This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer File: mpdRVlcXWpRsyNthlsobIVTjgRQ.cer (raw, json) Hash identifier: 30I35RyZSrfxk1Wk98kCZZOkfLFYiEqY8xxUjns6Z7k= Subject key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3938A266E2A36821DADEDA7807D708 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215868 IP: 89.40.28.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:38:a2:66:e2:a3:68:21:da:de:da:78:07:d7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a97515657175a946cc8db6196ca1b2154e38114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:24:89:d0:99:e6:14:18:c9:a8:a2:ec:0d: b4:71:41:a6:bd:4b:fd:a9:6b:be:60:dd:4a:89:a0: 71:97:ff:a8:d6:43:af:dc:87:e3:9a:fe:e6:59:92: 9b:d8:5e:76:fd:2f:b3:3b:a4:f0:d7:b2:29:c4:d7: 1c:bc:9d:2a:ae:ea:5a:e0:5a:c5:91:18:8f:a3:20: 51:5a:fa:dc:5e:0e:66:3b:78:e3:0d:dc:8b:c6:66: fa:c1:c7:83:0b:04:25:f0:23:52:76:2f:20:47:e4: ea:26:93:71:bb:15:8b:02:ef:af:67:54:15:1f:2d: 5e:06:4e:1a:16:cb:a6:a5:a5:4e:02:e1:98:c6:1e: 1e:c9:ac:30:b0:23:25:ce:7e:64:ec:26:4b:63:f1: e0:34:77:27:64:7a:dc:32:6f:07:02:8a:e3:6c:cd: 65:41:e6:43:95:b4:38:26:8b:c5:67:e6:77:08:db: fc:62:0f:52:89:71:7a:83:48:87:88:19:2f:22:3a: f6:c4:93:66:f3:b6:53:fb:3e:9c:33:97:fa:7c:88: 95:dd:73:dc:99:69:0c:fc:c3:5a:7f:40:a1:dc:57: 9a:95:56:f7:ee:e3:de:b4:c2:cd:9c:ea:11:39:dc: 57:b4:90:62:60:58:df:f6:43:01:44:d5:cb:d3:01: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.28.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215868 Signature Algorithm: sha256WithRSAEncryption 27:fc:1d:df:41:f9:0d:03:14:d3:0b:4f:bd:9f:5f:78:d0:fd: ca:c4:1d:e4:eb:c3:5a:6f:d7:16:7f:64:98:fa:b8:63:08:ff: dd:a5:7f:7c:3c:32:8f:38:3e:7a:5e:37:f5:ac:aa:e5:83:19: 50:a7:9b:81:6f:04:38:21:f8:5f:60:a4:4f:d1:54:ee:cf:f4: 7c:af:78:8e:3d:57:47:9a:b1:0f:74:4d:20:a2:30:08:be:a3: a3:92:5d:07:cb:54:3f:53:f4:80:c3:a3:06:dc:ad:19:22:f5: 0f:8b:e5:bf:69:55:61:3e:2d:be:d9:c2:aa:2c:b6:8a:bd:f3: 56:ec:69:74:46:0e:35:56:3d:cb:f9:73:fe:cb:e5:de:36:c6: 8f:4e:dc:5f:3d:5c:9c:d2:62:49:28:e7:60:68:74:7e:47:99: 67:22:2a:77:91:db:a2:e2:7a:29:8d:dc:98:bb:b3:e0:10:b0: 0e:37:27:d1:df:42:0b:39:4c:28:a1:1f:19:cc:42:6e:00:ab: 45:75:9f:39:ea:39:f6:54:8b:d9:56:56:8d:d2:d7:11:8e:a2: c0:fc:69:a3:a2:a1:f5:1f:a3:4c:06:92:9b:54:0b:0b:57:e6: 63:58:63:a0:48:ab:10:1d:84:99:8d:9b:99:7c:30:17:d2:68: b7:35:13:35 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OTiiZuKjaCHa3tp4B9cIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTk3NTE1NjU3MTc1YTk0NmNjOGRiNjE5NmNhMWIyMTU0ZTM4MTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiUkidCZ5hQYyaii7A20cUGmvUv9 qWu+YN1KiaBxl/+o1kOv3Ifjmv7mWZKb2F52/S+zO6Tw17IpxNccvJ0qrupa4FrF kRiPoyBRWvrcXg5mO3jjDdyLxmb6wceDCwQl8CNSdi8gR+TqJpNxuxWLAu+vZ1QV Hy1eBk4aFsumpaVOAuGYxh4eyawwsCMlzn5k7CZLY/HgNHcnZHrcMm8HAorjbM1l QeZDlbQ4JovFZ+Z3CNv8Yg9SiXF6g0iHiBkvIjr2xJNm87ZT+z6cM5f6fIiV3XPc mWkM/MNaf0Ch3FealVb37uPetMLNnOoROdxXtJBiYFjf9kMBRNXL0wGjEwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJqXUVZXF1qUbMjbYZbKGyFU44EUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2IwOWY3 NC0xNzliLTRlZDItYWNmOC01NmU2ZTJkYzg4ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvYjA5Zjc0 LTE3OWItNGVkMi1hY2Y4LTU2ZTZlMmRjODg4NS8xL21wZFJWbGNYV3BSc3lOdGhs c29iSVZUamdSUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAWSgcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNLPDANBgkqhkiG9w0BAQsFAAOCAQEAJ/wd30H5DQMU0wtPvZ9feND9ysQd5OvD Wm/XFn9kmPq4Ywj/3aV/fDwyjzg+el439ayq5YMZUKebgW8EOCH4X2CkT9FU7s/0 fK94jj1XR5qxD3RNIKIwCL6jo5JdB8tUP1P0gMOjBtytGSL1D4vlv2lVYT4tvtnC qiy2ir3zVuxpdEYONVY9y/lz/svl3jbGj07cXz1cnNJiSSjnYGh0fkeZZyIqd5Hb ouJ6KY3cmLuz4BCwDjcn0d9CCzlMKKEfGcxCbgCrRXWfOeo59lSL2VZWjdLXEY6i wPxpo6Kh9R+jTAaSm1QLC1fmY1hjoEirEB2EmY2bmXwwF9JotzUTNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:10 2026 by rpki-client