This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer File: mu2VdsknICkWjE0aQXXRp8ocUe4.cer (raw, json) Hash identifier: uhvtppEg1q+vNgWLR24ib+KWMe1rKQ0/9CS3CvnO87I= Subject key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB67EEE526647F0F56722E547FAC67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41949 IP: 193.163.148.0/24 IP: 2a13:e580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:67:ee:e5:26:64:7f:0f:56:72:2e:54:7f:ac:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:32:ad:d1:68:12:1e:f1:eb:63:ac:ff:75: 1f:e9:08:3d:22:83:ed:08:72:12:98:26:a9:66:69: 67:fb:7d:ec:ee:ef:47:d5:79:56:ca:54:0e:fa:66: 8f:93:d7:f5:4f:54:27:c6:c9:c0:df:34:24:57:24: ff:51:1d:79:36:75:bc:b0:8f:3f:fb:a7:34:f1:21: 55:1a:2b:b6:98:2f:4e:9f:43:af:56:c5:96:30:33: b8:39:fb:db:fc:b6:dd:52:49:29:b1:f7:0c:61:da: 34:1b:75:6c:b6:f5:4c:d4:1f:38:63:90:0a:70:a6: ca:31:80:b1:59:24:8b:c2:e5:6f:a5:70:a1:76:fc: 9d:26:2f:3d:dd:99:57:31:b6:f6:80:c7:5f:e9:06: 58:36:49:25:e9:3e:be:dd:c1:12:34:ae:73:6b:e4: 6c:d2:c3:48:9f:a2:b2:db:f2:98:07:d6:8f:21:15: bb:6c:61:2f:cb:81:aa:78:1d:a6:9c:ca:84:d5:e9: 67:e9:f0:cf:c6:a0:39:a4:fb:ee:a7:6b:84:60:db: 8c:73:bb:f6:a7:52:9c:d5:87:41:a1:d3:10:97:36: e4:42:c5:52:8d:9e:a2:44:c0:8c:d9:89:77:e5:58: 42:d1:e3:cd:20:92:cb:a3:d1:fb:b9:e1:a8:91:dc: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.148.0/24 IPv6: 2a13:e580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41949 Signature Algorithm: sha256WithRSAEncryption 67:53:51:b3:9a:44:b3:a9:98:2b:25:85:2a:8b:64:de:72:a3: e8:fa:b0:ae:ee:5a:a6:4a:5b:e2:bd:19:2e:5d:02:81:25:34: 04:68:eb:3c:b0:63:5b:99:1a:48:20:a3:ab:a5:0f:d0:c4:91: 20:da:10:bb:fd:6c:24:9c:5f:f5:fb:45:d8:b4:47:9b:6b:0d: 04:b3:6b:b2:49:d9:85:aa:28:b8:f4:85:b7:42:97:32:43:e0: 91:25:98:64:3d:86:77:0c:9f:51:00:03:c1:52:fe:47:50:d7: 14:cf:3f:ee:d6:7f:95:4c:2d:10:d9:a1:9b:a7:15:2f:49:13: d6:6c:3d:be:cc:b0:83:2b:21:1b:b2:bc:01:9e:59:ae:f4:4e: 36:92:76:df:d0:1c:92:81:4f:f8:0d:5f:cb:7b:74:00:54:0a: 48:2b:78:1c:e2:fc:03:c1:3e:de:3e:69:81:67:0f:82:38:bc: 0b:3a:32:59:1a:11:5f:8d:ff:7a:fa:45:51:1f:6e:80:3d:00: 0f:77:d0:35:cd:3a:c3:f5:34:96:e6:a2:0d:80:93:6c:83:a1: 52:eb:02:c3:1d:cd:44:d2:5a:a8:b2:66:b6:40:aa:c1:be:a3: da:ee:15:91:cf:94:36:44:0c:ff:e2:d0:06:82:1b:3b:2a:a3: 18:82:81:10 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt262fu5SZkfw9Wci5Uf6xnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWVkOTU3NmM5MjcyMDI5MTY4YzRkMWE0MTc1ZDFhN2NhMWM1MWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2gyrdFoEh7x62Os/3Uf6Qg9IoPt CHISmCapZmln+33s7u9H1XlWylQO+maPk9f1T1QnxsnA3zQkVyT/UR15NnW8sI8/ +6c08SFVGiu2mC9On0OvVsWWMDO4Ofvb/LbdUkkpsfcMYdo0G3VstvVM1B84Y5AK cKbKMYCxWSSLwuVvpXChdvydJi893ZlXMbb2gMdf6QZYNkkl6T6+3cESNK5za+Rs 0sNIn6Ky2/KYB9aPIRW7bGEvy4GqeB2mnMqE1eln6fDPxqA5pPvup2uEYNuMc7v2 p1Kc1YdBodMQlzbkQsVSjZ6iRMCM2Yl35VhC0ePNIJLLo9H7ueGokdyDpwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJrtlXbJJyApFoxNGkF10afKHFHuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2U1MjVk Zi00YzZlLTQwOTktODE0ZC1mMTQ4ZjRjOWQzOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvZTUyNWRm LTRjNmUtNDA5OS04MTRkLWYxNDhmNGM5ZDM5YS8xL211MlZkc2tuSUNrV2pFMGFR WFhScDhvY1VlNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaOUMA0EAgACMAcDBQMqE+WAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCj3TANBgkqhkiG9w0BAQsFAAOCAQEAZ1NRs5pEs6mY KyWFKotk3nKj6Pqwru5apkpb4r0ZLl0CgSU0BGjrPLBjW5kaSCCjq6UP0MSRINoQ u/1sJJxf9ftF2LRHm2sNBLNrsknZhaoouPSFt0KXMkPgkSWYZD2GdwyfUQADwVL+ R1DXFM8/7tZ/lUwtENmhm6cVL0kT1mw9vsywgyshG7K8AZ5ZrvRONpJ239AckoFP +A1fy3t0AFQKSCt4HOL8A8E+3j5pgWcPgji8CzoyWRoRX43/evpFUR9ugD0AD3fQ Nc06w/U0luaiDYCTbIOhUusCwx3NRNJaqLJmtkCqwb6j2u4Vkc+UNkQM/+LQBoIb OyqjGIKBEA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:27:00 2026 by rpki-client