This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer File: Mns0IMJQE3legioq5Q043B04J5M.cer (raw, json) Hash identifier: 2KPRUtJcatZ1IDrshcunyOUGMD4h4CuNnQWdD6Pp9wI= Subject key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECDD1D521614928BB2CF47A4272283 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207582 IP: 91.205.41.0/24 IP: 185.248.59.0/24 IP: 2a07:a700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:dd:1d:52:16:14:92:8b:b2:cf:47:a4:27:22:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=327b3420c25013795e822a2ae50d38dc1d382793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:34:17:43:0d:10:30:ec:b2:84:9e:46:39:05: 83:02:37:99:7c:57:c8:f2:cb:43:b8:e4:6e:6f:0c: 49:e2:a6:36:3d:b1:95:2f:56:9c:73:c8:23:41:67: fe:6e:eb:f1:50:c8:cb:36:5f:ce:ed:61:df:8b:ce: c8:3c:18:4e:04:9c:db:86:58:ab:6c:3b:d9:8e:44: 5d:54:82:1f:b7:1d:f2:54:65:5f:69:e3:eb:91:bf: bb:24:0d:92:db:8b:5b:f2:98:bb:97:61:a0:52:7e: a6:f6:ae:97:d8:24:19:d1:9c:59:ce:6d:5d:57:94: 7c:68:67:e2:6c:f5:19:2a:23:e2:cc:14:8d:9a:9c: 27:10:d6:bf:84:18:84:af:1d:37:8d:47:84:ac:15: 2a:02:a4:22:d5:1e:aa:b4:cd:d8:fa:b7:d7:29:7b: d6:e9:72:a6:a6:03:7f:86:16:0f:1d:60:66:fe:8e: bd:e9:5d:de:2a:06:e1:1f:dc:de:c5:86:33:ce:11: 29:bb:15:b4:1c:e0:b4:92:84:f7:bc:e4:ca:9e:5d: a0:4c:b9:c0:77:2a:82:78:9c:a3:6b:be:a5:b4:fa: c8:d9:3b:81:50:a7:cc:d8:70:57:63:26:88:33:b6: a9:d5:e5:4d:7a:83:45:d2:5e:50:59:bc:bd:25:e9: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.41.0/24 185.248.59.0/24 IPv6: 2a07:a700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207582 Signature Algorithm: sha256WithRSAEncryption 00:f8:ea:51:f3:7a:5b:0d:72:49:c1:ce:26:d4:6b:08:aa:71: 10:53:6e:23:31:79:6a:16:e0:5a:20:0d:80:31:f7:d2:ba:cb: e5:2e:e3:4f:30:02:19:d6:d8:bf:a9:e7:67:7a:80:e4:ab:e5: 33:94:77:db:b7:ad:d3:52:c3:cd:de:39:4e:5f:d6:d1:fc:4f: 76:e4:e9:d9:84:4a:ed:f1:d2:27:e4:88:3d:2e:4c:e8:f4:d4: 9d:1b:b3:59:c6:c7:e8:92:0a:66:7c:89:ca:2b:2e:8d:42:ec: 53:ed:e5:8a:55:49:42:8a:7b:e0:28:6e:a3:34:57:71:1f:43: 43:fb:47:f2:a5:33:aa:bd:4c:3b:0d:ca:f2:fc:bf:42:7d:d7: 0c:17:e7:1f:56:df:50:b1:d0:78:92:d7:be:45:7e:06:81:50: dc:da:62:2c:c0:3d:bb:56:aa:de:f2:94:07:71:bd:30:49:2f: 3a:6e:1b:d4:dc:7f:00:a1:51:b6:79:53:a6:13:dc:17:57:55: b1:cf:37:6f:2a:29:f1:c4:a8:25:f7:fc:e0:f0:6c:b5:f4:70: 57:61:f2:1c:cc:aa:a8:e0:10:45:d0:ff:e9:72:89:d7:be:95: 87:2b:ca:c4:cf:80:f4:eb:71:03:87:07:d0:dc:66:a1:71:ba: 21:ae:cc:2e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87N0dUhYUkouyz0ekJyKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjdiMzQyMGMyNTAxMzc5NWU4MjJhMmFlNTBkMzhkYzFkMzgyNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DQXQw0QMOyyhJ5GOQWDAjeZfFfI 8stDuORubwxJ4qY2PbGVL1acc8gjQWf+buvxUMjLNl/O7WHfi87IPBhOBJzbhlir bDvZjkRdVIIftx3yVGVfaePrkb+7JA2S24tb8pi7l2GgUn6m9q6X2CQZ0ZxZzm1d V5R8aGfibPUZKiPizBSNmpwnENa/hBiErx03jUeErBUqAqQi1R6qtM3Y+rfXKXvW 6XKmpgN/hhYPHWBm/o696V3eKgbhH9zexYYzzhEpuxW0HOC0koT3vOTKnl2gTLnA dyqCeJyja76ltPrI2TuBUKfM2HBXYyaIM7ap1eVNeoNF0l5QWby9JemRNQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDJ7NCDCUBN5XoIqKuUNONwdOCeTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzM2MzFl MC01NmQ3LTRjMjktOTVjNC02NjgyYjA3ZmE5NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvMzYzMWUw LTU2ZDctNGMyOS05NWM0LTY2ODJiMDdmYTk0Ny8xL01uczBJTUpRRTNsZWdpb3E1 UTA0M0IwNEo1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW80pAwQAufg7MA0EAgACMAcDBQMqB6cAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMq3jANBgkqhkiG9w0BAQsFAAOCAQEAAPjq UfN6Ww1yScHOJtRrCKpxEFNuIzF5ahbgWiANgDH30rrL5S7jTzACGdbYv6nnZ3qA 5KvlM5R327et01LDzd45Tl/W0fxPduTp2YRK7fHSJ+SIPS5M6PTUnRuzWcbH6JIK ZnyJyisujULsU+3lilVJQop74ChuozRXcR9DQ/tH8qUzqr1MOw3K8vy/Qn3XDBfn H1bfULHQeJLXvkV+BoFQ3NpiLMA9u1aq3vKUB3G9MEkvOm4b1Nx/AKFRtnlTphPc F1dVsc83byop8cSoJff84PBstfRwV2HyHMyqqOAQRdD/6XKJ176VhyvKxM+A9Otx A4cH0NxmoXG6Ia7MLg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:57:47 2026 by rpki-client