This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer (raw, json) Hash identifier: ywcLPS4Gk85d/lKyHWB3JDASQHqHfjEzjXC8BCLY34s= Subject key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F151F47D2F93BA142A16A6D01984AD3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42898 AS: 59741 AS: 201882 IP: 45.141.52.0/22 IP: 45.155.76.0/22 IP: 185.73.240.0/22 IP: 2a05:4740::/29 IP: 2a0e:de40::/29 IP: 2a0f:680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1f:47:d2:f9:3b:a1:42:a1:6a:6d:01:98:4a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c3:8d:be:a3:91:0f:bb:96:86:95:aa:b9:49: 23:fb:69:c4:0d:f2:5d:15:fa:d0:44:46:4a:9f:0d: f2:bb:72:11:4f:4b:3f:40:69:e3:8f:2b:1a:c1:d1: 20:79:df:39:57:be:c4:0e:62:90:6b:80:2b:d6:1b: bc:53:2d:d7:ea:48:b2:c8:4f:54:f8:1a:c0:8d:35: b0:7f:33:82:21:c4:03:fb:ac:11:53:c1:c6:87:f4: 87:84:c1:dc:21:50:b3:cf:38:90:3f:14:e5:79:12: 16:73:12:42:fc:6f:17:33:d3:c3:cf:e4:35:28:61: 49:13:b9:96:ca:dc:ba:f0:f2:a2:f2:eb:f7:b8:2a: 42:8b:47:c2:a2:30:96:98:5c:04:21:40:59:92:df: f5:c7:66:92:5e:4d:00:b9:70:ac:52:cf:4f:96:4c: 95:a5:f7:8a:2a:6d:cb:a7:6b:82:df:c4:ff:14:79: c8:6a:48:35:ec:07:15:11:97:fc:98:2b:7a:3b:34: eb:ce:fa:2c:48:19:37:4a:59:f1:db:13:b2:7b:53: 0d:40:95:8b:40:11:35:0e:a0:8d:1d:48:31:39:7c: 48:96:e1:46:1e:c1:a9:5c:28:87:ee:c3:3d:0a:27: 81:c4:90:5d:73:33:3a:f2:ce:ee:4b:b2:2f:87:8a: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.52.0/22 45.155.76.0/22 185.73.240.0/22 IPv6: 2a05:4740::/29 2a0e:de40::/29 2a0f:680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42898 59741 201882 Signature Algorithm: sha256WithRSAEncryption a3:f3:a2:69:33:54:8d:fe:de:11:d1:cd:6c:5f:d9:42:98:fd: 56:da:af:17:6f:12:1e:c6:17:fe:2b:db:5b:73:77:6a:7f:75: af:81:50:a6:00:43:1f:9c:9d:56:a7:13:0d:20:25:91:2d:c1: bf:e1:fb:6e:10:ab:ef:43:c4:e0:91:bd:6e:45:22:b6:b4:9e: 12:f2:a2:2e:ba:95:b3:e4:d2:0f:32:2f:4e:db:99:01:46:c6: d5:12:20:a6:ec:0f:c1:50:f0:c3:b8:4a:b7:35:83:ab:31:be: 7a:ab:24:c3:f3:84:14:c8:ea:df:b8:ac:d8:66:39:8d:62:c4: 82:41:2d:59:d3:a4:96:a5:87:09:f9:f1:06:b0:ac:21:00:9f: 39:ab:90:a2:2c:54:1b:22:4c:3b:d8:91:7c:67:86:3e:e7:22: c9:ac:3b:8c:f4:6e:bf:5e:a5:c3:d3:4e:fe:ad:37:b9:a5:9f: 33:6a:3c:e8:d6:c0:c9:b3:52:37:af:20:f8:a7:6a:8c:65:ca: f5:57:71:fd:80:de:c1:70:1f:0d:17:15:46:eb:45:9b:79:62: 9e:e8:35:07:1b:53:17:75:00:b5:fd:13:47:11:84:6c:e1:e5: 38:31:60:af:11:55:ac:10:31:68:42:61:92:ea:61:70:c6:a7: d7:13:df:53 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt/FR9H0vk7oUKham0BmErTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjQ3NGFjN2NhODVlMDljMmQ0OGIzM2U3YmY2NmY4ZWQ3NjRkZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MONvqORD7uWhpWquUkj+2nEDfJd FfrQREZKnw3yu3IRT0s/QGnjjysawdEged85V77EDmKQa4Ar1hu8Uy3X6kiyyE9U +BrAjTWwfzOCIcQD+6wRU8HGh/SHhMHcIVCzzziQPxTleRIWcxJC/G8XM9PDz+Q1 KGFJE7mWyty68PKi8uv3uCpCi0fCojCWmFwEIUBZkt/1x2aSXk0AuXCsUs9PlkyV pfeKKm3Lp2uC38T/FHnIakg17AcVEZf8mCt6OzTrzvosSBk3Slnx2xOye1MNQJWL QBE1DqCNHUgxOXxIluFGHsGpXCiH7sM9CieBxJBdczM68s7uS7Ivh4q+pQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFDJHSsfKheCcLUizPnv2b47XZN4PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzFmZDBh Ni00NTE3LTRhMGItYjNjOS0xMmVjMjJjOWM1YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvMWZkMGE2 LTQ1MTctNGEwYi1iM2M5LTEyZWMyMmM5YzVhMi8xL01rZEt4OHFGNEp3dFNMTS1l X1p2anRkazNnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQCLY00AwQCLZtMAwQCuUnwMBsEAgACMBUDBQMq BUdAAwUDKg7eQAMFAyoPBoAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAKeSAgMA 6V0CAwMUmjANBgkqhkiG9w0BAQsFAAOCAQEAo/OiaTNUjf7eEdHNbF/ZQpj9Vtqv F28SHsYX/ivbW3N3an91r4FQpgBDH5ydVqcTDSAlkS3Bv+H7bhCr70PE4JG9bkUi trSeEvKiLrqVs+TSDzIvTtuZAUbG1RIgpuwPwVDww7hKtzWDqzG+eqskw/OEFMjq 37is2GY5jWLEgkEtWdOklqWHCfnxBrCsIQCfOauQoixUGyJMO9iRfGeGPuciyaw7 jPRuv16lw9NO/q03uaWfM2o86NbAybNSN68g+KdqjGXK9Vdx/YDewXAfDRcVRutF m3linug1BxtTF3UAtf0TRxGEbOHlODFgrxFVrBAxaEJhkuphcMan1xPfUw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:21 2026 by rpki-client