This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer File: mupW9uHBw1kAHsImfvD-4bRW3f0.cer (raw, json) Hash identifier: 9YpL20P0xbX+JGME3kvos8w68kZclD7JcKZ55tfo0e8= Subject key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA52366CC22DECE16582511EA06A1AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214121 IP: 45.144.208.0/22 IP: 2a0f:8000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:23:66:cc:22:de:ce:16:58:25:11:ea:06:a1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:42:89:6c:90:e9:ea:93:85:2c:db:2c:68:6e: 00:8f:46:34:78:8e:fd:24:17:f9:c5:7e:0c:df:d4: f9:68:73:2b:2c:11:c2:e0:1f:99:34:06:f5:70:c7: 5a:07:b6:af:c6:52:b6:cd:23:ae:a7:75:7b:37:63: b6:b5:f5:2f:e0:48:3b:1e:f9:61:ee:5c:46:1e:89: e0:f3:6d:0c:b3:28:ce:8e:f3:7a:50:d0:82:88:c4: 2d:3f:c1:1a:c1:25:03:13:ff:a4:ef:8f:70:0d:b6: 9c:ba:ea:ba:91:fa:c1:29:2b:2d:38:56:32:bf:90: 97:f8:2b:8d:f0:38:e7:04:75:75:e1:96:7b:51:56: 18:7c:82:9e:9a:c5:16:34:32:75:fb:b3:de:60:38: 52:93:46:0e:55:d4:94:5c:36:e2:04:c5:e2:05:72: c7:dd:ae:a0:f3:20:a4:d9:92:a1:2a:57:ac:12:72: ad:04:72:4b:66:0c:a5:86:4e:74:8f:58:8e:aa:3d: e6:c4:27:2c:25:eb:3d:51:34:47:92:06:ba:13:b5: cd:2f:3f:80:ae:fc:c7:e8:80:76:06:7b:bb:8c:87: a5:12:ac:1e:5c:6d:46:c9:0a:6d:97:c9:b5:a3:93: e9:0d:e0:24:cc:92:fa:66:a0:38:4c:6e:a1:52:24: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.208.0/22 IPv6: 2a0f:8000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214121 Signature Algorithm: sha256WithRSAEncryption 02:99:58:85:fa:0d:2f:f4:c2:39:60:d5:07:5b:c4:c6:94:23: a6:3b:f5:8c:88:42:fc:5f:22:84:31:1e:16:42:bd:9c:5d:76: 96:33:9b:7e:7b:0a:26:06:07:35:4e:17:3f:6f:94:69:15:a6: 8e:81:90:50:69:5e:25:d9:83:ef:87:47:20:11:3c:c2:62:19: 70:d9:61:5b:03:14:7b:27:01:95:59:95:2e:71:5f:60:f0:75: 25:f6:b0:fd:e2:6d:44:26:82:b5:ed:22:e9:0c:e5:ac:2c:38: ac:84:58:3a:1a:80:0a:f8:80:1b:9b:27:44:f7:f5:88:38:c4: 9b:f9:1b:22:55:7f:55:ce:29:df:65:0e:4f:a2:c8:6a:0e:a0: 80:40:af:e2:fa:8c:be:de:4f:93:49:a8:58:a0:52:7c:16:e9: 04:85:d0:5d:2a:18:f7:0e:4e:96:db:0f:60:29:9e:9e:ce:db: e2:61:ca:49:60:c1:5d:09:f3:75:b4:27:e7:9b:5b:58:ca:07: 17:b8:b6:74:00:cc:83:19:b5:97:12:00:98:e2:67:e3:ad:51: ce:71:15:05:b8:13:22:b8:77:df:52:aa:52:2d:72:04:10:31: ab:a4:42:52:e2:da:7f:a0:2a:ef:55:59:33:6c:5a:2a:8b:cb: 29:98:d3:0a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pSNmzCLezhZYJRHqBqGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWVhNTZmNmUxYzFjMzU5MDAxZWMyMjY3ZWYwZmVlMWI0NTZkZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEKJbJDp6pOFLNssaG4Aj0Y0eI79 JBf5xX4M39T5aHMrLBHC4B+ZNAb1cMdaB7avxlK2zSOup3V7N2O2tfUv4Eg7Hvlh 7lxGHong820MsyjOjvN6UNCCiMQtP8EawSUDE/+k749wDbacuuq6kfrBKSstOFYy v5CX+CuN8DjnBHV14ZZ7UVYYfIKemsUWNDJ1+7PeYDhSk0YOVdSUXDbiBMXiBXLH 3a6g8yCk2ZKhKlesEnKtBHJLZgylhk50j1iOqj3mxCcsJes9UTRHkga6E7XNLz+A rvzH6IB2Bnu7jIelEqweXG1GyQptl8m1o5PpDeAkzJL6ZqA4TG6hUiRHbwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJrqVvbhwcNZAB7CJn7w/uG0Vt39MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzRmNGY0 Yy01Y2JjLTQwM2YtYWVhMy1lYjU1MWE3ZmEwNjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvNGY0ZjRj LTVjYmMtNDAzZi1hZWEzLWViNTUxYTdmYTA2MS8xL211cFc5dUhCdzFrQUhzSW1m dkQtNGJSVzNmMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZDQMA0EAgACMAcDBQMqD4AAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNEaTANBgkqhkiG9w0BAQsFAAOCAQEAAplYhfoNL/TC OWDVB1vExpQjpjv1jIhC/F8ihDEeFkK9nF12ljObfnsKJgYHNU4XP2+UaRWmjoGQ UGleJdmD74dHIBE8wmIZcNlhWwMUeycBlVmVLnFfYPB1Jfaw/eJtRCaCte0i6Qzl rCw4rIRYOhqACviAG5snRPf1iDjEm/kbIlV/Vc4p32UOT6LIag6ggECv4vqMvt5P k0moWKBSfBbpBIXQXSoY9w5OltsPYCmens7b4mHKSWDBXQnzdbQn55tbWMoHF7i2 dADMgxm1lxIAmOJn461RznEVBbgTIrh331KqUi1yBBAxq6RCUuLaf6Aq71VZM2xa KovLKZjTCg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:35 2026 by rpki-client