This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer File: mnj9TUGkk4S99ufcPrvFAL9m2dU.cer (raw, json) Hash identifier: eXO6bMjE4Ap5L3SQCBG0ENUCTyOJ4bsSckFKiuyp3j4= Subject key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12533ADB8E0CC0F6A2F6D219E9F620 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.8.84.0/22 IP: 2a0e:5200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:53:3a:db:8e:0c:c0:f6:a2:f6:d2:19:e9:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:47:3a:9c:fb:3f:02:a2:b7:15:cf:9d:e2: 62:d4:a5:74:b7:e8:93:4d:65:0e:08:40:87:95:c2: e9:a9:66:cf:e1:df:eb:0e:60:45:c1:91:ce:25:69: ff:31:fb:e9:6b:41:3b:3a:b3:4e:42:ac:d0:be:6a: a9:ec:48:45:b3:45:40:17:21:d9:dd:06:23:28:c5: 67:e5:7d:65:b8:fe:59:4f:f1:d7:9b:f8:80:65:cb: 2f:0c:00:9e:27:65:e8:76:c1:de:16:fd:71:1c:a4: a5:a9:03:85:f3:a3:02:5d:2a:a5:0a:1f:75:10:f4: 1d:4f:53:20:50:53:6d:eb:bd:3b:8d:30:bb:e3:4d: 1f:db:04:99:bf:a7:5a:c5:78:43:86:c4:92:bd:e6: 04:ae:ff:a2:71:c7:84:2e:2c:4f:ce:1b:7c:86:c4: f3:99:33:e0:f5:2c:13:f5:7f:21:f1:f9:af:e6:15: 7e:a0:bb:36:45:4d:c5:78:19:88:11:ab:3f:4c:7e: c4:3d:62:05:77:83:57:66:01:7d:ee:dd:e6:87:9a: c7:cd:4a:09:79:f1:da:0e:25:d5:f0:e4:82:5a:47: fc:4f:a4:89:11:01:16:80:f5:63:0c:52:83:a9:68: 6d:69:30:23:18:99:65:65:3c:e4:a8:26:60:bf:75: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.84.0/22 IPv6: 2a0e:5200::/29 Signature Algorithm: sha256WithRSAEncryption 7a:09:ba:7e:44:14:b8:d1:2a:ae:4d:2c:61:3c:61:e2:6e:e3: 83:e9:24:2c:2d:24:be:03:7e:9c:16:02:c7:bf:9d:95:72:03: b2:6e:70:95:e3:10:1e:b7:f8:44:76:5a:2a:46:76:6e:e5:6a: 27:1a:5f:da:7a:b3:bc:c2:2e:d9:cf:9d:4a:45:eb:d2:c7:05: 20:4d:40:90:62:58:45:96:c5:04:44:9b:a2:b3:96:70:70:00: d6:9f:2f:c0:4d:82:b1:35:38:65:e7:fb:7f:87:fa:b0:01:ad: 35:35:87:4a:a6:d5:38:cc:a9:d9:b3:12:c1:bf:ac:a8:5d:01: 35:bb:0d:45:39:5f:df:d1:4f:b8:f6:44:9d:a0:ae:04:a1:9a: d0:15:0e:f1:e1:d1:38:70:bb:9d:2e:0e:48:8c:15:9d:4b:f5: 8f:59:f9:c4:dd:13:5a:5e:63:8a:07:fc:44:e1:47:dc:ec:82: 79:08:61:1e:00:eb:c8:cc:fb:8d:17:fc:2a:2d:91:d6:31:ac: 14:a7:01:e5:7e:b4:f8:e8:ce:f0:f7:aa:8c:80:9e:15:3f:7c: 82:42:23:d2:a7:dd:d6:8d:b8:9b:67:43:e4:19:49:dd:79:e5: 4a:04:45:fb:5c:c4:8a:e6:c5:2d:32:3b:47:91:73:36:84:d0: 89:18:67:89 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8ElM6244MwPai9tIZ6fYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTc4ZmQ0ZDQxYTQ5Mzg0YmRmNmU3ZGMzZWJiYzUwMGJmNjZkOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijdHOpz7PwKitxXPneJi1KV0t+iT TWUOCECHlcLpqWbP4d/rDmBFwZHOJWn/Mfvpa0E7OrNOQqzQvmqp7EhFs0VAFyHZ 3QYjKMVn5X1luP5ZT/HXm/iAZcsvDACeJ2XodsHeFv1xHKSlqQOF86MCXSqlCh91 EPQdT1MgUFNt6707jTC7400f2wSZv6daxXhDhsSSveYErv+icceELixPzht8hsTz mTPg9SwT9X8h8fmv5hV+oLs2RU3FeBmIEas/TH7EPWIFd4NXZgF97t3mh5rHzUoJ efHaDiXV8OSCWkf8T6SJEQEWgPVjDFKDqWhtaTAjGJllZTzkqCZgv3VmdwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJp4/U1BpJOEvfbn3D67xQC/ZtnVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzVjYjk4 Yy1lZTA4LTRiOTktOGI0ZC1jNmY0MTA2MGM1ZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvNWNiOThj LWVlMDgtNGI5OS04YjRkLWM2ZjQxMDYwYzVkNy8xL21uajlUVUdrazRTOTl1ZmNQ cnZGQUw5bTJkVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQhUMA0EAgACMAcDBQMqDlIAMA0GCSqGSIb3 DQEBCwUAA4IBAQB6Cbp+RBS40SquTSxhPGHibuOD6SQsLSS+A36cFgLHv52VcgOy bnCV4xAet/hEdloqRnZu5WonGl/aerO8wi7Zz51KRevSxwUgTUCQYlhFlsUERJui s5ZwcADWny/ATYKxNThl5/t/h/qwAa01NYdKptU4zKnZsxLBv6yoXQE1uw1FOV/f 0U+49kSdoK4EoZrQFQ7x4dE4cLudLg5IjBWdS/WPWfnE3RNaXmOKB/xE4Ufc7IJ5 CGEeAOvIzPuNF/wqLZHWMawUpwHlfrT46M7w96qMgJ4VP3yCQiPSp93WjbibZ0Pk GUndeeVKBEX7XMSK5sUtMjtHkXM2hNCJGGeJ -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:35 2026 by rpki-client