This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer File: mxl1igh4doFtwZNh6vHpQS3nP4Y.cer (raw, json) Hash identifier: Ui9Fy4jAT7dKjFxRA1Rn40nfekj0jUTOabQeIftAvZc= Subject key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB0564549569581CDE8277BB285FEB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59462 IP: 185.22.231.0/24 IP: 185.150.16.0/22 IP: 2a0e:d480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:05:64:54:95:69:58:1c:de:82:77:bb:28:5f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b19758a087876816dc19361eaf1e9412de73f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:d7:94:b1:3a:73:a9:d0:d0:5c:03:39:03: 88:8b:78:de:15:7d:cb:0d:21:27:5e:05:5a:30:7a: 2f:ef:95:b0:01:df:19:e3:66:23:74:24:f8:d0:cb: 7c:5c:d1:23:86:32:23:1e:8e:a5:61:5a:20:19:75: 87:0b:1a:99:b7:96:30:63:08:2c:80:b6:bf:93:04: 49:19:8d:f2:dd:f0:f5:4e:20:03:5f:70:40:39:b1: 8d:64:13:3e:71:b1:c0:cb:6f:c0:b5:31:c7:4b:c1: cc:40:f2:da:66:cb:b8:c6:5c:dc:dd:35:87:37:7f: 1f:79:5f:18:69:1b:9b:bf:9d:34:15:67:59:7a:8e: 8a:f3:67:b9:81:89:db:e8:3b:20:d6:07:2f:24:39: b7:70:91:7c:4e:52:59:ff:cf:62:0d:a7:4e:f9:52: 5c:f8:65:07:db:26:30:23:83:8c:d1:f3:e3:dd:87: e2:a8:0f:31:41:88:8d:c6:f5:f1:52:af:86:00:87: aa:49:4b:5d:e6:36:a2:98:1c:88:e1:c6:f7:77:19: ef:4f:42:9b:58:c8:c0:5a:93:4e:14:13:f0:3d:b3: f6:83:be:97:88:4c:a5:0e:bd:0b:d8:5d:6e:1e:d8: 89:e7:9d:53:cd:1f:b8:78:2f:8c:ef:4e:09:cf:d9: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.231.0/24 185.150.16.0/22 IPv6: 2a0e:d480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59462 Signature Algorithm: sha256WithRSAEncryption 38:a9:73:0b:2c:77:07:92:e5:48:db:66:5a:47:07:bb:85:a3: 91:9f:06:eb:d9:45:c3:bc:0d:f7:ee:49:b8:ef:40:d1:1e:14: 4f:45:13:0f:9f:25:db:be:04:67:12:f0:4a:43:67:52:bd:17: ce:a7:a7:e8:d7:ad:2b:68:3e:09:ac:45:4a:46:fc:82:30:4f: 14:ff:83:91:82:ad:cb:5f:b4:b4:52:28:54:89:21:e4:9b:0e: a7:ab:7d:7b:f1:9e:bb:8f:cc:78:a8:9a:b7:cb:bc:21:26:82: 55:b1:ee:b6:9b:ab:a0:d0:81:ab:25:b1:33:7d:06:b4:66:09: 15:61:44:78:9b:00:5a:10:8c:b6:47:a8:56:af:36:d1:ce:94: b8:8c:84:b5:80:c2:c8:50:1c:bd:86:ef:bb:d3:4a:76:86:a7: 4d:15:13:f2:5f:73:78:d0:27:9e:3b:0a:10:ea:f4:94:30:9b: cc:4d:7e:c9:c9:0b:e7:61:52:64:d3:21:c9:8b:f9:ae:a7:d4: 8f:f0:1c:20:fb:36:d0:4d:47:22:a0:57:49:f6:fc:c7:3b:ae: 39:46:87:dd:d0:7b:c5:10:59:51:df:62:fb:da:4f:f6:28:84: 8d:59:e3:fd:ce:d5:1a:78:87:58:f6:f8:e3:1a:07:e9:d7:1a: 53:b0:80:c6 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9ywVkVJVpWBzegne7KF/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjE5NzU4YTA4Nzg3NjgxNmRjMTkzNjFlYWYxZTk0MTJkZTczZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24nXlLE6c6nQ0FwDOQOIi3jeFX3L DSEnXgVaMHov75WwAd8Z42YjdCT40Mt8XNEjhjIjHo6lYVogGXWHCxqZt5YwYwgs gLa/kwRJGY3y3fD1TiADX3BAObGNZBM+cbHAy2/AtTHHS8HMQPLaZsu4xlzc3TWH N38feV8YaRubv500FWdZeo6K82e5gYnb6Dsg1gcvJDm3cJF8TlJZ/89iDadO+VJc +GUH2yYwI4OM0fPj3YfiqA8xQYiNxvXxUq+GAIeqSUtd5jaimByI4cb3dxnvT0Kb WMjAWpNOFBPwPbP2g76XiEylDr0L2F1uHtiJ551TzR+4eC+M704Jz9l8EQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJsZdYoIeHaBbcGTYerx6UEt5z+GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2JhNmYz ZS1lOTViLTQ4ZDItODQxOS00MTNkYTY2N2E4YmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvYmE2ZjNl LWU5NWItNDhkMi04NDE5LTQxM2RhNjY3YThiZS8xL214bDFpZ2g0ZG9GdHdaTmg2 dkhwUVMzblA0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuRbnAwQCuZYQMA0EAgACMAcDBQMqDtSAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDoRjANBgkqhkiG9w0BAQsFAAOCAQEAOKlz Cyx3B5LlSNtmWkcHu4WjkZ8G69lFw7wN9+5JuO9A0R4UT0UTD58l274EZxLwSkNn Ur0Xzqen6NetK2g+CaxFSkb8gjBPFP+DkYKty1+0tFIoVIkh5JsOp6t9e/Geu4/M eKiat8u8ISaCVbHutpuroNCBqyWxM30GtGYJFWFEeJsAWhCMtkeoVq820c6UuIyE tYDCyFAcvYbvu9NKdoanTRUT8l9zeNAnnjsKEOr0lDCbzE1+yckL52FSZNMhyYv5 rqfUj/AcIPs20E1HIqBXSfb8xzuuOUaH3dB7xRBZUd9i+9pP9iiEjVnj/c7VGniH WPb44xoH6dcaU7CAxg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:14 2026 by rpki-client