This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer File: mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer (raw, json) Hash identifier: IShoLi/IuK8+ju2lAEQ15756T7nDPrDlmDUtxglcLs0= Subject key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB1564497461888BEB7A7EFE00A534 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8362 IP: 5.158.240.0/20 IP: 5.183.212.0/22 IP: 37.72.192.0/18 IP: 37.220.48.0/20 IP: 46.22.80.0/20 IP: 46.162.128.0/18 IP: 62.64.32.0/19 IP: 79.141.192.0/20 IP: 81.20.208.0/20 IP: 95.170.32.0/19 IP: 109.106.64.0/19 IP: 178.73.128.0/18 IP: 185.9.96.0/22 IP: 185.72.248.0/22 IP: 195.146.224.0/19 IP: 213.138.0.0/19 IP: 213.151.176.0/20 IP: 2a01:8e80::/29 IP: 2a03:3540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:15:64:49:74:61:88:8b:eb:7a:7e:fe:00:a5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:32:70:50:cd:32:57:b2:e1:13:97:94:f2: c0:fd:5b:78:d2:29:42:ae:1c:08:c4:c6:1f:22:82: f4:72:7f:e8:38:13:71:c8:d6:1c:ab:1d:a3:00:01: 84:db:b3:df:66:08:db:fe:99:95:bd:32:32:59:53: af:91:9c:63:26:e8:84:1f:0a:2b:14:3a:e9:6b:08: bc:82:55:03:b1:0c:10:c9:ae:f2:76:2b:3a:27:e6: df:4f:a0:99:da:b2:cd:d1:1f:7e:d9:ca:2c:f9:29: 70:a3:65:e8:81:44:4b:52:76:ee:a8:1b:86:bd:ee: a0:97:c7:92:4f:ad:b1:30:c1:b8:07:7e:f3:a9:1d: be:2b:64:79:05:37:5b:01:ce:7a:84:3f:a7:4a:ba: bd:af:91:f6:1a:a5:89:a5:ef:96:4a:52:4e:80:99: f0:d6:a2:a3:be:c4:37:27:02:63:8a:67:ce:fe:30: 5b:62:32:c6:30:46:d8:f0:11:69:d8:11:18:0a:21: 39:68:24:38:df:49:cd:5c:30:45:37:19:9e:12:19: ad:11:92:ce:fa:14:dc:da:eb:7e:32:69:f2:d8:08: 52:b2:31:20:d2:60:62:72:f3:b5:b3:2d:9f:ff:60: cb:64:6d:74:21:13:87:c3:1e:3b:80:b0:8b:8d:10: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.158.240.0/20 5.183.212.0/22 37.72.192.0/18 37.220.48.0/20 46.22.80.0/20 46.162.128.0/18 62.64.32.0/19 79.141.192.0/20 81.20.208.0/20 95.170.32.0/19 109.106.64.0/19 178.73.128.0/18 185.9.96.0/22 185.72.248.0/22 195.146.224.0/19 213.138.0.0/19 213.151.176.0/20 IPv6: 2a01:8e80::/29 2a03:3540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8362 Signature Algorithm: sha256WithRSAEncryption 0c:1d:46:86:08:f9:a5:96:78:94:9d:cc:5c:17:94:b0:b9:c9: 20:5b:ed:31:46:b5:f2:f4:22:73:8f:bb:ee:8d:e3:9b:5e:84: 18:71:be:4d:91:37:8c:0b:d6:80:4d:58:d2:07:dc:32:f5:da: cc:32:e6:05:20:c8:f7:df:8b:72:f8:2a:64:97:a2:04:0b:ab: 69:08:a7:67:f8:6b:4f:5d:50:39:76:6b:e9:a9:21:de:3f:4a: fe:01:2a:ca:08:e8:b5:26:c6:ec:e1:07:4c:7c:19:0d:79:33: 20:39:5e:b0:18:49:0a:58:f3:86:f6:22:88:f0:b4:60:b3:93: 38:1e:99:9c:59:70:b2:68:f8:f4:0b:5a:a5:6b:a4:4a:54:cb: 7f:ee:62:b4:47:cd:9a:05:34:12:9b:fe:66:0f:42:00:67:dc: a8:6e:9b:96:74:4b:a1:7f:5b:9e:b2:2d:a7:d3:5b:74:7d:f4: d2:2b:cf:93:69:59:19:67:a0:6c:d8:c1:b2:c5:7f:2b:88:c6: 40:13:3a:8a:c4:26:99:50:54:d8:80:51:72:7c:d1:49:d9:4f: 85:68:b2:e1:31:37:b7:f1:2e:2f:72:4f:b5:ca:38:41:df:74: fc:4b:9b:8e:20:e9:9b:12:18:50:4d:ad:a5:62:eb:b7:aa:eb: b7:41:ce:cd -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgISAZt9yxVkSXRhiIvren7+AKU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODEyZTQ5MWFhYTY1NWI2MzI0ZGJjYzBjZmYwMGE4ZDYzMTkxMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S8ycFDNMley4ROXlPLA/Vt40ilC rhwIxMYfIoL0cn/oOBNxyNYcqx2jAAGE27PfZgjb/pmVvTIyWVOvkZxjJuiEHwor FDrpawi8glUDsQwQya7ydis6J+bfT6CZ2rLN0R9+2cos+Slwo2XogURLUnbuqBuG ve6gl8eST62xMMG4B37zqR2+K2R5BTdbAc56hD+nSrq9r5H2GqWJpe+WSlJOgJnw 1qKjvsQ3JwJjimfO/jBbYjLGMEbY8BFp2BEYCiE5aCQ430nNXDBFNxmeEhmtEZLO +hTc2ut+Mmny2AhSsjEg0mBicvO1sy2f/2DLZG10IROHwx47gLCLjRAiJwIDAQAB o4IDGDCCAxQwHQYDVR0OBBYEFJgS5JGqplW2Mk28wM/wCo1jGRB2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzBlN2Vk My00OGNiLTRhZmUtOGQxNS1kZmZlMTdmM2RiNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMGU3ZWQz LTQ4Y2ItNGFmZS04ZDE1LWRmZmUxN2YzZGI1NC8xL21CTGtrYXFtVmJZeVRiekF6 X0FLaldNWkVIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGXBggrBgEF BQcBBwEB/wSBhzCBhDBsBAIAATBmAwQEBZ7wAwQCBbfUAwQGJUjAAwQEJdwwAwQE LhZQAwQGLqKAAwQFPkAgAwQET43AAwQEURTQAwQFX6ogAwQFbWpAAwQGskmAAwQC uQlgAwQCuUj4AwQFw5LgAwQF1YoAAwQE1ZewMBQEAgACMA4DBQMqAY6AAwUDKgM1 QDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIgqjANBgkqhkiG9w0BAQsFAAOCAQEA DB1Ghgj5pZZ4lJ3MXBeUsLnJIFvtMUa18vQic4+77o3jm16EGHG+TZE3jAvWgE1Y 0gfcMvXazDLmBSDI99+LcvgqZJeiBAuraQinZ/hrT11QOXZr6akh3j9K/gEqygjo tSbG7OEHTHwZDXkzIDlesBhJCljzhvYiiPC0YLOTOB6ZnFlwsmj49AtapWukSlTL f+5itEfNmgU0Epv+Zg9CAGfcqG6blnRLoX9bnrItp9NbdH300ivPk2lZGWegbNjB ssV/K4jGQBM6isQmmVBU2IBRcnzRSdlPhWiy4TE3t/EuL3JPtco4Qd90/EubjiDp mxIYUE2tpWLrt6rrt0HOzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:00 2026 by rpki-client