This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer File: MHoDlQLUamuZCREM4qsTlod70I4.cer (raw, json) Hash identifier: Ylbuu2pyCO4glxrHxyxW8nuf/QdGEOA+RJ/ojD39Tp8= Subject key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B790FF55BEB0A865FE5C79F654FBEB7B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.15.143.0/24 IP: 194.45.144.0 -- 194.45.153.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f5:5b:eb:0a:86:5f:e5:c7:9f:65:4f:be:b7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=307a039502d46a6b9909110ce2ab1396877bd08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:bf:ad:9c:a6:6d:fe:a1:d2:92:c0:b8:f4: aa:26:cb:9f:24:e7:af:a2:e9:3b:a5:42:74:96:2f: 7d:1f:b1:39:db:a0:80:5a:43:a3:75:26:a8:ea:41: 70:94:8e:e0:6f:ea:f1:d9:a1:18:63:f9:65:96:08: 04:2e:80:12:ff:62:86:94:55:0d:1f:67:09:3b:e2: 78:ec:96:de:f9:2f:02:82:19:b6:fa:58:3f:75:e8: 6b:2b:4c:70:8e:e1:64:37:99:d6:83:9a:45:1b:01: 89:12:e1:a0:51:03:0d:60:dd:b1:50:78:b4:38:01: d3:e4:3b:83:1c:91:e6:c7:bc:1c:3d:02:6a:21:3d: 75:25:a1:86:3d:ac:80:a8:c2:15:63:18:42:4b:ea: ce:cc:11:46:bf:09:da:a6:ba:4a:7c:52:7e:29:be: 75:0a:d3:32:dd:a6:24:68:aa:6f:e1:da:d5:29:06: c9:58:1d:c1:85:da:75:c3:06:72:f3:47:ef:a4:7f: ae:37:a3:bc:eb:01:c9:cf:e1:6d:98:c3:03:a0:13: 31:40:05:7f:06:c9:25:c7:89:41:7c:6f:e4:39:e2: 81:b5:08:b0:5e:ae:e9:31:b6:8d:a0:9a:a7:36:db: 6f:7b:f3:9e:4b:3e:b6:b2:86:dd:b7:4f:d4:07:ca: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.143.0/24 194.45.144.0-194.45.153.255 Signature Algorithm: sha256WithRSAEncryption 3d:84:bb:21:0c:9a:8b:95:d1:6b:81:87:79:88:55:27:78:ee: 65:ce:2b:8a:75:5f:91:59:33:c1:c6:bf:2f:0a:b9:9d:f5:38: 44:63:c3:36:fe:c4:a2:f2:1e:59:ef:2e:e5:6c:f1:eb:ab:9b: c4:7c:cb:d3:46:9a:88:bc:5f:fa:15:ed:da:63:ef:93:c6:3c: b3:70:ba:8d:25:ee:69:cd:b3:b7:5d:c3:87:50:83:f9:3d:d8: 03:4c:f6:32:48:bb:f4:2c:a9:f0:c7:09:97:e1:16:8f:e3:c1: 2d:97:1d:80:f0:d4:59:4c:e6:6e:c8:1c:61:15:64:d9:6b:a0: 9e:e8:85:61:86:b3:20:ec:0e:54:24:46:44:1e:4b:6a:fb:1e: 1a:a3:86:ed:b3:77:31:f8:ec:37:0c:b5:22:1c:fc:b7:75:54: 73:ee:ca:83:c7:14:39:6f:c8:d8:a5:4c:82:96:a7:8a:48:83: e8:9b:51:98:d2:e9:68:61:1d:75:4c:d7:36:a6:53:6d:61:2e: a1:36:3e:0e:18:f3:95:c8:fe:f0:e8:5b:0b:35:85:35:db:d5: da:17:00:73:ce:4d:07:b2:b2:19:d0:bc:4c:01:9e:47:ec:ef: f2:c8:71:44:c3:6a:f5:bc:48:78:e1:1c:26:fd:9b:61:6a:97: 1e:c4:99:6d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt5D/Vb6wqGX+XHn2VPvreyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDdhMDM5NTAyZDQ2YTZiOTkwOTExMGNlMmFiMTM5Njg3N2JkMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhu/rZymbf6h0pLAuPSqJsufJOev ouk7pUJ0li99H7E526CAWkOjdSao6kFwlI7gb+rx2aEYY/lllggELoAS/2KGlFUN H2cJO+J47Jbe+S8Cghm2+lg/dehrK0xwjuFkN5nWg5pFGwGJEuGgUQMNYN2xUHi0 OAHT5DuDHJHmx7wcPQJqIT11JaGGPayAqMIVYxhCS+rOzBFGvwnaprpKfFJ+Kb51 CtMy3aYkaKpv4drVKQbJWB3Bhdp1wwZy80fvpH+uN6O86wHJz+FtmMMDoBMxQAV/ Bsklx4lBfG/kOeKBtQiwXq7pMbaNoJqnNttve/OeSz62sobdt0/UB8rwpwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFDB6A5UC1GprmQkRDOKrE5aHe9COMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2Q1MTIx MS1kMGJiLTRhNTctOTM5MC1jZTJhNDk2ZmVlODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZDUxMjEx LWQwYmItNGE1Ny05MzkwLWNlMmE0OTZmZWU4Ni8xL01Ib0RsUUxVYW11WkNSRU00 cXNUbG9kNzBJNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUAwQAwg+PMAwDBATCLZADBAHCLZgwDQYJKoZIhvcN AQELBQADggEBAD2EuyEMmouV0WuBh3mIVSd47mXOK4p1X5FZM8HGvy8KuZ31OERj wzb+xKLyHlnvLuVs8eurm8R8y9NGmoi8X/oV7dpj75PGPLNwuo0l7mnNs7ddw4dQ g/k92ANM9jJIu/QsqfDHCZfhFo/jwS2XHYDw1FlM5m7IHGEVZNlroJ7ohWGGsyDs DlQkRkQeS2r7Hhqjhu2zdzH47DcMtSIc/Ld1VHPuyoPHFDlvyNilTIKWp4pIg+ib UZjS6WhhHXVM1zamU21hLqE2Pg4Y85XI/vDoWws1hTXb1doXAHPOTQeyshnQvEwB nkfs7/LIcUTDavW8SHjhHCb9m2Fqlx7EmW0= -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:04 2026 by rpki-client