This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer File: EX-Mmn_H8TZY1ir76285iC2lEcw.cer (raw, json) Hash identifier: 85/ERpfpKbty98eoGd3e8O4SQXUo+58j14Y4wEb6Eng= Subject key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED8B3B6C0ED7CEABC5EEB79BAF110D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59432 IP: 5.134.112.0/21 IP: 185.47.128.0/22 IP: 188.213.4.0/22 IP: 2a03:c7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8b:3b:6c:0e:d7:ce:ab:c5:ee:b7:9b:af:11:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:70:63:ac:f3:4c:b3:24:c4:f3:b0:7f:98: bb:4e:85:50:6f:d7:f1:f0:39:48:e2:b5:43:4a:d3: 22:01:a6:dd:7f:2a:ef:a2:2d:08:ad:ec:f7:0a:e1: 59:22:c1:8b:b3:fc:0f:61:98:57:86:a2:b3:68:a0: 30:9e:0a:d1:12:1a:02:d2:4f:3b:d2:52:72:50:eb: ca:1d:77:c5:3d:0b:e4:63:83:11:55:e7:65:42:e0: 7a:73:37:e7:a3:7a:70:33:b6:a2:5e:81:74:63:25: 8a:d6:53:5c:20:f8:f5:5b:6b:c5:86:6b:3d:18:a9: 96:17:35:1a:9f:18:1f:a1:68:f0:8f:44:9b:97:a0: e2:22:ff:05:d0:38:8f:99:00:77:f1:70:e7:9a:5c: 7e:71:ac:86:a0:19:37:88:be:7d:80:40:31:d4:a7: 63:43:e6:f0:76:12:b4:da:e9:2d:16:2a:e1:b0:3d: 42:77:31:57:95:5b:f6:2c:f9:73:0c:c8:13:56:62: 5e:67:b4:98:58:86:08:9c:ab:70:ed:da:74:49:1a: c4:d9:e8:4b:7d:e7:b5:ec:d0:74:7c:0f:c7:d2:35: 12:25:4f:a4:0d:f3:b5:7f:2d:fe:97:fc:e1:7f:9e: 41:50:1f:e2:e6:0a:60:c9:56:71:5e:db:92:a4:7f: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.112.0/21 185.47.128.0/22 188.213.4.0/22 IPv6: 2a03:c7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59432 Signature Algorithm: sha256WithRSAEncryption 49:3c:ff:9e:a2:4f:5b:05:9a:84:84:29:f4:31:e4:a5:1c:6e: 58:1f:81:58:66:74:e5:e4:37:43:6d:0c:dd:0b:ae:e1:08:3f: 12:2a:48:f0:3e:2d:19:eb:ed:96:1d:9d:a6:81:fe:c5:ea:ab: e6:56:5d:90:57:8d:0b:d0:cd:3a:27:af:21:ce:81:50:6d:cf: 3e:fa:65:9d:16:1b:ce:5a:37:cf:fa:61:6a:03:db:2c:74:bf: 77:d0:6c:8a:61:d9:61:d0:69:55:52:73:6f:bf:5c:21:f9:fc: a7:5a:06:91:0f:d3:b7:3f:52:bc:ba:57:67:4f:a2:68:33:b4: 0e:00:8d:ab:5d:4f:57:e1:fd:94:ec:50:0d:a0:5c:91:f7:6e: b3:37:94:ad:b9:a6:6d:aa:86:45:bd:11:c0:c4:b1:32:b2:b8: e2:a9:4b:3f:a2:83:25:7c:ef:34:39:41:ce:8b:6b:9c:11:3c: 9b:3b:15:c3:ad:db:86:b3:f4:d2:b7:db:48:5c:5a:44:c9:99: 5d:f2:28:11:76:c1:fd:ee:c5:71:e7:8f:e2:27:9f:05:b2:a8: a3:a1:0a:02:08:74:4d:36:0f:1c:f9:b6:71:50:7e:11:6d:97: 44:ce:b2:da:a7:9b:c7:d5:be:61:e4:e8:f6:ef:d0:71:0d:bc: fd:31:79:ba -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt87Ys7bA7XzqvF7rebrxENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTdmOGM5YTdmYzdmMTM2NThkNjJhZmJlYjZmMzk4ODJkYTUxMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3NwY6zzTLMkxPOwf5i7ToVQb9fx 8DlI4rVDStMiAabdfyrvoi0Irez3CuFZIsGLs/wPYZhXhqKzaKAwngrREhoC0k87 0lJyUOvKHXfFPQvkY4MRVedlQuB6czfno3pwM7aiXoF0YyWK1lNcIPj1W2vFhms9 GKmWFzUanxgfoWjwj0Sbl6DiIv8F0DiPmQB38XDnmlx+cayGoBk3iL59gEAx1Kdj Q+bwdhK02uktFirhsD1CdzFXlVv2LPlzDMgTVmJeZ7SYWIYInKtw7dp0SRrE2ehL fee17NB0fA/H0jUSJU+kDfO1fy3+l/zhf55BUB/i5gpgyVZxXtuSpH9g6QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFBF/jJp/x/E2WNYq++tvOYgtpRHMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzEyMmIy ZC01ZDg3LTQ3OGMtODUyMi04OWQ2NmFjNzJlMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMTIyYjJk LTVkODctNDc4Yy04NTIyLTg5ZDY2YWM3MmUwMi8xL0VYLU1tbl9IOFRaWTFpcjc2 Mjg1aUMybEVjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDBYZwAwQCuS+AAwQCvNUEMA0EAgACMAcDBQMq A8fAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDoKDANBgkqhkiG9w0BAQsFAAOC AQEASTz/nqJPWwWahIQp9DHkpRxuWB+BWGZ05eQ3Q20M3Quu4Qg/EipI8D4tGevt lh2dpoH+xeqr5lZdkFeNC9DNOievIc6BUG3PPvplnRYbzlo3z/phagPbLHS/d9Bs imHZYdBpVVJzb79cIfn8p1oGkQ/Ttz9SvLpXZ0+iaDO0DgCNq11PV+H9lOxQDaBc kfduszeUrbmmbaqGRb0RwMSxMrK44qlLP6KDJXzvNDlBzotrnBE8mzsVw63bhrP0 0rfbSFxaRMmZXfIoEXbB/e7FceeP4iefBbKoo6EKAgh0TTYPHPm2cVB+EW2XRM6y 2qebx9W+YeTo9u/QcQ28/TF5ug== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:44 2026 by rpki-client