This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer File: MNimSQPPohc3l0nxi3_c6h2rbbQ.cer (raw, json) Hash identifier: oECAKs668/MjjwSgmmTNbDok6Zz7KJJNf/jvqUx4dvA= Subject key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C731B2EC6002EB32B489B8106D4873 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202032 IP: 185.54.80.0/22 IP: 2a02:4460::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:31:b2:ec:60:02:eb:32:b4:89:b8:10:6d:48:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:26:7c:ad:1d:95:79:12:e1:2f:58:8a:ee:e2: e2:51:46:c4:3c:ea:b7:bd:23:38:c5:d7:e1:95:30: e3:a6:31:f9:9d:58:47:68:10:ef:d4:75:ea:c1:74: 59:9a:ce:1d:3c:ae:56:bb:78:0f:01:1d:cc:e5:5f: 93:73:b6:03:e3:be:5b:c0:1a:72:02:11:fc:f1:fa: 5c:e7:b9:7a:8e:88:2d:f8:82:83:7b:ed:04:5b:b1: 77:6a:3c:4d:75:8b:f1:ed:01:3f:8b:eb:8d:ec:b7: b8:a2:4f:6a:cc:f2:a8:66:91:24:62:c3:30:5e:9b: 35:03:ae:ce:65:74:ac:8a:3b:69:24:b4:b3:c2:8d: dd:05:a8:52:db:cc:c4:01:e5:11:46:00:50:94:69: 17:a7:99:41:11:30:6d:d0:a2:a6:46:71:d2:71:a9: cf:96:3f:a8:6e:29:90:c4:a7:8f:04:dd:0a:7c:ae: d4:30:d5:fe:6f:6a:ae:7a:3a:b6:2b:1c:bd:13:f1: 0f:46:f0:22:1e:a3:da:1d:72:8f:37:09:81:0f:b3: ab:9f:e2:5e:3a:c2:62:40:37:66:84:61:a1:5a:f0: 04:2c:6e:c6:72:b5:ed:4b:8e:d3:c1:e1:58:8c:b4: 01:87:4b:22:58:a3:5c:10:d3:3d:73:f8:c5:34:17: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.80.0/22 IPv6: 2a02:4460::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202032 Signature Algorithm: sha256WithRSAEncryption 1d:3d:27:92:1d:b6:20:9d:df:f2:f6:97:98:f7:21:ce:8d:ed: 68:71:9c:6a:4f:35:6f:0c:82:c6:14:b7:17:43:c4:89:ec:f2: 27:30:89:3b:3f:84:a6:13:fc:34:e6:72:31:fa:56:f6:4f:72: 33:da:d7:c9:1d:46:55:e2:49:aa:a5:5f:aa:96:f8:ed:91:00: bd:db:96:fa:40:72:70:10:d1:4b:72:3e:02:3f:81:83:e1:bc: 91:e8:6d:07:42:50:df:a2:85:ec:21:d0:3a:df:32:7d:b7:53: c4:c8:41:00:6f:f8:10:79:7a:ee:72:af:20:fb:e9:43:76:0a: 0f:5c:a7:d4:4f:1e:93:27:b0:00:86:d7:4a:13:8d:aa:b7:22: f0:a5:62:95:6d:e4:d8:9c:db:c6:b1:76:f1:c9:48:3f:bf:ef: 65:f0:53:a1:0d:01:9d:70:16:0e:7d:16:d0:f9:b3:1e:e0:d7: 9f:cc:5e:75:40:e2:11:57:cc:50:6d:b8:c8:0b:cb:32:1f:52: 36:d8:7a:fd:58:5d:ba:09:6e:85:ff:3e:a8:d4:a3:d7:cd:9f: d1:a9:c5:70:b3:dc:cd:97:87:2f:84:88:e2:1f:22:ca:e3:4b: 98:8a:ac:f5:49:5d:11:76:f2:24:1a:21:cf:2e:ef:01:5c:ba: 45:f4:63:6a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xzGy7GAC6zK0ibgQbUhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGQ4YTY0OTAzY2ZhMjE3Mzc5NzQ5ZjE4YjdmZGNlYTFkYWI2ZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CZ8rR2VeRLhL1iK7uLiUUbEPOq3 vSM4xdfhlTDjpjH5nVhHaBDv1HXqwXRZms4dPK5Wu3gPAR3M5V+Tc7YD475bwBpy AhH88fpc57l6jogt+IKDe+0EW7F3ajxNdYvx7QE/i+uN7Le4ok9qzPKoZpEkYsMw Xps1A67OZXSsijtpJLSzwo3dBahS28zEAeURRgBQlGkXp5lBETBt0KKmRnHScanP lj+obimQxKePBN0KfK7UMNX+b2quejq2Kxy9E/EPRvAiHqPaHXKPNwmBD7Orn+Je OsJiQDdmhGGhWvAELG7GcrXtS47TweFYjLQBh0siWKNcENM9c/jFNBdyKQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDDYpkkDz6IXN5dJ8Yt/3Oodq220MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2I3YTI0 OS0xNTUyLTRmMTAtYjAwOC0xZjY2ZmFhYjRhYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvYjdhMjQ5 LTE1NTItNGYxMC1iMDA4LTFmNjZmYWFiNGFiNS8xL01OaW1TUVBQb2hjM2wwbnhp M19jNmgycmJiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTZQMA0EAgACMAcDBQAqAkRgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMVMDANBgkqhkiG9w0BAQsFAAOCAQEAHT0nkh22IJ3f 8vaXmPchzo3taHGcak81bwyCxhS3F0PEiezyJzCJOz+EphP8NOZyMfpW9k9yM9rX yR1GVeJJqqVfqpb47ZEAvduW+kBycBDRS3I+Aj+Bg+G8kehtB0JQ36KF7CHQOt8y fbdTxMhBAG/4EHl67nKvIPvpQ3YKD1yn1E8ekyewAIbXShONqrci8KVilW3k2Jzb xrF28clIP7/vZfBToQ0BnXAWDn0W0PmzHuDXn8xedUDiEVfMUG24yAvLMh9SNth6 /Vhdugluhf8+qNSj182f0anFcLPczZeHL4SI4h8iyuNLmIqs9UldEXbyJBohzy7v AVy6RfRjag== -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:17 2026 by rpki-client