This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer (raw, json) Hash identifier: aUOSjMNKSnGOODnNhxk4nlhYiyiR8z1DMmK4UMmULXs= Subject key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED5DAFBA4D14111B4534D41AFA5613 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.84.247.0/24 IP: 193.84.250.0/24 IP: 193.84.253.0 -- 193.84.254.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5d:af:ba:4d:14:11:1b:45:34:d4:1a:fa:56:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30d5e2022ea82ec77f92dddb776618cd6c057575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:d3:c4:30:d8:3f:72:54:bd:8f:12:c4:46: 2f:c8:c2:67:15:ce:dc:f2:33:69:49:b3:32:57:af: 74:8c:b6:7b:0e:e3:aa:df:4d:54:40:fc:eb:c8:22: 0f:90:7f:fc:7d:40:60:38:43:ad:36:2c:97:29:b9: 7f:f4:1b:08:14:83:4c:cb:e9:37:b0:96:ad:59:88: 4b:ac:e4:6e:af:2a:09:17:c3:c5:d1:f0:a5:c1:1b: 05:a5:33:89:01:d2:71:3e:70:c6:af:d0:8c:c4:9e: 1c:10:5e:bf:62:98:bd:ed:c8:14:aa:a9:06:fe:9f: 07:61:8d:8c:e9:27:44:6d:72:7a:9e:65:58:d3:1e: 8e:20:8e:44:dd:89:78:96:c2:b4:0c:55:21:4c:be: f6:07:f5:16:4d:3a:d5:83:5d:27:1c:5b:b8:c7:a3: 3a:01:25:0f:13:c6:a9:5f:b0:e2:5b:59:93:22:0c: 15:2e:30:2d:01:a1:8e:8f:13:0c:57:4c:8d:81:15: 12:04:0f:32:df:00:37:f4:04:5c:82:b8:48:d0:06: a6:1f:cb:4e:b2:32:4e:c7:f0:38:c6:ca:35:3a:76: d9:c2:3c:b9:fb:7f:f1:b0:9d:29:68:cc:1d:5a:70: 58:cc:04:8d:89:da:a3:46:36:7e:03:71:d0:3e:0d: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.247.0/24 193.84.250.0/24 193.84.253.0-193.84.254.255 Signature Algorithm: sha256WithRSAEncryption 6b:6d:6f:e6:a2:f5:33:d7:32:7c:da:38:cc:62:c2:6e:9b:76: 3b:e2:72:bf:1a:3f:d5:77:bc:c4:c2:f1:fa:b9:1d:af:0e:db: 1b:09:a2:9c:ae:db:5d:cb:da:d1:c0:1b:e4:24:53:eb:f3:2f: 43:38:7c:cc:af:60:57:af:b3:30:e3:a4:37:e5:8c:f3:17:a4: 13:79:7e:76:bb:b9:d1:22:7d:12:ed:6e:3e:c3:35:ce:17:c2: a3:e2:34:61:7c:bc:aa:e8:2a:4f:b1:f1:d8:a2:d1:e0:d1:dd: db:2f:2d:bb:4f:a1:ba:54:d1:b2:f0:18:ab:11:97:2b:94:86: ee:9a:7a:0c:71:2b:27:e6:0b:a3:35:23:b7:bd:61:79:d0:ef: 23:b8:82:4f:4b:b2:8c:a5:aa:2c:b7:65:ad:97:69:d0:81:53: d5:75:cb:c3:bf:f3:21:da:28:33:b4:cd:a0:2a:bc:09:e2:98: a7:c6:92:9b:7f:4e:be:20:94:49:7c:43:fe:9f:5b:b2:2e:13: e6:98:87:f3:a1:f3:fa:a5:45:57:36:9b:8d:e3:e9:a1:6c:10: e0:0f:cc:59:c3:a1:a2:57:bb:a1:cc:6a:69:79:8b:15:d9:09: 09:3b:fd:f1:97:61:bd:09:76:c9:39:2b:90:d6:8e:b4:ef:9d: e1:49:e8:d0 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt87V2vuk0UERtFNNQa+lYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGQ1ZTIwMjJlYTgyZWM3N2Y5MmRkZGI3NzY2MThjZDZjMDU3NTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8fTxDDYP3JUvY8SxEYvyMJnFc7c 8jNpSbMyV690jLZ7DuOq301UQPzryCIPkH/8fUBgOEOtNiyXKbl/9BsIFINMy+k3 sJatWYhLrORuryoJF8PF0fClwRsFpTOJAdJxPnDGr9CMxJ4cEF6/Ypi97cgUqqkG /p8HYY2M6SdEbXJ6nmVY0x6OII5E3Yl4lsK0DFUhTL72B/UWTTrVg10nHFu4x6M6 ASUPE8apX7DiW1mTIgwVLjAtAaGOjxMMV0yNgRUSBA8y3wA39ARcgrhI0AamH8tO sjJOx/A4xso1OnbZwjy5+3/xsJ0paMwdWnBYzASNidqjRjZ+A3HQPg2pHQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFDDV4gIuqC7Hf5Ld23dmGM1sBXV1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2Y3Y2E0 YS1jYTczLTQ3ZjgtOWZkNy05YjJmNTFiODBhOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZjdjYTRh LWNhNzMtNDdmOC05ZmQ3LTliMmY1MWI4MGE5OC8xL01OWGlBaTZvTHNkX2t0M2Jk MllZeld3RmRYVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjAgBAIAATAaAwQAwVT3AwQAwVT6MAwDBADBVP0DBADBVP4wDQYJ KoZIhvcNAQELBQADggEBAGttb+ai9TPXMnzaOMxiwm6bdjvicr8aP9V3vMTC8fq5 Ha8O2xsJopyu213L2tHAG+QkU+vzL0M4fMyvYFevszDjpDfljPMXpBN5fna7udEi fRLtbj7DNc4XwqPiNGF8vKroKk+x8dii0eDR3dsvLbtPobpU0bLwGKsRlyuUhu6a egxxKyfmC6M1I7e9YXnQ7yO4gk9Lsoylqiy3Za2XadCBU9V1y8O/8yHaKDO0zaAq vAnimKfGkpt/Tr4glEl8Q/6fW7IuE+aYh/Oh8/qlRVc2m43j6aFsEOAPzFnDoaJX u6HMaml5ixXZCQk7/fGXYb0Jdsk5K5DWjrTvneFJ6NA= -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:36 2026 by rpki-client