This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer File: MH2IfALgfJ5HTR-OIQScqmzj-9M.cer (raw, json) Hash identifier: 7PqQRXFkH6UOBrYxLtZS1qRmwejnHQdYd9AkMzzOdqQ= Subject key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C133ABF23106A0240461EA4B373A3C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31167 IP: 77.236.96.0/23 IP: 85.14.128.0/18 IP: 93.115.111.0/24 IP: 109.74.80.0/20 IP: 217.119.176.0/20 IP: 217.171.16.0/20 IP: 2a00:1788::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3a:bf:23:10:6a:02:40:46:1e:a4:b3:73:a3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:00:80:7d:28:28:41:41:f9:17:b6:da:5e: ae:3b:ca:cf:55:56:1e:1d:41:99:01:1e:30:7c:82: d2:9b:f5:d8:20:01:55:d7:24:f6:e3:28:ee:9e:6a: 02:c7:75:a3:e8:b2:07:ca:4c:09:63:58:5f:e7:8a: b2:af:4e:fc:37:b7:00:64:c5:1f:d6:cc:1e:58:8c: 5f:5f:5f:6a:af:95:48:17:13:a1:72:2c:fe:e8:63: 32:02:e1:af:b1:36:cb:b1:44:50:e0:e1:0b:4d:a0: 17:1f:6b:81:5d:bf:38:0f:21:13:91:2a:2f:a9:f9: 9b:81:9f:88:f1:24:92:dc:f8:f4:5b:c1:c5:b9:09: 26:6a:93:5c:0f:0f:8b:02:a7:47:2d:30:72:a2:d6: 00:18:27:c0:ae:db:8e:46:77:bd:5e:3a:dc:87:2d: e8:29:3e:1b:e6:1b:66:9f:9c:a1:b4:13:4a:4a:80: 85:51:0c:73:8e:d3:e4:d9:4e:d2:6f:b7:a8:2a:e1: 64:b8:22:fe:ca:56:bc:05:1a:44:63:8f:e4:22:6a: 13:bb:09:3e:88:56:4d:8d:d9:a3:bf:c9:de:71:a3: 60:49:81:e4:9e:52:24:8d:70:d3:f7:85:19:cd:98: 29:c9:f0:49:ac:dd:4b:65:d3:46:40:bc:cc:b0:6a: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.236.96.0/23 85.14.128.0/18 93.115.111.0/24 109.74.80.0/20 217.119.176.0/20 217.171.16.0/20 IPv6: 2a00:1788::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31167 Signature Algorithm: sha256WithRSAEncryption 26:32:95:1f:8d:af:a5:7f:ce:81:f1:ec:e2:7f:67:80:05:d3: 13:3b:9e:d2:90:ac:87:ac:94:a7:ce:d1:3d:85:3e:82:f5:17: 81:f4:68:39:3d:8c:76:ce:ef:e2:dc:3e:80:04:5c:cb:d2:59: c5:95:c2:31:2e:db:e4:61:d9:e8:68:b6:be:59:84:18:96:50: 64:e1:c0:81:b7:8e:34:04:7e:99:e3:45:e6:53:7c:4d:e3:1a: 4a:b6:9a:a9:56:bb:2e:7b:92:46:b8:10:dd:45:b5:1c:ed:9a: 95:70:19:3d:98:d6:df:62:2b:d9:21:2c:b6:93:fb:28:08:77: 06:9d:81:99:7f:fb:5b:dc:9c:77:76:69:66:14:9e:c0:67:5f: 39:0d:0f:e0:f2:d7:1b:ac:bb:54:f1:f3:f3:59:44:1a:99:ae: 4e:4f:56:7c:3f:d7:53:63:0c:28:f3:6f:22:bc:31:56:68:4e: 85:ca:2c:d6:78:ac:40:8c:5a:b1:f7:65:7c:53:b8:0c:b7:ac: f2:1c:65:a7:eb:5a:a4:03:b4:93:07:79:f4:ae:10:51:39:d7: 74:24:e8:10:3a:f2:b0:10:4f:bc:8f:76:ae:41:01:65:e3:de: 32:c1:a7:5c:5f:86:05:1a:50:11:ea:87:c3:a2:d6:8a:5e:00: 94:59:7e:c7 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt8Ezq/IxBqAkBGHqSzc6PIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDdkODg3YzAyZTA3YzllNDc0ZDFmOGUyMTA0OWNhYTZjZTNmYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHoAgH0oKEFB+Re22l6uO8rPVVYe HUGZAR4wfILSm/XYIAFV1yT24yjunmoCx3Wj6LIHykwJY1hf54qyr078N7cAZMUf 1sweWIxfX19qr5VIFxOhciz+6GMyAuGvsTbLsURQ4OELTaAXH2uBXb84DyETkSov qfmbgZ+I8SSS3Pj0W8HFuQkmapNcDw+LAqdHLTByotYAGCfArtuORne9Xjrchy3o KT4b5htmn5yhtBNKSoCFUQxzjtPk2U7Sb7eoKuFkuCL+yla8BRpEY4/kImoTuwk+ iFZNjdmjv8necaNgSYHknlIkjXDT94UZzZgpyfBJrN1LZdNGQLzMsGo0swIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFDB9iHwC4HyeR00fjiEEnKps4/vTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2IyMGQ4 My02MTJjLTRiNjItOTdhMy0xYTVlNWYxOTFiZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvYjIwZDgz LTYxMmMtNGI2Mi05N2EzLTFhNWU1ZjE5MWJmYS8xL01IMklmQUxnZko1SFRSLU9J UVNjcW16ai05TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQBTexgAwQGVQ6AAwQAXXNvAwQEbUpQAwQE2Xew AwQE2asQMA0EAgACMAcDBQAqABeIMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnm/ MA0GCSqGSIb3DQEBCwUAA4IBAQAmMpUfja+lf86B8ezif2eABdMTO57SkKyHrJSn ztE9hT6C9ReB9Gg5PYx2zu/i3D6ABFzL0lnFlcIxLtvkYdnoaLa+WYQYllBk4cCB t440BH6Z40XmU3xN4xpKtpqpVrsue5JGuBDdRbUc7ZqVcBk9mNbfYivZISy2k/so CHcGnYGZf/tb3Jx3dmlmFJ7AZ185DQ/g8tcbrLtU8fPzWUQama5OT1Z8P9dTYwwo 828ivDFWaE6FyizWeKxAjFqx92V8U7gMt6zyHGWn61qkA7STB3n0rhBROdd0JOgQ OvKwEE+8j3auQQFl494ywadcX4YFGlAR6ofDotaKXgCUWX7H -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:40 2026 by rpki-client