This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer File: MKNPnR29IKqH-w9ivStsXjDGFKI.cer (raw, json) Hash identifier: H4wBwMjz0S3Et1YDakDJXYjZIydc4hZFRW/Xef8PmcA= Subject key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DEA61D90483F716C8D3C9C51536AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.110.180.0/23 IP: 195.88.212.0/24 IP: 2a14:dc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ea:61:d9:04:83:f7:16:c8:d3:c9:c5:15:36:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:98:84:7f:c8:be:76:6d:18:d5:4f:9d:6e: da:1a:5e:89:cb:98:b9:3e:2c:60:93:97:91:3c:53: 9e:8a:6f:87:8d:f7:28:af:83:06:0d:68:6d:87:bd: ca:8f:db:4e:68:7b:cd:6c:ec:71:b4:81:51:29:a9: bb:2e:28:19:04:11:c0:0c:d7:5a:72:bd:6d:2f:3d: 23:02:8e:bd:4e:92:f1:bf:5e:a8:bd:5e:cb:84:90: 4e:ab:0e:bc:9f:7a:18:6e:2c:e0:9d:8d:80:6f:a8: 01:03:e4:bf:f2:0c:34:c3:19:08:aa:a5:b1:cf:9a: 7a:93:f0:43:94:0f:e6:41:e4:41:f5:1a:30:04:94: fb:5c:94:dd:31:68:8b:6b:dd:29:7b:8b:f0:80:dd: 94:c5:13:6d:78:4b:ff:1b:74:62:8a:bb:32:d9:d9: b8:86:ec:c8:23:c2:a6:39:25:9a:a7:d3:77:97:66: 99:c6:95:ac:63:af:46:45:c4:73:98:9b:45:3f:66: b6:9f:99:3c:9b:fe:89:f1:c9:24:2c:6c:38:e8:83: b2:4a:b8:ce:c4:18:6f:4a:ab:92:7a:63:98:66:60: 34:f0:25:13:3b:1d:5d:17:8c:e4:8b:2c:7e:98:60: 20:47:0d:22:a3:ef:03:49:8e:39:40:d1:af:20:48: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.180.0/23 195.88.212.0/24 IPv6: 2a14:dc00::/29 Signature Algorithm: sha256WithRSAEncryption b0:09:57:37:a4:0e:ed:17:ed:4d:6f:3a:0a:89:c4:89:78:28: 9d:f0:a4:35:f7:f4:85:87:e3:ff:b3:7b:79:9a:1d:f0:32:01: 17:e3:13:9e:2d:81:eb:60:f2:ed:8e:63:ab:78:3e:60:3b:a8: b8:df:0f:46:4a:a7:29:f4:e9:a5:06:d3:d8:76:54:2c:97:d4: 40:0a:f1:95:31:76:d0:45:07:58:a2:33:aa:d2:23:11:d0:85: cd:6f:45:c1:4d:85:e0:43:a9:fe:fd:4f:01:4b:1f:a4:d6:d2: 2e:4d:07:70:b7:ef:45:bd:86:7d:6f:f7:9b:13:4a:c2:d3:4c: 8c:76:e0:62:71:fb:c5:96:91:48:c3:5e:59:13:46:b4:92:6f: 6e:a0:1d:76:44:e2:8b:11:87:8a:31:92:73:56:b6:27:81:41: f3:de:e4:da:68:88:99:e4:a9:8c:29:d4:c0:5e:1c:78:31:76: 29:a5:51:db:f2:e3:11:65:3a:c6:52:4b:1c:e2:bf:7a:cb:7c: 85:ce:9f:41:8c:e2:53:be:22:59:c0:07:6b:d2:dc:42:16:f6: 00:b0:40:3b:c4:83:2d:db:16:dc:88:04:94:7d:65:ce:55:7b: d6:76:9c:59:f0:bc:51:d9:82:f6:3f:54:c6:ac:e3:83:11:31: 84:49:c6:2d -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt5feph2QSD9xbI08nFFTavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGEzNGY5ZDFkYmQyMGFhODdmYjBmNjJiZDJiNmM1ZTMwYzYxNGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxKYhH/IvnZtGNVPnW7aGl6Jy5i5 Pixgk5eRPFOeim+Hjfcor4MGDWhth73Kj9tOaHvNbOxxtIFRKam7LigZBBHADNda cr1tLz0jAo69TpLxv16ovV7LhJBOqw68n3oYbizgnY2Ab6gBA+S/8gw0wxkIqqWx z5p6k/BDlA/mQeRB9RowBJT7XJTdMWiLa90pe4vwgN2UxRNteEv/G3Riirsy2dm4 huzII8KmOSWap9N3l2aZxpWsY69GRcRzmJtFP2a2n5k8m/6J8ckkLGw46IOySrjO xBhvSquSemOYZmA08CUTOx1dF4zkiyx+mGAgRw0io+8DSY45QNGvIEgYcwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFDCjT50dvSCqh/sPYr0rbF4wxhSiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2VlNDcz Mi1jM2JhLTQwODgtYTVmYS1lYjY1M2QzNjIyYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZWU0NzMy LWMzYmEtNDA4OC1hNWZhLWViNjUzZDM2MjJiYi8xL01LTlBuUjI5SUtxSC13OWl2 U3RzWGpER0ZLSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwW60AwQAw1jUMA0EAgACMAcDBQMqFNwAMA0G CSqGSIb3DQEBCwUAA4IBAQCwCVc3pA7tF+1NbzoKicSJeCid8KQ19/SFh+P/s3t5 mh3wMgEX4xOeLYHrYPLtjmOreD5gO6i43w9GSqcp9OmlBtPYdlQsl9RACvGVMXbQ RQdYojOq0iMR0IXNb0XBTYXgQ6n+/U8BSx+k1tIuTQdwt+9FvYZ9b/ebE0rC00yM duBicfvFlpFIw15ZE0a0km9uoB12ROKLEYeKMZJzVrYngUHz3uTaaIiZ5KmMKdTA Xhx4MXYppVHb8uMRZTrGUksc4r96y3yFzp9BjOJTviJZwAdr0txCFvYAsEA7xIMt 2xbciASUfWXOVXvWdpxZ8LxR2YL2P1TGrOODETGEScYt -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:23 2026 by rpki-client