This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer File: mx6IYwjzvKMivU7s6ogmdxPFzqw.cer (raw, json) Hash identifier: RVCLGUsuKdqhE8U618F9XTRXI614wvwKKLCSedHnsKY= Subject key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B779419342EF7B27CF1EA358338FB789F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:22:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214809 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:94:19:34:2e:f7:b2:7c:f1:ea:35:83:38:fb:78:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 03:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b1e886308f3bca322bd4eecea88267713c5ceac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:4e:4f:32:dd:eb:ab:5b:00:5f:62:95:fb: 92:21:f1:71:04:61:9a:49:8b:aa:34:a7:ae:cf:79: 59:75:e6:d7:bf:3c:24:eb:05:f6:85:f3:ca:81:93: 22:cc:ac:e8:fe:e8:0f:df:5d:5c:c0:d7:9f:37:c6: 66:9a:1a:57:d0:0b:d0:f8:2d:0f:3b:3f:f6:dc:82: b3:8d:97:42:90:bc:05:a6:63:c6:d9:60:07:b2:5d: d7:c2:af:67:08:e0:2d:02:06:e4:01:27:3c:2c:9b: 3d:c4:32:ad:05:df:f3:7d:34:6a:69:13:6c:ad:e9: 81:bc:e7:25:a8:39:7d:f3:fd:98:e3:fe:91:db:6f: 06:a9:db:20:68:90:ec:f6:4e:b3:d7:36:0f:7a:0d: d4:e6:c8:97:01:bb:ee:ad:d3:9d:a1:2d:83:28:81: 2d:70:76:78:27:09:a0:5f:4f:ec:0e:56:f8:84:ae: ac:0f:ed:1b:81:06:72:dd:0d:66:29:66:a0:4b:58: 84:4a:3b:23:f7:63:58:d6:9f:10:11:3b:70:80:1c: 81:0c:ff:4c:9c:d6:ca:05:07:f4:88:86:c1:bf:e5: 36:6a:37:b4:a3:e2:cd:e5:a1:47:75:c2:cd:a1:97: bf:78:72:22:0e:36:c8:f3:72:4a:f4:c8:83:63:91: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214809 Signature Algorithm: sha256WithRSAEncryption 84:85:9f:c6:25:0d:0e:d7:4d:ba:46:66:4b:87:31:99:02:dc: 78:c4:d6:59:74:a4:d9:e0:fe:f9:d2:94:5d:b9:3b:48:70:e4: da:af:c9:68:09:e6:3f:19:04:2a:ce:35:07:1f:dc:72:51:7e: 06:42:11:5c:a2:19:11:a7:04:4e:8d:fc:71:9e:14:aa:7f:3b: 9d:61:f1:12:08:c2:cf:4b:98:68:ad:6d:18:9f:11:d8:fb:eb: bc:85:41:29:ed:15:21:f0:15:be:ff:d4:4e:03:2f:74:a9:45: 0e:7d:2c:de:7a:0e:4e:47:f6:bc:3c:c9:2a:66:b0:ec:4a:f2: 0e:8f:9a:af:11:da:c3:9e:30:1e:b5:a4:6f:09:73:18:3f:fa: ce:8e:d4:f5:41:10:16:71:25:e6:ae:e1:53:df:e3:67:14:87: cd:c4:bb:0c:69:07:13:97:4f:a3:21:35:66:94:1a:ec:e0:3d: 97:7d:0c:da:7a:c9:6e:23:cf:70:8d:d2:3e:72:39:3d:7c:17: a7:eb:3e:cf:1d:e5:3a:27:ec:18:fc:95:04:86:ea:b7:79:72: c9:a1:7b:1c:aa:ba:a6:c7:3e:c6:c4:20:53:70:75:24:ce:e8: ef:b9:0d:90:0d:62:8a:c6:67:a4:cb:2a:d8:1c:72:75:6b:04: 93:fa:89:de -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt3lBk0LveyfPHqNYM4+3ifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDMyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjFlODg2MzA4ZjNiY2EzMjJiZDRlZWNlYTg4MjY3NzEzYzVjZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjhOTzLd66tbAF9ilfuSIfFxBGGa SYuqNKeuz3lZdebXvzwk6wX2hfPKgZMizKzo/ugP311cwNefN8ZmmhpX0AvQ+C0P Oz/23IKzjZdCkLwFpmPG2WAHsl3Xwq9nCOAtAgbkASc8LJs9xDKtBd/zfTRqaRNs remBvOclqDl98/2Y4/6R228GqdsgaJDs9k6z1zYPeg3U5siXAbvurdOdoS2DKIEt cHZ4JwmgX0/sDlb4hK6sD+0bgQZy3Q1mKWagS1iESjsj92NY1p8QETtwgByBDP9M nNbKBQf0iIbBv+U2aje0o+LN5aFHdcLNoZe/eHIiDjbI83JK9MiDY5FHowIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFJseiGMI87yjIr1O7OqIJncTxc6sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxMDk4 YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzEw OThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRlYTA5LzAvOUIxRTg4NjMwOEYz QkNBMzIyQkQ0RUVDRUE4ODI2NzcxM0M1Q0VBQy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRxkw DQYJKoZIhvcNAQELBQADggEBAISFn8YlDQ7XTbpGZkuHMZkC3HjE1ll0pNng/vnS lF25O0hw5NqvyWgJ5j8ZBCrONQcf3HJRfgZCEVyiGRGnBE6N/HGeFKp/O51h8RII ws9LmGitbRifEdj767yFQSntFSHwFb7/1E4DL3SpRQ59LN56Dk5H9rw8ySpmsOxK 8g6Pmq8R2sOeMB61pG8Jcxg/+s6O1PVBEBZxJeau4VPf42cUh83EuwxpBxOXT6Mh NWaUGuzgPZd9DNp6yW4jz3CN0j5yOT18F6frPs8d5Ton7Bj8lQSG6rd5csmhexyq uqbHPsbEIFNwdSTO6O+5DZANYorGZ6TLKtgccnVrBJP6id4= -----END CERTIFICATE-----Generated at Mon Jan 26 00:42:00 2026 by rpki-client