This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer (raw, json) Hash identifier: 3x+vzclyDpFk7OlLVCpORpPRGWEcqgaAno0GaSo8uZk= Subject key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78354B140EFCD3BF4AFB75EACAB1E226 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206225 IP: 193.247.48.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4b:14:0e:fc:d3:bf:4a:fb:75:ea:ca:b1:e2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6f:a6:50:da:28:8d:76:bf:1c:d4:41:4d:3b: 47:33:3c:83:92:cc:be:e2:cb:66:c4:11:a3:e1:db: 43:82:ee:70:eb:cc:a3:9a:40:1a:69:d5:bd:76:94: 24:0a:5c:a9:29:a7:42:61:24:2d:eb:27:78:ae:3f: 26:30:00:89:c3:b8:fb:34:51:7a:87:5c:f9:9f:e6: 57:4d:32:e8:99:31:5a:af:7c:f7:f0:16:a3:3d:3c: 7f:48:a6:ad:70:ec:49:05:98:6e:d4:d3:57:b0:d1: 4c:72:87:41:cc:a0:06:6f:f4:cb:a1:b5:c7:69:4c: d8:0c:ef:f8:ca:e6:24:dc:f6:af:a2:47:ab:72:6a: e0:ce:b3:3d:48:0d:5c:c6:37:fb:a7:a5:74:3a:92: 90:08:28:44:a7:e6:a7:37:3c:4e:10:9c:df:ef:95: 82:d5:d5:62:85:1e:70:1a:b3:47:bb:ae:42:8b:14: 88:24:19:71:80:42:65:2c:1a:79:21:08:89:1d:3e: 93:74:27:4b:37:35:30:a1:0a:26:22:41:1b:9b:3d: 2c:60:14:11:0a:bf:5b:d3:9f:bf:3a:db:95:99:75: c6:c7:68:0a:75:67:79:21:8e:50:58:e8:1e:32:72: af:5e:09:03:8c:8f:96:02:db:a5:5a:96:ce:08:d0: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206225 Signature Algorithm: sha256WithRSAEncryption 2b:27:02:25:ee:85:58:4a:48:6c:39:fc:61:7e:5e:7d:47:f0: 92:19:fd:b2:de:04:35:79:ff:62:27:0f:c1:d0:17:e9:24:df: ca:f4:47:13:78:51:f0:9b:af:63:44:13:cf:a6:51:8f:af:98: c6:a2:dc:72:4c:e2:09:47:9e:50:75:db:aa:00:b2:d0:7a:c7: 7b:bb:25:07:22:2a:e6:b3:02:de:f7:bb:29:19:ad:01:65:78: dd:7f:11:e4:c3:d9:db:b6:fd:66:c0:38:c8:9b:a8:06:4d:7e: 87:d6:5d:b6:a9:3d:2b:2b:49:3d:dc:e8:d6:41:e7:35:e2:d3: 8a:ca:d4:28:73:17:ab:0a:86:2f:69:18:97:f5:bd:6f:2f:12: df:0d:fc:73:67:33:41:1a:92:1d:66:51:c3:0b:45:c2:da:66: bb:0d:85:d7:bf:bd:4c:2e:94:ea:88:3d:62:73:93:76:65:9d: 17:7e:42:6d:9f:60:9d:fe:04:d9:5c:cc:a7:be:09:0b:26:ac: 60:3a:7d:fd:99:73:e6:a8:81:0c:04:46:b0:21:d8:cd:f1:1f: 81:da:de:d4:30:f7:7b:7b:18:09:74:93:5d:8b:a3:6b:f6:58: e9:01:2d:c7:ae:66:27:6e:8d:7e:e7:aa:c8:03:f9:fd:95:f4: 0d:6b:1f:1f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NUsUDvzTv0r7derKseImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGEyNzU4MDY0OWE5OTJlNDFlMzJjZjhjMTIyNDVlMDdmZjlmOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG+mUNoojXa/HNRBTTtHMzyDksy+ 4stmxBGj4dtDgu5w68yjmkAaadW9dpQkClypKadCYSQt6yd4rj8mMACJw7j7NFF6 h1z5n+ZXTTLomTFar3z38BajPTx/SKatcOxJBZhu1NNXsNFMcodBzKAGb/TLobXH aUzYDO/4yuYk3PavokercmrgzrM9SA1cxjf7p6V0OpKQCChEp+anNzxOEJzf75WC 1dVihR5wGrNHu65CixSIJBlxgEJlLBp5IQiJHT6TdCdLNzUwoQomIkEbmz0sYBQR Cr9b05+/OtuVmXXGx2gKdWd5IY5QWOgeMnKvXgkDjI+WAtulWpbOCNAgdwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDCidYBkmpkuQeMs+MEiReB/+fnFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzI5YjQy Yi01NjZlLTQzZTktYTJkYy1mNTQ4Njk5Zjk0N2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMjliNDJi LTU2NmUtNDNlOS1hMmRjLWY1NDg2OTlmOTQ3YS8xL01LSjFnR1NhbVM1QjR5ejR3 U0pGNEhfNS1jVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEwfcwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMlkTANBgkqhkiG9w0BAQsFAAOCAQEAKycCJe6FWEpIbDn8YX5efUfwkhn9st4E NXn/YicPwdAX6STfyvRHE3hR8JuvY0QTz6ZRj6+YxqLcckziCUeeUHXbqgCy0HrH e7slByIq5rMC3ve7KRmtAWV43X8R5MPZ27b9ZsA4yJuoBk1+h9Zdtqk9KytJPdzo 1kHnNeLTisrUKHMXqwqGL2kYl/W9by8S3w38c2czQRqSHWZRwwtFwtpmuw2F17+9 TC6U6og9YnOTdmWdF35CbZ9gnf4E2VzMp74JCyasYDp9/Zlz5qiBDARGsCHYzfEf gdre1DD3e3sYCXSTXYuja/ZY6QEtx65mJ26NfueqyAP5/ZX0DWsfHw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:31 2026 by rpki-client