This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer File: mInX-DdYfC8jMrsJs-GtmZPXlyw.cer (raw, json) Hash identifier: 9/bnKt989cNKxQbCB0Ek2fnJ+FUQE+BqJOZMEowH8uA= Subject key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33CE4592A1A025D3D31134F602946 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.146.244.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3c:e4:59:2a:1a:02:5d:3d:31:13:4f:60:29:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:13:6f:ed:17:39:af:83:4c:f9:86:41:3d: ef:c0:7d:b6:fb:7c:a6:14:a9:c6:ea:e4:5f:6b:1c: 86:19:ab:97:8c:45:f5:3a:b5:a8:5a:e2:48:a8:bb: d1:53:9d:21:8b:ef:a2:f3:75:ee:62:85:86:ed:3b: 27:3e:53:ce:2b:6c:a9:60:6e:86:6d:ab:46:24:e7: 71:e7:36:bc:70:54:5c:1d:12:ee:23:2e:55:88:12: 78:dd:ee:12:ae:53:74:6b:8f:18:e1:5a:30:db:8c: b2:23:e6:41:0b:d2:98:0c:7b:0b:ab:80:8b:ee:43: c9:f9:41:2e:c8:28:d9:62:c2:58:c5:61:d7:f7:e8: 9e:85:f0:8f:7c:f5:7c:9e:53:19:97:41:0f:1f:63: 9c:21:62:a6:e1:60:1c:75:3d:a8:dc:63:ee:b4:9a: e2:96:45:36:a2:ad:7c:29:16:d4:53:12:5e:97:15: 1d:01:cb:11:22:da:50:af:10:f5:59:8e:7b:ff:8f: 7e:e8:15:f2:f8:89:5f:29:ca:2b:5b:fe:30:e4:f9: 48:d7:ed:da:e0:29:28:62:9d:13:40:6e:65:96:57: 1c:3b:81:9b:35:78:f6:2f:fe:79:ed:32:ed:fc:04: ff:13:64:74:b1:a1:5f:fa:19:82:d4:ea:e8:90:fb: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.244.0/22 Signature Algorithm: sha256WithRSAEncryption 06:f3:ad:55:f9:d4:c9:21:b1:3c:75:a0:23:67:6e:7c:f3:ad: bb:c8:34:2a:1e:20:31:4c:b2:7c:fd:70:c7:fb:07:02:67:82: d5:ee:2e:54:12:4d:30:3f:13:db:08:ec:b3:ea:18:18:a5:0f: e9:4f:5d:49:d5:fc:1f:dd:e4:01:73:31:2d:23:27:a1:21:70: 82:02:fe:47:cc:04:4a:f8:3d:0f:47:2b:39:f6:de:7f:af:59: 87:26:59:09:8d:57:1b:0e:48:f9:48:3e:de:5f:96:83:39:dc: 55:45:17:e8:44:ab:f4:df:0f:bf:1a:97:ad:85:85:05:08:cd: 42:ff:52:11:a1:e5:c1:78:8c:de:88:3f:45:cd:3b:18:5e:0d: 37:40:1e:07:9c:2d:8b:fa:dc:4d:90:e1:9b:6d:bc:00:17:d3: 29:b2:08:89:8b:d1:be:5e:59:8e:4b:7a:da:ae:f5:ed:91:44: 55:8f:19:94:ef:26:e3:6b:6d:13:13:51:75:74:04:2d:70:0c: 04:dd:46:17:53:cf:f5:82:19:72:81:28:73:ec:8a:96:b6:c1: 68:67:ce:fe:ba:99:ad:f7:fd:79:71:7d:69:0c:5a:d6:10:9e: 6e:ed:fd:4e:35:6f:9f:03:3d:bb:94:42:88:79:6a:a7:54:ec: 72:19:00:a5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4ozzkWSoaAl09MRNPYClGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODg5ZDdmODM3NTg3YzJmMjMzMmJiMDliM2UxYWQ5OTkzZDc5NzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw78Tb+0XOa+DTPmGQT3vwH22+3ym FKnG6uRfaxyGGauXjEX1OrWoWuJIqLvRU50hi++i83XuYoWG7TsnPlPOK2ypYG6G batGJOdx5za8cFRcHRLuIy5ViBJ43e4SrlN0a48Y4Vow24yyI+ZBC9KYDHsLq4CL 7kPJ+UEuyCjZYsJYxWHX9+iehfCPfPV8nlMZl0EPH2OcIWKm4WAcdT2o3GPutJri lkU2oq18KRbUUxJelxUdAcsRItpQrxD1WY57/49+6BXy+IlfKcorW/4w5PlI1+3a 4CkoYp0TQG5lllccO4GbNXj2L/557TLt/AT/E2R0saFf+hmC1OrokPs9AQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJiJ1/g3WHwvIzK7CbPhrZmT15csMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzJhNjli Yy0wNWEwLTQ2ZjAtYjQyMy0yMjJiMDMxMTQxOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMmE2OWJj LTA1YTAtNDZmMC1iNDIzLTIyMmIwMzExNDE5My8xL21JblgtRGRZZkM4ak1yc0pz LUd0bVpQWGx5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwpL0MA0GCSqGSIb3DQEBCwUAA4IBAQAG861V +dTJIbE8daAjZ2588627yDQqHiAxTLJ8/XDH+wcCZ4LV7i5UEk0wPxPbCOyz6hgY pQ/pT11J1fwf3eQBczEtIyehIXCCAv5HzARK+D0PRys59t5/r1mHJlkJjVcbDkj5 SD7eX5aDOdxVRRfoRKv03w+/GpethYUFCM1C/1IRoeXBeIzeiD9FzTsYXg03QB4H nC2L+txNkOGbbbwAF9MpsgiJi9G+XlmOS3rarvXtkURVjxmU7ybja20TE1F1dAQt cAwE3UYXU8/1ghlygShz7IqWtsFoZ87+upmt9/15cX1pDFrWEJ5u7f1ONW+fAz27 lEKIeWqnVOxyGQCl -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:35 2026 by rpki-client