This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer File: tMQeWYNNphLYPKJBlPAsptdgJEg.cer (raw, json) Hash identifier: Wax0nmtYXIzvZtk5QAu1t8jy8Ybb4qoMythnFVDloYQ= Subject key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD6AA6067496BE71ED041DA68D1166DC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 14:30:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51148 AS: 214666 IP: 95.143.101.0/24 IP: 185.133.160.0/22 IP: 2a12:ff40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:aa:60:67:49:6b:e7:1e:d0:41:da:68:d1:16:6d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 14:30:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4c41e59834da612d83ca24194f02ca6d7602448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:8b:25:7f:43:57:ea:87:23:de:8c:1c:d5: 5a:97:1f:46:a7:52:7c:90:fe:ba:2d:19:3a:f7:1f: a0:46:60:cc:4a:e5:56:96:59:12:08:2d:12:b0:ae: a7:c6:fe:e7:4c:89:41:d2:c0:e3:b1:84:7a:e2:38: f9:df:f9:7b:58:59:c8:18:63:99:5d:65:15:47:82: a1:9a:7f:b0:7b:92:34:d3:a4:4b:fe:58:78:ab:4b: e4:f3:70:c8:da:80:cf:c4:ff:90:9e:48:3e:a9:f9: 08:15:d5:2d:02:28:93:89:d1:f6:b8:40:82:4c:aa: 58:86:c1:a5:32:5f:3f:70:fa:fc:a5:1c:3e:98:94: 1f:67:54:37:57:ef:ca:99:be:c4:e2:d7:f0:98:c8: 2c:e4:0e:b5:3d:93:bc:17:d0:02:f5:eb:52:16:de: cd:45:48:c5:92:d9:66:ac:b9:b9:af:32:0a:a2:ae: bc:e9:9f:6d:8e:09:6c:0f:b3:32:9f:b7:bd:42:34: a4:41:91:15:96:0d:c2:2b:9f:19:22:8f:20:3b:1b: c9:60:80:83:9f:ee:f7:26:e9:b2:75:2e:b3:61:d4: 75:40:5e:c2:27:00:46:1d:42:33:c2:0b:a9:bc:05: 78:f2:8c:fa:28:23:5b:80:e9:5a:25:10:a1:ba:b0: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.143.101.0/24 185.133.160.0/22 IPv6: 2a12:ff40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51148 214666 Signature Algorithm: sha256WithRSAEncryption 5a:bf:93:26:71:0e:90:b7:6d:b7:91:75:57:cc:3d:2d:d6:35: eb:cf:b6:d3:84:57:f9:81:5f:8d:27:05:cd:7e:a4:13:86:30: dd:49:94:ce:46:de:6f:a4:6a:d8:21:24:19:18:ac:58:9b:c0: 8a:85:78:54:91:9a:b0:cb:20:06:d8:72:ce:e9:19:a5:a7:48: 2b:db:85:cb:d5:2e:6e:ee:77:3f:03:85:d9:fb:9d:43:10:b6: 28:c9:8b:a9:c7:b4:eb:dc:f9:ed:f2:82:0c:81:e8:a2:18:97: 9e:ef:56:77:2e:07:e1:9b:8b:f0:06:be:97:f2:45:17:18:ec: 01:1e:33:4d:79:37:40:48:7c:4d:0d:58:10:c6:06:89:97:d2: 36:ba:81:bf:83:73:13:f3:34:a6:13:8f:b0:02:6e:0a:15:72: 90:8c:d0:61:4f:6d:df:69:cc:56:b9:65:7a:be:db:99:88:40: 6f:cf:1a:9f:b5:65:fd:67:e8:3a:19:1e:c1:94:56:15:94:95: db:f9:16:6d:93:4e:28:0e:00:af:e3:b0:a0:cc:6e:49:14:e0: 32:f9:0a:7e:2a:43:bc:7f:25:17:80:d1:87:07:c5:c7:67:17: 0e:72:2e:a1:68:b4:ef:7e:8d:db:4a:38:80:0f:23:c9:01:1e: 76:5e:85:c3 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZvWqmBnSWvnHtBB2mjRFm3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTQzMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGM0MWU1OTgzNGRhNjEyZDgzY2EyNDE5NGYwMmNhNmQ3NjAyNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB6LJX9DV+qHI96MHNValx9Gp1J8 kP66LRk69x+gRmDMSuVWllkSCC0SsK6nxv7nTIlB0sDjsYR64jj53/l7WFnIGGOZ XWUVR4Khmn+we5I006RL/lh4q0vk83DI2oDPxP+Qnkg+qfkIFdUtAiiTidH2uECC TKpYhsGlMl8/cPr8pRw+mJQfZ1Q3V+/Kmb7E4tfwmMgs5A61PZO8F9AC9etSFt7N RUjFktlmrLm5rzIKoq686Z9tjglsD7Myn7e9QjSkQZEVlg3CK58ZIo8gOxvJYICD n+73JumydS6zYdR1QF7CJwBGHUIzwgupvAV48oz6KCNbgOlaJRChurCzWQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFLTEHlmDTaYS2DyiQZTwLKbXYCRIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2EzYmFj YS00MzdkLTQ2MDctOWMxYS01NTdhNGMzMWUwMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYTNiYWNh LTQzN2QtNDYwNy05YzFhLTU1N2E0YzMxZTAyZS8xL3RNUWVXWU5OcGhMWVBLSkJs UEFzcHRkZ0pFZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAX49lAwQCuYWgMA0EAgACMAcDBQMqEv9AMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDHzAIDA0aKMA0GCSqGSIb3DQEBCwUAA4IB AQBav5MmcQ6Qt223kXVXzD0t1jXrz7bThFf5gV+NJwXNfqQThjDdSZTORt5vpGrY ISQZGKxYm8CKhXhUkZqwyyAG2HLO6Rmlp0gr24XL1S5u7nc/A4XZ+51DELYoyYup x7Tr3Pnt8oIMgeiiGJee71Z3Lgfhm4vwBr6X8kUXGOwBHjNNeTdASHxNDVgQxgaJ l9I2uoG/g3MT8zSmE4+wAm4KFXKQjNBhT23facxWuWV6vtuZiEBvzxqftWX9Z+g6 GR7BlFYVlJXb+RZtk04oDgCv47CgzG5JFOAy+Qp+KkO8fyUXgNGHB8XHZxcOci6h aLTvfo3bSjiADyPJAR52XoXD -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:31 2026 by rpki-client