This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer File: MGY7W3BEIyuYmBjRLMkEkCElJN8.cer (raw, json) Hash identifier: DmcMEkXnMRSp2x0Xj8j6wdHH6MhcCFA2rPr/EodNm3I= Subject key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA9DF4C9C549ADCF6D39701E824BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.120.21.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a9:df:4c:9c:54:9a:dc:f6:d3:97:01:e8:24:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30663b5b7044232b989818d12cc90490212524df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:9d:0e:7d:e4:50:21:7d:8b:e5:19:b4:b9: ee:ec:37:5c:ac:3e:04:db:27:74:e6:fd:03:70:8e: 8e:d1:e5:b4:49:fd:2e:95:b0:e6:de:a3:50:bc:a4: 2c:65:6b:b6:f2:bd:1e:d3:1f:fa:a9:80:a1:6a:09: d7:b1:22:31:9e:c8:5c:61:b7:42:16:84:7f:fd:e3: c9:c4:08:af:9d:b2:e4:66:5e:e1:6f:44:ed:c2:75: cd:e7:91:97:36:fa:b6:4f:59:22:b7:c0:58:b6:80: 6a:c6:4c:87:da:95:8c:80:58:e5:c8:4f:eb:77:f5: 22:a4:5c:24:5f:44:dc:c7:a5:e8:ca:9b:7a:d0:ba: 89:27:c8:b3:3d:d3:58:02:95:10:0c:00:0b:c4:3c: a8:ed:f3:f1:a1:0f:81:ff:30:e7:4d:0a:e3:d0:11: 21:e7:20:59:7e:3e:99:c2:3c:83:89:74:a2:1b:79: 45:5e:bd:5a:73:fb:b9:d6:43:a5:94:cf:6e:c4:28: 29:df:a6:dd:f4:91:99:76:cc:42:08:0d:c0:65:12: ca:02:f4:2c:f4:ce:e0:72:f8:41:10:9c:cd:b4:ff: d6:3b:2e:f0:ca:16:c4:99:32:8b:51:68:8b:9c:9c: c8:a2:28:28:21:39:6d:88:d0:27:33:b2:2f:4e:92: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.21.0/24 Signature Algorithm: sha256WithRSAEncryption 90:d5:69:ab:4b:4c:26:83:e4:91:68:9d:3d:8e:1b:2b:ea:b3: bf:dc:52:75:82:77:ef:9b:9f:2d:c9:02:68:05:7a:80:f9:78: c1:46:2a:84:88:1a:78:26:b6:f6:48:a0:de:5e:49:c5:d1:af: fe:70:5c:61:7e:66:48:42:d1:8b:02:cd:0b:6c:cb:a8:50:3e: dc:90:52:79:71:80:72:77:af:9d:e1:73:08:af:60:78:39:fd: e2:ed:9e:bc:97:b1:4c:7d:4c:6e:b5:b3:4f:69:16:35:b6:a2: 7f:40:0f:01:ce:53:c9:e1:c3:51:62:90:29:83:3a:01:3d:b5: e6:28:b7:df:cd:89:26:70:9a:44:a0:56:37:7b:51:c1:44:f0: 0f:30:33:3a:04:88:48:91:1a:b7:c3:42:9e:ea:78:ab:dc:0f: 7d:7b:84:a9:ed:75:5e:79:d4:ba:78:e6:b1:74:1f:a5:d1:61: 5c:df:ed:22:91:e3:ed:1c:2c:79:a5:28:9e:ad:ba:1c:58:15: 94:82:49:aa:90:28:6e:4a:3a:00:a5:c9:1d:88:d4:0f:a7:1c: 13:88:11:f7:f9:a0:dc:6c:72:8e:98:84:f5:37:0c:7f:cf:c9: 58:40:5c:a5:7b:01:15:6c:cf:b2:76:ff:66:31:08:ad:a1:85: 32:97:43:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57KnfTJxUmtz205cB6CS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDY2M2I1YjcwNDQyMzJiOTg5ODE4ZDEyY2M5MDQ5MDIxMjUyNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFqdDn3kUCF9i+UZtLnu7DdcrD4E 2yd05v0DcI6O0eW0Sf0ulbDm3qNQvKQsZWu28r0e0x/6qYChagnXsSIxnshcYbdC FoR//ePJxAivnbLkZl7hb0TtwnXN55GXNvq2T1kit8BYtoBqxkyH2pWMgFjlyE/r d/UipFwkX0Tcx6Xoypt60LqJJ8izPdNYApUQDAALxDyo7fPxoQ+B/zDnTQrj0BEh 5yBZfj6ZwjyDiXSiG3lFXr1ac/u51kOllM9uxCgp36bd9JGZdsxCCA3AZRLKAvQs 9M7gcvhBEJzNtP/WOy7wyhbEmTKLUWiLnJzIoigoITltiNAnM7IvTpIZVQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDBmO1twRCMrmJgY0SzJBJAhJSTfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzMwZjM0 ZS1lMmFkLTRiOGQtOGNlMC0wMTE4NzgyNTViYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMzBmMzRl LWUyYWQtNGI4ZC04Y2UwLTAxMTg3ODI1NWJhNy8xL01HWTdXM0JFSXl1WW1CalJM TWtFa0NFbEpOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHgVMA0GCSqGSIb3DQEBCwUAA4IBAQCQ1Wmr S0wmg+SRaJ09jhsr6rO/3FJ1gnfvm58tyQJoBXqA+XjBRiqEiBp4Jrb2SKDeXknF 0a/+cFxhfmZIQtGLAs0LbMuoUD7ckFJ5cYByd6+d4XMIr2B4Of3i7Z68l7FMfUxu tbNPaRY1tqJ/QA8BzlPJ4cNRYpApgzoBPbXmKLffzYkmcJpEoFY3e1HBRPAPMDM6 BIhIkRq3w0Ke6nir3A99e4Sp7XVeedS6eOaxdB+l0WFc3+0ikePtHCx5pSierboc WBWUgkmqkChuSjoApckdiNQPpxwTiBH3+aDcbHKOmIT1Nwx/z8lYQFylewEVbM+y dv9mMQitoYUyl0N9 -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:13 2026 by rpki-client