This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer (raw, json) Hash identifier: 15xvVIfjzTxH/ig7qX73WYB200QLiwNGEhgWbxf9nf0= Subject key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C129863659FF142A92F191F9985D0B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208589 IP: 45.95.112.0/22 IP: 45.158.76.0/22 IP: 2a0e:3240::/29 IP: 2a10:4840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:98:63:65:9f:f1:42:a9:2f:19:1f:99:85:d0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e3:96:e6:d7:1c:01:22:1d:e5:3b:6b:3b:74: 8e:44:e2:9a:1a:11:77:00:42:97:3c:71:bb:b8:09: 39:da:ae:9f:95:54:13:2d:69:05:40:9f:17:b9:20: 5e:79:0f:7d:41:85:be:33:11:d6:c9:dc:86:4f:48: 8e:19:d0:09:2a:70:cb:12:fd:1d:39:dc:7d:cf:a8: 71:2a:c2:bd:2b:6b:ad:cc:78:36:46:0d:c7:48:16: 2f:8e:64:98:bb:2c:5a:1b:b1:fd:b8:3f:ef:44:31: ff:d8:15:b2:32:a9:91:dc:43:31:c4:82:56:51:5c: 82:a0:25:1e:56:f8:cf:38:25:31:d1:d6:68:aa:69: db:8f:3c:27:d4:fb:7f:38:f8:4a:28:d1:f6:ed:b1: 00:e9:cb:3c:dd:a6:6d:a2:97:b2:ff:05:6b:2c:43: f5:27:51:2f:72:9f:08:d0:84:7b:1e:ba:1a:60:8a: 12:58:2d:b6:2a:be:81:85:64:f6:4f:d6:4c:9f:c8: d3:6b:f1:33:a8:a1:73:55:d5:6a:95:74:88:02:0a: b2:ef:bd:4f:43:13:32:a3:d2:4b:7a:9c:8f:18:c5: 04:15:ad:a3:10:75:a7:0f:0d:b2:4c:53:4a:f2:30: d1:62:db:b5:32:59:15:74:03:d6:4e:c2:50:44:50: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.112.0/22 45.158.76.0/22 IPv6: 2a0e:3240::/29 2a10:4840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208589 Signature Algorithm: sha256WithRSAEncryption 3d:df:84:b7:5f:0d:83:00:ba:ec:96:39:78:d0:60:e5:95:65: 52:dc:83:37:0f:75:38:5d:a7:a9:60:c5:1e:14:41:e5:4d:0a: ef:99:80:e6:e1:0d:8a:b4:3e:86:13:65:8d:a4:ed:ba:c3:45: 38:5e:f6:79:c9:06:9b:53:02:17:69:2b:9c:f3:11:ca:cb:40: db:7e:b5:44:54:61:41:91:f3:4e:26:36:35:41:ff:d7:1c:cc: 8a:47:8e:bb:0d:4b:0f:43:43:3e:1f:7a:44:60:74:e9:0e:61: c7:81:fc:92:bb:5b:51:d5:00:f5:e2:d2:98:34:3f:0b:86:c4: 6a:44:45:85:ba:fa:fb:94:79:b7:61:15:45:19:b0:d6:06:3c: 6f:0c:a3:d4:d4:c1:b0:c7:85:e7:4a:58:80:f4:a3:b8:cc:ab: 0f:3c:5c:c1:32:94:90:64:02:27:d2:71:84:1b:ef:45:f8:16: a5:e7:ca:4f:e4:90:d0:78:3d:c9:60:b2:d8:14:5d:38:fb:85: ac:a0:7b:78:3e:76:09:b6:cd:27:0f:b8:53:68:72:00:cf:87: 8c:07:30:a1:0c:d7:70:d6:28:9a:59:08:24:fd:27:13:ea:0a: 4d:8f:91:4e:e0:27:ff:cd:fe:7d:0f:d5:b9:63:91:47:91:bc: d7:11:a3:39 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt8EphjZZ/xQqkvGR+ZhdCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWZlZTdjYmQ4ZTc4ZDFmMTRhNDUzYTA0YjkxNmY3YzE1ODFkMjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eOW5tccASId5TtrO3SOROKaGhF3 AEKXPHG7uAk52q6flVQTLWkFQJ8XuSBeeQ99QYW+MxHWydyGT0iOGdAJKnDLEv0d Odx9z6hxKsK9K2utzHg2Rg3HSBYvjmSYuyxaG7H9uD/vRDH/2BWyMqmR3EMxxIJW UVyCoCUeVvjPOCUx0dZoqmnbjzwn1Pt/OPhKKNH27bEA6cs83aZtopey/wVrLEP1 J1Evcp8I0IR7HroaYIoSWC22Kr6BhWT2T9ZMn8jTa/EzqKFzVdVqlXSIAgqy771P QxMyo9JLepyPGMUEFa2jEHWnDw2yTFNK8jDRYtu1MlkVdAPWTsJQRFBcuQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFJn+58vY540fFKRToEuRb3wVgdIEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzBkZDRj Yi0xZjcyLTQwZWQtYTY1Ny0xYzIyZWZmNzI4MTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvMGRkNGNi LTFmNzItNDBlZC1hNjU3LTFjMjJlZmY3MjgxOC8xL21mN255OWpualI4VXBGT2dT NUZ2ZkJXQjBnUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCLV9wAwQCLZ5MMBQEAgACMA4DBQMqDjJAAwUD KhBIQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLs0wDQYJKoZIhvcNAQELBQAD ggEBAD3fhLdfDYMAuuyWOXjQYOWVZVLcgzcPdThdp6lgxR4UQeVNCu+ZgObhDYq0 PoYTZY2k7brDRThe9nnJBptTAhdpK5zzEcrLQNt+tURUYUGR804mNjVB/9cczIpH jrsNSw9DQz4fekRgdOkOYceB/JK7W1HVAPXi0pg0PwuGxGpERYW6+vuUebdhFUUZ sNYGPG8Mo9TUwbDHhedKWID0o7jMqw88XMEylJBkAifScYQb70X4FqXnyk/kkNB4 PclgstgUXTj7hayge3g+dgm2zScPuFNocgDPh4wHMKEM13DWKJpZCCT9JxPqCk2P kU7gJ//N/n0P1bljkUeRvNcRozk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:46 2026 by rpki-client