This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer File: MvbeMKm492SENE0M07bAJz6t028.cer (raw, json) Hash identifier: 3hcoYNE0csR2mEZ/M0Q2IcpHSIKPZWNEOlfbvZRE8Qo= Subject key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C112BD7A2366D55682572CB19DA5A0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 87.251.20.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:2b:d7:a2:36:6d:55:68:25:72:cb:19:da:5a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:40:3c:88:5e:55:62:0f:74:44:52:b7:da: fa:00:70:a3:71:6c:b8:aa:4e:43:3e:5a:78:0d:cb: 38:3b:60:25:30:11:63:91:bf:e7:87:9a:8c:71:d0: f9:cf:8d:1a:ec:a1:f9:3d:1b:e8:cb:be:ab:79:6b: ff:ce:0d:c6:67:03:5c:8b:de:af:c4:94:82:ae:c1: 23:75:25:f0:93:7b:59:cb:10:3c:36:2e:72:e0:e4: c8:63:f0:74:b9:3e:95:7f:14:37:e2:cd:57:9f:55: f7:7d:4d:a7:67:77:04:02:1d:a8:c2:d3:4a:17:c9: 49:3e:22:21:80:5b:81:fd:2c:57:4d:75:6e:ce:18: 58:b8:27:16:2c:a1:d8:33:a0:fc:8d:8f:22:ba:a3: d0:80:7c:e3:5c:98:a4:2d:8f:0d:b8:5c:e0:7b:90: a8:b2:d0:ee:d4:36:7b:0f:19:dc:dc:76:7b:59:97: a1:4c:c4:16:aa:db:96:33:7a:39:14:21:a3:b5:a1: 2f:4f:b8:95:6f:62:41:6c:9e:92:d2:c6:50:9b:99: 8a:dd:c6:a0:d4:88:06:f8:ec:4c:8f:b9:36:af:d7: be:07:22:2a:cc:1f:a2:93:4a:f5:89:86:97:47:f7: ce:e8:c5:76:83:ec:5d:c1:dc:f1:ae:82:6a:3c:77: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.20.0/23 Signature Algorithm: sha256WithRSAEncryption 14:a1:93:7e:37:5e:c6:0f:b8:bd:be:42:10:10:6d:63:49:7b: e4:ef:4d:e4:60:e5:fe:2e:9b:6a:2a:60:97:85:19:c8:f7:5a: 76:42:3c:88:b2:2a:34:bd:a7:6e:0a:2d:5f:75:37:37:7a:d7: 14:9a:91:a2:40:c4:93:59:29:7f:42:3e:85:4c:73:13:12:34: 3e:17:03:3a:a6:80:c3:71:db:21:b5:e2:89:ff:5e:11:e1:04: 27:16:e4:bd:16:e6:36:8f:d8:02:5d:15:2f:e7:6d:1c:95:51: 85:4c:c6:59:49:dd:48:6f:ad:d9:b0:ca:12:cf:2b:51:15:00: cd:a7:a1:ac:ec:05:e8:49:cd:d2:9a:a9:38:5b:ec:01:49:ca: 59:ed:ee:d5:61:1d:02:63:e1:52:4f:ea:1f:12:89:2a:09:cb: 0a:83:43:d4:ff:94:e8:74:65:99:8b:54:b6:03:e4:16:09:44: 71:00:07:da:a5:c1:93:7d:a2:4d:61:29:61:69:99:23:9e:ee: 8e:9b:bd:d0:92:a6:c0:fa:8a:1c:d8:2d:ab:d7:11:ad:41:e3: ed:c6:14:4d:31:cd:41:43:56:7c:29:1b:a1:da:9b:2f:a8:5b: 02:af:47:b8:7b:c5:b4:bc:ea:9a:54:ef:06:ba:88:6b:b9:1b: 00:98:30:3d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8ESvXojZtVWglcssZ2loOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmY2ZGUzMGE5YjhmNzY0ODQzNDRkMGNkM2I2YzAyNzNlYWRkMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDNAPIheVWIPdERSt9r6AHCjcWy4 qk5DPlp4Dcs4O2AlMBFjkb/nh5qMcdD5z40a7KH5PRvoy76reWv/zg3GZwNci96v xJSCrsEjdSXwk3tZyxA8Ni5y4OTIY/B0uT6VfxQ34s1Xn1X3fU2nZ3cEAh2owtNK F8lJPiIhgFuB/SxXTXVuzhhYuCcWLKHYM6D8jY8iuqPQgHzjXJikLY8NuFzge5Co stDu1DZ7Dxnc3HZ7WZehTMQWqtuWM3o5FCGjtaEvT7iVb2JBbJ6S0sZQm5mK3cag 1IgG+OxMj7k2r9e+ByIqzB+ik0r1iYaXR/fO6MV2g+xdwdzxroJqPHfy6QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDL23jCpuPdkhDRNDNO2wCc+rdNvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3L2NiZDA2 MC1hZDY4LTRmNWYtYWQ1ZS1jMDQwNDQzN2U4NWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvY2JkMDYw LWFkNjgtNGY1Zi1hZDVlLWMwNDA0NDM3ZTg1Yi8xL012YmVNS200OTJTRU5FME0w N2JBSno2dDAyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBV/sUMA0GCSqGSIb3DQEBCwUAA4IBAQAUoZN+ N17GD7i9vkIQEG1jSXvk703kYOX+LptqKmCXhRnI91p2QjyIsio0vaduCi1fdTc3 etcUmpGiQMSTWSl/Qj6FTHMTEjQ+FwM6poDDcdshteKJ/14R4QQnFuS9FuY2j9gC XRUv520clVGFTMZZSd1Ib63ZsMoSzytRFQDNp6Gs7AXoSc3Smqk4W+wBScpZ7e7V YR0CY+FST+ofEokqCcsKg0PU/5TodGWZi1S2A+QWCURxAAfapcGTfaJNYSlhaZkj nu6Om73QkqbA+ooc2C2r1xGtQePtxhRNMc1BQ1Z8KRuh2psvqFsCr0e4e8W0vOqa VO8GuohruRsAmDA9 -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:42 2026 by rpki-client