This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer File: mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer (raw, json) Hash identifier: c2jijK//3q6/mxhcgATwv530Hhv4uKYOboEHiZrPLYU= Subject key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59E4CF9FD20637D01D37A4E7B5CA74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34998 IP: 193.189.120.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:e4:cf:9f:d2:06:37:d0:1d:37:a4:e7:b5:ca:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:21:c0:ab:94:2e:1d:0e:c9:55:af:17:f8: f1:d4:c9:34:e5:17:ce:05:26:c6:7e:e3:54:7b:b0: bf:f6:76:f2:7e:1a:3b:d8:9f:a5:07:80:25:33:bc: d6:40:8b:33:e8:9d:ec:ec:e9:3a:69:d1:c9:7a:69: 4f:1f:01:95:c3:ca:af:3f:e6:9e:7c:10:56:67:a4: a2:00:97:b8:88:60:bb:6a:19:23:ba:71:98:f7:9c: 8d:92:99:64:cd:b3:7b:19:53:e4:48:65:bb:43:02: 65:84:9d:cc:b0:6e:82:c9:b1:32:13:b0:22:19:86: 53:b3:86:88:80:31:bc:5a:23:55:f9:62:a2:12:d3: 0a:88:ff:f9:09:3a:5a:be:ed:1d:b1:02:92:9c:03: f9:05:01:6e:e9:0c:6c:fa:04:cf:0a:07:0e:9c:c7: 53:52:05:90:79:00:64:59:f4:4e:25:25:8a:17:f2: 89:3c:55:3c:cd:9b:c7:1a:74:0e:44:1a:dd:c5:f2: ca:54:dc:1f:f5:73:d6:0e:34:e0:96:9c:7b:36:7b: a7:63:2c:70:0d:2d:cb:80:3a:ec:6e:27:00:c8:ae: 00:ff:f5:2f:e5:5e:5d:34:3f:a3:fc:a4:19:a8:88: 7e:30:e1:40:6c:d9:c6:c3:5d:9b:d5:39:1e:37:f8: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.120.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34998 Signature Algorithm: sha256WithRSAEncryption 5e:5d:01:80:a8:d1:fb:29:fd:be:22:14:7c:6c:9f:8e:0b:80: 59:4c:f9:22:27:8e:ce:c7:0e:7b:ee:3f:51:6c:74:ec:48:e1: 6d:8c:4b:a5:ca:30:86:c3:f6:47:52:ab:d7:a8:03:3f:c0:7a: 47:94:05:66:57:29:fb:bd:fa:f2:0c:49:37:cf:d8:ba:c8:f6: eb:ee:83:6a:cb:ea:9a:7b:62:a0:c4:32:51:82:2a:47:05:79: f5:d5:83:31:e7:f0:41:f0:4d:a5:11:e4:ea:a9:21:02:82:a3: 6b:6f:64:d9:07:22:dd:d2:f2:59:1d:f2:9a:85:b0:29:d5:3c: 93:b6:32:66:f4:5b:7e:8b:2f:f3:f0:b3:95:f0:f6:d9:93:59: d3:92:1a:44:23:eb:f4:57:b9:60:89:dc:d4:73:c8:96:1e:43: 7e:e8:c6:84:55:bf:bf:8c:b0:21:18:90:5e:7a:49:8d:a8:72: db:6e:a1:ac:53:c9:8f:13:f3:b0:8d:17:68:4b:89:48:a3:bb: 87:e8:5f:fa:a0:c8:82:3f:b7:53:68:75:b0:50:5a:bd:e7:24: 7a:08:e2:3d:88:05:82:f0:57:b3:11:fe:6d:8b:0f:c2:e9:39: df:e8:44:00:e9:e8:a0:35:a4:94:99:60:5f:9c:d8:cd:07:96: 91:e6:98:9b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WeTPn9IGN9AdN6Tntcp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTk1ZjE1MmNjYTI0MTFkNDBiMWY1MjA1OTFiZTNiM2ExMWJjZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRghwKuULh0OyVWvF/jx1Mk05RfO BSbGfuNUe7C/9nbyfho72J+lB4AlM7zWQIsz6J3s7Ok6adHJemlPHwGVw8qvP+ae fBBWZ6SiAJe4iGC7ahkjunGY95yNkplkzbN7GVPkSGW7QwJlhJ3MsG6CybEyE7Ai GYZTs4aIgDG8WiNV+WKiEtMKiP/5CTpavu0dsQKSnAP5BQFu6Qxs+gTPCgcOnMdT UgWQeQBkWfROJSWKF/KJPFU8zZvHGnQORBrdxfLKVNwf9XPWDjTglpx7NnunYyxw DS3LgDrsbicAyK4A//Uv5V5dND+j/KQZqIh+MOFAbNnGw12b1TkeN/hk4QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJqV8VLMokEdQLH1IFkb47OhG83wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2ViNjhk Ni1mNmMzLTQzMTgtOWU4My1iM2I2YzhmZWNjNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvZWI2OGQ2 LWY2YzMtNDMxOC05ZTgzLWIzYjZjOGZlY2M2NC8xL21wWHhVc3lpUVIxQXNmVWdX UnZqczZFYnpmQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwb14MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCItjANBgkqhkiG9w0BAQsFAAOCAQEAXl0BgKjR+yn9viIUfGyfjguAWUz5IieO zscOe+4/UWx07EjhbYxLpcowhsP2R1Kr16gDP8B6R5QFZlcp+7368gxJN8/Yusj2 6+6DasvqmntioMQyUYIqRwV59dWDMefwQfBNpRHk6qkhAoKja29k2Qci3dLyWR3y moWwKdU8k7YyZvRbfosv8/CzlfD22ZNZ05IaRCPr9Fe5YInc1HPIlh5DfujGhFW/ v4ywIRiQXnpJjahy226hrFPJjxPzsI0XaEuJSKO7h+hf+qDIgj+3U2h1sFBaveck egjiPYgFgvBXsxH+bYsPwuk53+hEAOnooDWklJlgX5zYzQeWkeaYmw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:48 2026 by rpki-client