This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer (raw, json) Hash identifier: Ir8P5RYJub1ViIziYt7v3WgSv+VWHWsy1+Cngq+ccKk= Subject key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA46D3E406B6B713DE272F6E1523DD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29611 IP: 45.157.84.0/22 IP: 185.2.216.0/22 IP: 185.43.184.0/22 IP: 185.73.184.0/22 IP: 217.68.240.0/20 IP: 217.69.32.0/20 IP: 2a00:c20::/32 IP: 2a03:2d20::/32 IP: 2a04:95c0::/29 IP: 2a0f:5280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:6d:3e:40:6b:6b:71:3d:e2:72:f6:e1:52:3d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:3b:10:80:91:17:27:a4:a1:49:2d:39:ef: 57:e2:09:9f:e3:d8:ec:f5:f9:96:ca:c2:d9:64:2f: a9:c7:ee:58:aa:5d:d7:29:fc:8f:4a:65:78:9b:04: 81:e3:5d:5d:83:7b:ae:7c:9e:ba:1a:27:d6:c1:38: 67:92:61:89:ee:46:25:5d:5f:9f:0c:82:13:39:18: d1:52:12:a3:2b:1c:8b:3f:84:93:d0:f1:89:40:71: 2f:1d:52:74:a2:10:90:a2:c1:c8:d1:93:96:6c:f5: 9b:fd:eb:bb:6d:7e:73:40:6b:a6:fa:ed:af:e5:96: 0e:1d:84:21:9c:2f:7a:b9:5b:3f:7f:a5:12:30:2e: e7:8a:65:d3:74:a9:08:b5:ff:c2:d9:1d:1b:01:ae: ca:df:bc:df:d9:3c:bc:75:32:56:22:93:0f:87:9f: 3b:3d:69:60:b4:2f:a2:ed:f5:f5:48:2a:59:a7:dc: 7a:59:b3:89:9d:32:46:3a:90:9f:f8:32:43:22:20: 72:43:91:fb:8c:b6:2b:7b:9b:4f:3c:9c:e6:02:a4: 81:a8:f1:c0:08:f4:ee:31:15:34:ac:00:19:bf:6a: 76:df:35:7e:1f:7e:96:56:b9:8e:87:95:5f:24:8f: b3:aa:8f:6b:56:b8:de:c4:5c:ec:23:24:94:9c:86: 0c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.84.0/22 185.2.216.0/22 185.43.184.0/22 185.73.184.0/22 217.68.240.0/20 217.69.32.0/20 IPv6: 2a00:c20::/32 2a03:2d20::/32 2a04:95c0::/29 2a0f:5280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29611 Signature Algorithm: sha256WithRSAEncryption 17:e6:b9:e9:33:0e:af:3e:7d:2a:36:43:85:4c:d0:7c:3f:68: d1:99:f3:3a:65:ae:21:63:b1:f6:14:98:5c:f1:eb:db:0e:9e: da:09:50:7b:c2:78:92:61:93:2e:38:a1:3b:3e:5f:9d:0b:9a: d9:3a:69:08:10:9c:08:80:7b:f1:d9:89:45:48:ab:fe:b0:a2: f5:73:87:66:ad:eb:e6:bd:a2:a2:8c:23:3a:7f:62:45:64:a1: c3:4b:e6:f4:13:64:c2:8e:c2:81:cc:43:fd:47:67:1d:68:df: a3:43:fd:51:56:dc:83:0a:b4:eb:ca:23:f8:72:de:fe:87:1e: ca:3b:dc:be:39:b4:bf:9d:12:8f:8d:72:de:df:18:7a:2d:a9: 11:4b:f2:3c:6e:4c:69:e4:7f:be:50:db:11:31:73:b0:89:ca: 32:61:69:9c:5d:6f:fc:ff:ec:37:75:3d:67:32:c5:4a:45:f6: a7:e4:63:74:a0:61:c3:ac:2f:29:17:d3:5d:45:18:dc:45:ac: 4e:3e:22:53:3f:f5:8b:57:cd:a6:84:9d:87:61:d8:b2:36:8d: 03:7a:97:55:7c:f1:43:74:60:3d:a9:20:20:b9:b1:e8:21:1b: aa:06:e9:4d:6e:4e:05:ec:96:46:63:ab:9a:e8:1f:9e:5f:39: 0c:8e:2f:b3 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZt7pG0+QGtrcT3icvbhUj3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGE5ODdjNmNkMGEzNmY5NGRiZWYxMGVmMmEyYzY2MDIwYTk1NjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwts7EICRFyekoUktOe9X4gmf49js 9fmWysLZZC+px+5Yql3XKfyPSmV4mwSB411dg3uufJ66GifWwThnkmGJ7kYlXV+f DIITORjRUhKjKxyLP4ST0PGJQHEvHVJ0ohCQosHI0ZOWbPWb/eu7bX5zQGum+u2v 5ZYOHYQhnC96uVs/f6USMC7nimXTdKkItf/C2R0bAa7K37zf2Ty8dTJWIpMPh587 PWlgtC+i7fX1SCpZp9x6WbOJnTJGOpCf+DJDIiByQ5H7jLYre5tPPJzmAqSBqPHA CPTuMRU0rAAZv2p23zV+H36WVrmOh5VfJI+zqo9rVrjexFzsIySUnIYMAQIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFJiph8bNCjb5Tb7xDvKixmAgqVYRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2FiODMw Ny01ZjljLTQ5YzYtOGEwYi1mM2I0NTgxOWYyYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvYWI4MzA3 LTVmOWMtNDljNi04YTBiLWYzYjQ1ODE5ZjJiMC8xL21LbUh4czBLTnZsTnZ2RU84 cUxHWUNDcFZoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDAqBAIAATAkAwQCLZ1UAwQCuQLYAwQCuSu4AwQCuUm4AwQE2UTw AwQE2UUgMCIEAgACMBwDBQAqAAwgAwUAKgMtIAMFAyoElcADBQMqD1KAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAnOrMA0GCSqGSIb3DQEBCwUAA4IBAQAX5rnpMw6v Pn0qNkOFTNB8P2jRmfM6Za4hY7H2FJhc8evbDp7aCVB7wniSYZMuOKE7Pl+dC5rZ OmkIEJwIgHvx2YlFSKv+sKL1c4dmrevmvaKijCM6f2JFZKHDS+b0E2TCjsKBzEP9 R2cdaN+jQ/1RVtyDCrTryiP4ct7+hx7KO9y+ObS/nRKPjXLe3xh6LakRS/I8bkxp 5H++UNsRMXOwicoyYWmcXW/8/+w3dT1nMsVKRfan5GN0oGHDrC8pF9NdRRjcRaxO PiJTP/WLV82mhJ2HYdiyNo0DepdVfPFDdGA9qSAgubHoIRuqBulNbk4F7JZGY6ua 6B+eXzkMji+z -----END CERTIFICATE-----Generated at Mon Jan 26 18:22:18 2026 by rpki-client