f6:f6:d9:42:75:06:75:c5:8c:f8:41:41: 9e:2e:f7:37 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yLk8SGVUJiPlz526YfwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTkxOGI4MGNiYjMyNzM3YTQ2YjI0NDg2OWE2YWQ1NTA5NTQzZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnovPIt+Fd5gUNN1kIvhC04NTkjbD iiyQoaRvT/UyQn2u/tjPHEf9nvn0JSGZ1rFpf6L7BufqpjeBDXOwuUGguGB0eKqr p98CzunCkd2HEwtVEmsnLkko3Uam9aMvgldOatrHYhK7RqZVb0JDFPLVNwyXvgXf sUDQxgBqUSwvvjP5eQHuEQN3hrJWV+b8USxHtACSxKSpIXGFPYSVSvTYO2t3aodl h9YjmuiOl9KsGQXWvH1xpyHLZ3jTw4T3VVlATXMfcJvIVC83Vxs3TsP88eWRHLNs p3UdrfTlTM/34FkxWBxfO0XAHrj7cziKD2cNI33KsMwnwzJe+qcgsp98awIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJqRi4DLsyc3pGskSGmmrVUJVD+hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzVjMGI0 YS0yZGE0LTQzYTUtOTI4OS0xOTM3YmRlOGNkNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNWMwYjRh LTJkYTQtNDNhNS05Mjg5LTE5MzdiZGU4Y2Q2Zi8xL21wR0xnTXV6Snpla2F5Uklh YWF0VlFsVVA2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/dIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDIkzANBgkqhkiG9w0BAQsFAAOCAQEAp6eXPaCqqy5OC+FnTVDazvea4Y8H+YQe 90nzshWP3+VtWszLmXwse8WO/IkCeJlPEy/YuiUoZQzs2PjkLm7UOv6WoAMSl41V P4ic8b8Hz69myX4wPpegPTQOIEsUUHqu7sbjiPji9RFrWvDplscAcGFTFMj4l2Kj qL8MhCn9Ktv7zt6Rs0f7owXJtypmVvfuaCwv6TbLqYg2i5KdRqMLTH/OSmtGJbhR lS/JmzMFfeL6fR4gQsZLwtepazNmmTvw5Jf1sajb7mST5mXSNWvbzRI985eUz+vH L9x8TAt2rdezvd+WM2G1ppdzM+eORBAR9vbZQnUGdcWM+EFBni73Nw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:03 2026 by rpki-client