This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer File: maLC7PWMRLNaDaKVf_TcouYLaGo.cer (raw, json) Hash identifier: EGDGZsU+A/neQnu0OqUuT9ENsYF7b3hq5KA2ICa/u3Q= Subject key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4DDD71CDBE78B0527C376CE5FBAB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.230.170.0/23 IP: 91.230.176.0/22 IP: 185.194.84.0/22 IP: 194.213.114.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:dd:d7:1c:db:e7:8b:05:27:c3:76:ce:5f:ba:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:95:60:e6:74:6b:84:f8:b0:67:72:65:ee: ec:cf:8b:1a:4c:c9:b7:d7:97:1f:f9:de:7c:ec:60: 8b:28:93:97:2c:b4:7a:b5:4e:e8:63:ed:2e:34:56: d0:a9:0b:37:94:80:26:b7:74:f8:41:49:83:0e:d5: ba:1f:7f:30:db:08:cd:c4:4b:84:7d:20:60:94:2e: 44:cb:02:26:86:11:18:90:6e:42:f8:46:8c:33:53: e6:40:e0:af:aa:10:07:a5:8f:39:7a:66:a3:02:67: 20:81:00:6b:c8:e1:c3:7b:cf:9d:da:d2:f8:c6:48: 4f:48:22:e7:1f:b6:a1:80:04:4f:0d:b8:5e:d8:03: c6:85:d8:2b:6b:37:0f:41:67:c2:a8:33:f1:64:e3: e9:6a:36:37:f3:9b:81:91:81:12:b4:3f:0c:79:df: 4b:b3:de:78:1d:7e:a4:d3:ab:92:ec:00:33:b4:db: ec:98:61:dd:2f:7d:9c:47:ff:4c:e2:bd:84:ac:cc: 91:77:9a:bf:2a:4d:bb:8d:da:d2:20:04:b5:44:79: de:22:18:c3:57:bd:5c:fd:da:69:ea:4e:5f:61:99: d5:c7:ed:cf:4a:53:6c:b9:48:26:35:15:d9:e5:3f: 17:06:18:77:3c:d9:5f:25:f6:6a:07:91:1b:fe:ea: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.170.0/23 91.230.176.0/22 185.194.84.0/22 194.213.114.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:2c:25:56:c0:74:79:5c:ef:15:f2:af:bf:c3:a6:1e:8b:9c: 09:3d:8d:e0:cb:03:5d:16:ff:b9:39:be:91:97:3b:4f:ca:7d: e3:74:c1:67:cf:07:5f:bd:c5:72:7e:c5:4e:d5:46:dc:74:7a: 3a:18:a1:15:66:27:57:a4:c5:fe:d8:91:c0:91:26:14:eb:c5: d4:48:e3:97:d8:ab:cc:29:1e:05:e9:34:e4:88:67:21:a1:4c: 9e:c4:0c:d8:dd:71:df:55:8b:82:1d:3e:da:e5:b4:e6:b3:e1: 01:22:40:28:0e:c0:8c:04:30:4e:ad:6a:ff:78:8a:1d:3c:38: 09:4c:23:89:7f:a3:9a:f3:10:5a:dd:e6:98:62:f5:b9:c3:54: 06:56:3f:19:e1:e2:5f:b7:dc:db:dd:59:66:28:62:3d:77:79: d3:2e:7e:01:3f:72:02:4b:43:1c:db:78:1d:57:e9:65:09:2c: 32:68:4f:72:1d:7f:71:95:d1:0a:c4:31:35:76:6c:dc:16:2a: da:ce:a0:5f:7b:be:86:68:44:2d:50:1a:7c:d3:64:7f:68:ba: f3:c2:d7:b9:a1:0a:cd:29:04:68:67:64:ba:e4:42:66:f5:7d: ef:6e:1c:ea:89:c0:cd:1e:9d:99:55:f7:66:c2:05:e2:61:ee: 06:62:9e:aa -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt7pN3XHNvniwUnw3bOX7qxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWEyYzJlY2Y1OGM0NGIzNWEwZGEyOTU3ZmY0ZGNhMmU2MGI2ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFiVYOZ0a4T4sGdyZe7sz4saTMm3 15cf+d587GCLKJOXLLR6tU7oY+0uNFbQqQs3lIAmt3T4QUmDDtW6H38w2wjNxEuE fSBglC5EywImhhEYkG5C+EaMM1PmQOCvqhAHpY85emajAmcggQBryOHDe8+d2tL4 xkhPSCLnH7ahgARPDbhe2APGhdgrazcPQWfCqDPxZOPpajY385uBkYEStD8Med9L s954HX6k06uS7AAztNvsmGHdL32cR/9M4r2ErMyRd5q/Kk27jdrSIAS1RHneIhjD V71c/dpp6k5fYZnVx+3PSlNsuUgmNRXZ5T8XBhh3PNlfJfZqB5Eb/uqJHwIDAQAB o4ICljCCApIwHQYDVR0OBBYEFJmiwuz1jESzWg2ilX/03KLmC2hqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2JhOTY3 NC1lNTcxLTRlMzUtYWIyMC1lNWQ1MDdhODI2YmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYmE5Njc0 LWU1NzEtNGUzNS1hYjIwLWU1ZDUwN2E4MjZiZi8xL21hTEM3UFdNUkxOYURhS1Zm X1Rjb3VZTGFHby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQBW+aqAwQCW+awAwQCucJUAwQBwtVyMA0GCSqG SIb3DQEBCwUAA4IBAQAfLCVWwHR5XO8V8q+/w6Yei5wJPY3gywNdFv+5Ob6RlztP yn3jdMFnzwdfvcVyfsVO1UbcdHo6GKEVZidXpMX+2JHAkSYU68XUSOOX2KvMKR4F 6TTkiGchoUyexAzY3XHfVYuCHT7a5bTms+EBIkAoDsCMBDBOrWr/eIodPDgJTCOJ f6Oa8xBa3eaYYvW5w1QGVj8Z4eJft9zb3VlmKGI9d3nTLn4BP3ICS0Mc23gdV+ll CSwyaE9yHX9xldEKxDE1dmzcFirazqBfe76GaEQtUBp802R/aLrzwte5oQrNKQRo Z2S65EJm9X3vbhzqicDNHp2ZVfdmwgXiYe4GYp6q -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:43 2026 by rpki-client