This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer (raw, json) Hash identifier: O/nLNrt0k57lO0oGcBgOPahHqbVCrT+ydPLs7RElzak= Subject key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB00FCAD0ED210ACFFA6F998BDA1FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204607 IP: 83.143.120.0/21 IP: 185.245.108.0/22 IP: 193.162.108.0 -- 193.162.113.255 IP: 2a0d:5680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:00:fc:ad:0e:d2:10:ac:ff:a6:f9:98:bd:a1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31d7d9d29cecf8e59122233d716e6b050e718478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:56:c3:51:e7:62:15:c0:ae:f3:49:97:76: 75:cc:8d:0f:3e:22:d3:25:e2:31:1d:c2:27:cd:0a: 66:f8:dc:31:57:dc:b4:2a:b1:64:74:12:c9:56:dc: 00:79:bc:c2:3a:8d:c2:93:d4:54:de:64:24:e0:f6: e4:58:e4:72:47:0a:16:38:b6:d6:27:c5:8c:45:7d: 75:88:27:ed:a5:cf:2b:b8:5f:ce:04:12:4c:9e:e7: cf:90:16:81:7d:21:b8:20:90:c8:07:15:ec:0c:87: 58:16:7f:56:a6:79:66:b3:fc:d9:5b:c4:43:b1:84: b3:f3:f5:59:ee:3c:5a:63:d0:d5:43:88:86:f5:54: ee:80:58:58:68:91:fe:db:3c:c4:cf:f7:96:8b:99: 75:be:64:aa:0b:9b:9e:ec:ed:c5:51:65:74:68:d0: 44:9f:6c:05:69:be:ca:e4:81:cf:1d:60:b4:5e:f3: fa:97:92:43:28:5f:e8:ad:10:a7:dc:10:6e:14:8d: cc:57:b4:d4:03:bb:18:f0:48:ad:83:73:2f:89:21: 33:6b:16:34:e4:c0:3a:77:bf:b8:65:12:f2:df:1f: d8:e1:fd:da:89:f3:11:dc:d3:f4:a5:4c:89:b1:2c: ad:27:c5:24:be:d5:48:14:ab:ed:f1:6b:da:e1:f6: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.120.0/21 185.245.108.0/22 193.162.108.0-193.162.113.255 IPv6: 2a0d:5680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204607 Signature Algorithm: sha256WithRSAEncryption 99:f6:1b:f7:85:af:eb:5a:f1:f1:ab:f8:19:71:8c:d8:1e:96: b9:44:a2:11:d8:04:e1:78:d0:8f:b2:c7:5e:b6:79:9b:d9:01: ff:48:4f:35:ab:b4:6d:5d:83:55:a6:9e:68:ce:ef:1a:8b:f9: cf:86:1f:58:20:b6:78:5d:1c:c1:5e:b8:9e:aa:a1:4e:d9:b6: d9:9e:91:9c:85:5d:83:c4:fd:20:ac:46:4d:e0:c0:21:9f:db: 26:79:e3:71:4a:05:6a:03:7d:8e:22:f9:15:27:c8:36:bb:6d: 00:4d:4d:29:ea:0b:3e:2b:a0:14:c9:14:ac:e0:46:f2:15:a0: 87:30:45:5d:cc:ad:10:fa:8c:46:66:cd:18:24:3e:dc:ad:9f: 9b:cd:9a:1f:55:2b:6c:91:41:dc:3d:31:92:05:b3:72:7b:a1: e2:a4:2d:31:09:fe:71:ae:a4:e4:c5:56:03:ce:a3:3a:27:6b: 53:ab:54:c1:eb:b7:f4:16:fc:a0:be:f0:45:2f:61:92:fb:94: 49:f2:9c:f1:ec:31:d1:51:df:ed:e9:99:7c:42:f5:0a:d3:ba: 0d:fb:73:b6:c1:3d:97:f6:6f:c3:95:d9:d9:f6:25:cb:98:6a: 1f:2b:fa:4e:7a:66:0e:24:ec:8f:c9:6e:ff:18:4e:31:ea:b6: 5e:05:86:47 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt26wD8rQ7SEKz/pvmYvaH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWQ3ZDlkMjljZWNmOGU1OTEyMjIzM2Q3MTZlNmIwNTBlNzE4NDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg9Ww1HnYhXArvNJl3Z1zI0PPiLT JeIxHcInzQpm+NwxV9y0KrFkdBLJVtwAebzCOo3Ck9RU3mQk4PbkWORyRwoWOLbW J8WMRX11iCftpc8ruF/OBBJMnufPkBaBfSG4IJDIBxXsDIdYFn9Wpnlms/zZW8RD sYSz8/VZ7jxaY9DVQ4iG9VTugFhYaJH+2zzEz/eWi5l1vmSqC5ue7O3FUWV0aNBE n2wFab7K5IHPHWC0XvP6l5JDKF/orRCn3BBuFI3MV7TUA7sY8Eitg3MviSEzaxY0 5MA6d7+4ZRLy3x/Y4f3aifMR3NP0pUyJsSytJ8UkvtVIFKvt8Wva4fbmkwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFDHX2dKc7PjlkSIjPXFuawUOcYR4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2FmODMy Yi1hNjQxLTRlNDYtYTgzNi00MGY0YzY4ZTlhMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWY4MzJi LWE2NDEtNGU0Ni1hODM2LTQwZjRjNjhlOWEzMS8xL01kZlowcHpzLU9XUklpTTlj VzVyQlE1eGhIZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQDU494AwQCufVsMAwDBALBomwDBAHBonAwDQQC AAIwBwMFAyoNVoAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAx8/MA0GCSqGSIb3 DQEBCwUAA4IBAQCZ9hv3ha/rWvHxq/gZcYzYHpa5RKIR2ATheNCPssdetnmb2QH/ SE81q7RtXYNVpp5ozu8ai/nPhh9YILZ4XRzBXrieqqFO2bbZnpGchV2DxP0grEZN 4MAhn9smeeNxSgVqA32OIvkVJ8g2u20ATU0p6gs+K6AUyRSs4EbyFaCHMEVdzK0Q +oxGZs0YJD7crZ+bzZofVStskUHcPTGSBbNye6HipC0xCf5xrqTkxVYDzqM6J2tT q1TB67f0FvygvvBFL2GS+5RJ8pzx7DHRUd/t6Zl8QvUK07oN+3O2wT2X9m/DldnZ 9iXLmGofK/pOemYOJOyPyW7/GE4x6rZeBYZH -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:27 2026 by rpki-client