This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer File: MGtGjMMe86PQgayPArJx4xR1Wb8.cer (raw, json) Hash identifier: nB4jxip02tGow1W+7POrGl0GOFyvYlm6t4KvutT9XIc= Subject key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E2736124F326EBB02E735BC277AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43732 IP: 91.198.132.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e2:73:61:24:f3:26:eb:b0:2e:73:5b:c2:77:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:bc:85:f8:dd:84:47:9d:95:31:d7:cb:fd: 67:26:b5:c1:41:32:9e:ac:37:69:04:22:0a:f8:dc: 09:fc:1a:4b:bb:76:81:77:e8:18:0b:1b:82:8e:79: cb:18:9a:10:4b:88:40:c7:a1:aa:76:c0:8d:29:5f: 64:42:76:a6:37:64:8f:4b:17:0b:52:4d:b4:fc:e5: 5d:28:06:28:5f:5f:f2:dc:a6:b9:bb:fc:61:8e:c3: a8:5b:14:1d:30:8a:36:ea:64:e2:71:e7:9e:f2:7a: 21:5e:d1:c0:b1:b1:5e:25:dc:d1:04:fa:95:a3:4f: a3:fd:ea:63:a1:56:b5:1c:6f:03:47:01:8c:51:e2: 73:7f:8d:ff:5b:74:e7:fc:ca:29:c2:bf:39:e3:08: ce:39:66:61:9c:90:52:5c:23:bd:dd:7d:45:ba:c1: fd:99:46:6a:4d:f8:c5:ef:cc:50:0a:2b:8a:1e:eb: 11:ce:c1:48:5d:4f:58:e3:2a:d4:30:88:02:1f:bf: f2:52:2b:b5:0a:f4:7e:31:3c:9b:5e:a2:fb:a9:a0: e1:85:3e:4d:ac:b3:2e:b2:34:91:70:08:da:2a:86: 29:c8:d9:53:c6:f1:ec:ec:d1:d6:2f:ee:de:74:44: 53:39:d7:c7:3c:db:37:38:fd:f9:76:7e:85:19:7a: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.132.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43732 Signature Algorithm: sha256WithRSAEncryption 60:19:60:64:94:82:87:5c:9d:27:9f:cf:ce:b2:50:e0:aa:69: 70:84:aa:ed:da:fb:6c:1b:af:6f:c3:c7:43:42:41:69:22:48: aa:29:8d:0d:4e:cd:50:72:32:a8:a7:d7:2d:23:be:b0:c1:2b: 48:e6:6f:63:58:87:f8:dd:4e:91:b6:07:e8:d6:4e:9a:a9:9d: 05:9a:43:0e:71:c4:e8:9c:c7:a3:60:38:b8:97:b0:fe:1a:80: 57:c6:7a:11:6b:de:84:11:24:42:b7:45:02:7f:3b:3d:6a:8b: 15:e8:88:4f:20:88:35:b1:fc:d7:c7:ac:77:fc:3e:12:42:28: d1:79:20:9f:06:13:6b:19:9b:95:19:71:15:b2:97:da:2b:a9: a0:42:cf:ea:31:e3:a8:90:32:09:77:67:1a:44:f1:1d:e7:34: 8e:3a:c6:fe:e6:f4:b0:7a:a1:f6:5c:ee:ac:61:5e:31:d1:39: c6:e1:74:7a:2c:cc:e6:42:c2:db:bd:4a:5c:6e:77:9a:9b:86: 7a:bd:94:7f:10:bc:b0:0e:db:af:d6:4d:99:fc:72:07:80:da: ff:81:68:40:4d:cc:28:b3:d9:98:be:2c:05:7d:52:ce:11:2b: 42:c0:42:f6:79:51:ef:c8:5d:13:c5:bc:ff:d2:c2:51:02:f4: a0:4f:56:7a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xuJzYSTzJuuwLnNbwneqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDZiNDY4Y2MzMWVmM2EzZDA4MWFjOGYwMmIyNzFlMzE0NzU1OWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcC8hfjdhEedlTHXy/1nJrXBQTKe rDdpBCIK+NwJ/BpLu3aBd+gYCxuCjnnLGJoQS4hAx6GqdsCNKV9kQnamN2SPSxcL Uk20/OVdKAYoX1/y3Ka5u/xhjsOoWxQdMIo26mTiceee8nohXtHAsbFeJdzRBPqV o0+j/epjoVa1HG8DRwGMUeJzf43/W3Tn/Mopwr854wjOOWZhnJBSXCO93X1FusH9 mUZqTfjF78xQCiuKHusRzsFIXU9Y4yrUMIgCH7/yUiu1CvR+MTybXqL7qaDhhT5N rLMusjSRcAjaKoYpyNlTxvHs7NHWL+7edERTOdfHPNs3OP35dn6FGXo1iQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDBrRozDHvOj0IGsjwKyceMUdVm/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzdlNGVh OC04OTUwLTQxODMtYWJjMC0zMzgyNzk0MDQ5YzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvN2U0ZWE4 LTg5NTAtNDE4My1hYmMwLTMzODI3OTQwNDljMi8xL01HdEdqTU1lODZQUWdheVBB ckp4NHhSMVdiOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8aEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCq1DANBgkqhkiG9w0BAQsFAAOCAQEAYBlgZJSCh1ydJ5/PzrJQ4KppcISq7dr7 bBuvb8PHQ0JBaSJIqimNDU7NUHIyqKfXLSO+sMErSOZvY1iH+N1OkbYH6NZOmqmd BZpDDnHE6JzHo2A4uJew/hqAV8Z6EWvehBEkQrdFAn87PWqLFeiITyCINbH818es d/w+EkIo0XkgnwYTaxmblRlxFbKX2iupoELP6jHjqJAyCXdnGkTxHec0jjrG/ub0 sHqh9lzurGFeMdE5xuF0eizM5kLC271KXG53mpuGer2UfxC8sA7br9ZNmfxyB4Da /4FoQE3MKLPZmL4sBX1SzhErQsBC9nlR78hdE8W8/9LCUQL0oE9Weg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:33 2026 by rpki-client