This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer File: MRhMnotqpAfA1z7QugYwdfYxTjY.cer (raw, json) Hash identifier: mWXrrU/lXOWlyH2+fZyeqvMZGc4c+nxIhiwnmHT7FcM= Subject key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36C393E989C5075AFC871AFB552883 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.95.217.0/24 IP: 89.107.13.0/24 IP: 2a13:f440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c3:93:e9:89:c5:07:5a:fc:87:1a:fb:55:28:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:46:64:3f:fa:0c:cd:6c:82:d8:52:60:89: 55:44:6a:86:7f:2d:32:82:7f:7f:fd:ce:f4:81:a1: 2a:a4:7b:f6:29:3f:71:23:ad:ee:52:2e:67:f5:58: a5:91:0d:b2:3f:57:8e:7e:00:cd:a8:1a:b4:c0:47: ea:a8:2b:cd:d1:50:e1:ff:3b:8c:48:dc:09:c0:76: a2:39:c2:55:7e:1b:59:04:2e:0e:56:29:46:d3:fd: 38:66:c9:88:cb:65:eb:a1:c2:dd:90:d9:66:b6:32: 0a:ad:13:28:07:37:51:2b:f0:b0:f2:0a:b4:05:ff: b7:18:ba:6f:72:d1:e6:1d:5a:bf:51:eb:64:52:03: 21:9f:49:2d:01:f0:8a:1e:38:15:23:53:2f:ae:cb: e1:d8:37:74:33:7e:e0:88:4b:c4:53:e6:2b:9d:c0: f3:87:96:26:2a:87:90:a4:76:6b:ef:3e:25:a7:58: 37:d1:8a:da:6f:22:bc:09:95:97:15:d7:be:91:bd: e4:02:f0:6b:6f:94:c9:d8:6b:0b:81:50:9f:9e:f7: 9f:18:eb:9a:4c:11:f8:d8:57:59:bc:56:15:35:bf: f8:cc:84:0e:10:a1:da:0a:95:07:1e:cf:4b:f5:59: dd:e0:ca:8b:56:1f:2a:b9:ea:01:c5:df:92:22:a1: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.217.0/24 89.107.13.0/24 IPv6: 2a13:f440::/29 Signature Algorithm: sha256WithRSAEncryption 49:57:be:fb:f4:87:da:e0:67:71:ae:11:27:71:4b:7b:43:30: 49:5a:9c:46:4c:a5:5a:e7:7f:e5:a5:0c:b8:de:4e:f3:aa:17: f9:11:f7:26:ae:0b:95:ee:d0:06:82:40:36:96:6b:a9:83:87: 42:32:6e:f0:a8:7c:3e:fa:54:68:c5:cd:8b:40:97:69:01:93: 87:2a:dc:4c:86:99:9e:74:c6:f6:a2:a0:ab:82:2d:93:fa:ba: ab:7f:d6:62:61:cc:9b:dd:ec:fb:41:1a:38:8a:f8:d5:d9:80: 9c:d0:29:dc:1d:ec:82:0d:de:fd:62:fc:b6:c2:66:40:76:4c: 60:99:7b:d3:21:b0:56:79:4c:2e:d1:36:01:1a:4b:1a:23:4e: 76:4c:a4:a0:24:91:76:f0:0c:f9:46:c8:d0:8b:ef:67:80:d9: 54:f7:f9:6f:01:6d:da:c1:06:eb:2f:16:d1:7a:8d:19:a1:91: 04:ed:ee:26:c8:38:a4:06:81:0a:46:3b:e2:f1:b7:49:65:3d: 3d:c1:05:5a:c7:fa:88:a5:83:97:51:27:58:a6:d4:5b:2c:e3: f9:6f:78:8c:8b:a9:0d:21:a2:49:2a:8b:e6:48:7d:ec:c2:fe: ca:ba:0f:92:5d:a4:37:3c:c8:6c:04:9d:a8:25:c9:54:c4:47: 5a:d0:08:4b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt7NsOT6YnFB1r8hxr7VSiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTE4NGM5ZThiNmFhNDA3YzBkNzNlZDBiYTA2MzA3NWY2MzE0ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYtGZD/6DM1sgthSYIlVRGqGfy0y gn9//c70gaEqpHv2KT9xI63uUi5n9VilkQ2yP1eOfgDNqBq0wEfqqCvN0VDh/zuM SNwJwHaiOcJVfhtZBC4OVilG0/04ZsmIy2XrocLdkNlmtjIKrRMoBzdRK/Cw8gq0 Bf+3GLpvctHmHVq/UetkUgMhn0ktAfCKHjgVI1Mvrsvh2Dd0M37giEvEU+YrncDz h5YmKoeQpHZr7z4lp1g30YrabyK8CZWXFde+kb3kAvBrb5TJ2GsLgVCfnvefGOua TBH42FdZvFYVNb/4zIQOEKHaCpUHHs9L9Vnd4MqLVh8queoBxd+SIqFg+wIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFDEYTJ6LaqQHwNc+0LoGMHX2MU42MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzZmOGY0 My0xYTE5LTQxMGYtYTJmMy1lNGFjNzA2ZGExNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvNmY4ZjQz LTFhMTktNDEwZi1hMmYzLWU0YWM3MDZkYTE0OC8xL01SaE1ub3RxcEFmQTF6N1F1 Z1l3ZGZZeFRqWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQATV/ZAwQAWWsNMA0EAgACMAcDBQMqE/RAMA0G CSqGSIb3DQEBCwUAA4IBAQBJV7779Ifa4GdxrhEncUt7QzBJWpxGTKVa53/lpQy4 3k7zqhf5EfcmrguV7tAGgkA2lmupg4dCMm7wqHw++lRoxc2LQJdpAZOHKtxMhpme dMb2oqCrgi2T+rqrf9ZiYcyb3ez7QRo4ivjV2YCc0CncHeyCDd79Yvy2wmZAdkxg mXvTIbBWeUwu0TYBGksaI052TKSgJJF28Az5RsjQi+9ngNlU9/lvAW3awQbrLxbR eo0ZoZEE7e4myDikBoEKRjvi8bdJZT09wQVax/qIpYOXUSdYptRbLOP5b3iMi6kN IaJJKovmSH3swv7Kug+SXaQ3PMhsBJ2oJclUxEda0AhL -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:43 2026 by rpki-client