This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer File: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer (raw, json) Hash identifier: 0/eO0njnOSpL7icMF9g72diizTPW460aWDko4IrRSDI= Subject key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791019BAFBAB84CFD8891A773901C1F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 79.110.172.0/22 IP: 147.189.16.0/20 IP: 147.189.224.0/20 IP: 185.111.40.0/22 IP: 2a0d:1b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:19:ba:fb:ab:84:cf:d8:89:1a:77:39:01:c1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:99:27:0f:01:be:8d:f5:d1:b9:a0:73:b8: ed:ca:2c:10:8c:23:d4:9d:05:9e:0a:bc:62:e4:c8: 5f:5c:57:5c:5e:09:8b:be:58:0d:9f:69:26:5e:a2: 8a:6e:74:a8:0a:29:f5:59:9d:21:6d:22:24:31:7d: 73:0d:55:01:ea:dc:6f:77:9a:1f:ae:c0:bb:5b:71: 2a:53:6d:41:33:06:9a:2c:11:eb:1c:fc:b3:3a:c7: 83:e3:21:b5:c8:2b:b7:05:8e:7a:bf:48:3f:6a:4b: 14:59:44:1f:39:6e:6a:51:1f:0c:fc:ae:73:75:66: 18:05:2f:0d:7b:12:a8:fe:14:da:93:6a:19:0b:af: 55:ba:bb:d5:d7:7c:22:13:04:35:54:a7:07:c4:d5: 93:5f:f9:8a:15:f3:72:77:53:25:12:d6:8f:f5:4b: b1:33:52:37:d8:da:85:28:88:18:c9:e9:a1:0e:73: cd:31:5e:a0:6a:6a:47:c7:e3:9e:88:9f:ff:fc:c1: a1:a4:c6:97:49:4e:88:38:ff:f5:27:c3:4b:a4:0f: c0:2e:6c:f8:05:ca:56:61:23:2a:6d:4a:49:1c:3a: 60:3f:d8:dd:fa:94:a1:9e:fb:9c:29:db:bf:a9:7a: fc:e7:21:e8:3c:c8:0f:4e:7f:49:56:b3:b1:04:73: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.172.0/22 147.189.16.0/20 147.189.224.0/20 185.111.40.0/22 IPv6: 2a0d:1b40::/32 Signature Algorithm: sha256WithRSAEncryption 6d:43:d9:c5:a1:ef:38:a6:5f:7e:0b:29:01:d3:c5:cb:67:2e: c9:48:1e:90:d8:27:29:aa:78:19:f3:55:ee:75:ad:8e:07:bc: 92:6d:95:e3:f3:03:3b:98:54:01:4a:a3:ad:82:c7:71:f8:fd: b6:c7:25:40:2b:90:4f:79:88:88:7d:15:e4:b9:7f:0b:ef:fd: 65:36:29:30:43:82:e5:1c:ed:3a:08:3e:e6:fc:3c:56:e6:a1: 29:8c:60:94:96:5f:27:f2:90:cf:e1:88:a1:c9:c5:4b:7d:f8: b1:6c:3d:a8:49:d4:04:9c:0f:93:fa:27:7d:bf:e4:b5:4e:a2: 09:62:6d:70:c5:53:67:14:f1:fb:18:cb:bf:63:5b:d2:0c:a2: 55:ac:d9:d6:63:46:74:02:ad:95:5e:de:e9:38:ce:06:14:f7: a5:23:26:67:f0:ff:4a:b3:f3:98:07:79:0b:41:4e:81:bf:3e: da:33:93:8c:f8:3e:b8:0e:dc:af:29:4f:39:20:ef:19:d7:f6: 56:3e:b8:6a:53:c8:20:54:0d:03:c5:fd:43:9c:e5:5b:96:98: 62:4d:9a:fb:a6:be:3c:66:b8:99:db:dd:79:1e:5d:db:6a:fa: 27:30:b5:ee:04:4e:5e:e5:6d:f2:8b:8e:b0:74:e6:09:56:0c: d1:05:69:dc -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt5EBm6+6uEz9iJGnc5AcH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmFkODBkNDExYWNiOTM2ODVmNTU4YWE3ZTEyZjQ2YmQxNzBhN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+eZJw8Bvo310bmgc7jtyiwQjCPU nQWeCrxi5MhfXFdcXgmLvlgNn2kmXqKKbnSoCin1WZ0hbSIkMX1zDVUB6txvd5of rsC7W3EqU21BMwaaLBHrHPyzOseD4yG1yCu3BY56v0g/aksUWUQfOW5qUR8M/K5z dWYYBS8NexKo/hTak2oZC69VurvV13wiEwQ1VKcHxNWTX/mKFfNyd1MlEtaP9Uux M1I32NqFKIgYyemhDnPNMV6gampHx+OeiJ///MGhpMaXSU6IOP/1J8NLpA/ALmz4 BcpWYSMqbUpJHDpgP9jd+pShnvucKdu/qXr85yHoPMgPTn9JVrOxBHNn9wIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFDKtgNQRrLk2hfVYqn4S9GvRcKf7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzljMjUw OC1mNjliLTQ0NGItYjg2MC1kYzBlODFhOWQ3YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvOWMyNTA4 LWY2OWItNDQ0Yi1iODYwLWRjMGU4MWE5ZDdiNC8xL01xMkExQkdzdVRhRjlWaXFm aEwwYTlGd3Bfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCT26sAwQEk70QAwQEk73gAwQCuW8oMA0EAgAC MAcDBQAqDRtAMA0GCSqGSIb3DQEBCwUAA4IBAQBtQ9nFoe84pl9+CykB08XLZy7J SB6Q2CcpqngZ81Xuda2OB7ySbZXj8wM7mFQBSqOtgsdx+P22xyVAK5BPeYiIfRXk uX8L7/1lNikwQ4LlHO06CD7m/DxW5qEpjGCUll8n8pDP4YihycVLffixbD2oSdQE nA+T+id9v+S1TqIJYm1wxVNnFPH7GMu/Y1vSDKJVrNnWY0Z0Aq2VXt7pOM4GFPel IyZn8P9Ks/OYB3kLQU6Bvz7aM5OM+D64DtyvKU85IO8Z1/ZWPrhqU8ggVA0Dxf1D nOVblphiTZr7pr48ZriZ2915Hl3bavonMLXuBE5e5W3yi46wdOYJVgzRBWnc -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:12 2026 by rpki-client