This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer (raw, json) Hash identifier: eAXIbu3pBDOd2myrA7tXevnbBGWH2L3DdvRVW51aPQo= Subject key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7360B46765269266B2AEC9C6E93C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212208 IP: 93.93.152.0/21 IP: 2a06:8b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:36:0b:46:76:52:69:26:6b:2a:ec:9c:6e:93:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:6e:9e:7a:dc:60:16:71:70:df:f3:e0:72: b9:68:b1:97:7b:1a:8f:55:b3:d5:35:13:9c:fa:95: 9e:d2:e0:63:c1:9c:87:f2:1d:6f:68:71:2a:d3:a4: 79:b4:3e:c1:5f:dd:cd:d6:d1:86:83:a5:50:44:9e: 85:94:68:46:68:d0:4d:80:80:3b:e2:c1:6e:5b:cd: a0:d2:77:58:0a:52:38:8f:5f:d2:aa:08:03:58:fa: 06:6e:a1:e5:1f:2f:3a:1d:c4:b7:3b:80:60:ae:fb: d2:1d:6c:80:a0:3e:b4:81:14:a0:f1:17:48:21:62: ab:dc:96:31:f6:3a:c1:35:36:45:fa:c1:99:c1:ba: 35:8d:ce:16:73:c9:ec:5b:92:01:b0:73:2b:2c:a3: fa:b5:93:63:3c:f0:a8:a2:53:04:06:87:16:70:17: c0:74:a1:fc:69:8a:c6:e8:c6:ed:5f:12:6d:c2:76: f4:5e:7e:9b:08:20:fa:21:ea:74:bc:15:94:c4:58: 77:75:29:70:3d:fd:96:14:c8:07:4f:86:f1:32:a9: cf:dd:74:bd:d5:e8:33:8e:73:08:4e:f3:79:b3:7f: 31:45:1f:9a:81:78:d6:2f:5b:b7:ce:ca:c1:93:87: 86:47:dd:10:64:e4:a3:66:f9:54:ff:e2:ae:8e:5a: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.152.0/21 IPv6: 2a06:8b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212208 Signature Algorithm: sha256WithRSAEncryption 20:3b:ee:41:1e:e4:3f:ce:a3:1c:a6:74:5c:b9:e9:44:bb:0f: 4d:29:a3:5c:cb:1e:ba:49:55:ce:d1:70:14:e5:9e:fc:20:b2: e3:c0:d9:92:12:53:8b:81:96:98:f5:e1:38:3e:2d:ba:31:b4: 3a:0d:72:61:38:0b:2c:96:1f:fc:c9:0d:7d:6b:9d:1c:89:89: d9:90:a1:b6:19:85:8e:85:44:c1:3b:97:79:41:18:72:9f:8b: 54:5d:3f:de:97:4d:54:dc:6a:e5:73:f0:9b:e8:b6:75:d3:d0: 12:bc:ef:78:9c:5d:1a:14:76:b3:7c:e0:1f:10:aa:00:b0:62: c6:44:3f:94:8a:07:d4:e8:66:26:1a:b6:67:f2:dd:a2:dc:07: e5:e0:ef:f4:4d:86:f0:36:a4:58:90:01:c1:01:fe:3f:c8:d9: 48:b7:70:39:3a:62:2a:e2:a4:d5:8b:ae:a2:ce:c2:76:09:df: 35:45:f4:3f:96:91:70:aa:e7:7d:2a:fc:b1:28:95:e7:4d:84: 04:9b:22:49:c4:b7:94:26:9e:17:77:81:84:91:b1:e9:e8:db: b8:87:01:f6:8a:28:29:1e:43:2f:17:73:bd:55:0b:0d:6f:07: 6c:2d:74:1f:9b:4a:24:80:16:a3:04:93:bb:fb:2c:8e:c1:5d: be:10:90:39 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xzYLRnZSaSZrKuycbpPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTA2Y2UyYjFhOTgwZmJkMWVmOTljM2Y1NjUzNjhhZDYyMWJjNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqutunnrcYBZxcN/z4HK5aLGXexqP VbPVNROc+pWe0uBjwZyH8h1vaHEq06R5tD7BX93N1tGGg6VQRJ6FlGhGaNBNgIA7 4sFuW82g0ndYClI4j1/SqggDWPoGbqHlHy86HcS3O4BgrvvSHWyAoD60gRSg8RdI IWKr3JYx9jrBNTZF+sGZwbo1jc4Wc8nsW5IBsHMrLKP6tZNjPPCoolMEBocWcBfA dKH8aYrG6MbtXxJtwnb0Xn6bCCD6Iep0vBWUxFh3dSlwPf2WFMgHT4bxMqnP3XS9 1egzjnMITvN5s38xRR+agXjWL1u3zsrBk4eGR90QZOSjZvlU/+KujlqjXQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJkGzisamA+9HvmcP1ZTaK1iG8T0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2Y5NmRj ZS0zYTQ5LTQ1NzEtYjk2Mi1hMmZlNDk5MWEwMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvZjk2ZGNl LTNhNDktNDU3MS1iOTYyLWEyZmU0OTkxYTAzNy8xL21RYk9LeHFZRDcwZS1ad19W bE5vcldJYnhQUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDXV2YMA0EAgACMAcDBQMqBouAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM88DANBgkqhkiG9w0BAQsFAAOCAQEAIDvuQR7kP86j HKZ0XLnpRLsPTSmjXMseuklVztFwFOWe/CCy48DZkhJTi4GWmPXhOD4tujG0Og1y YTgLLJYf/MkNfWudHImJ2ZChthmFjoVEwTuXeUEYcp+LVF0/3pdNVNxq5XPwm+i2 ddPQErzveJxdGhR2s3zgHxCqALBixkQ/lIoH1OhmJhq2Z/LdotwH5eDv9E2G8Dak WJABwQH+P8jZSLdwOTpiKuKk1Yuuos7CdgnfNUX0P5aRcKrnfSr8sSiV502EBJsi ScS3lCaeF3eBhJGx6ejbuIcB9oooKR5DLxdzvVULDW8HbC10H5tKJIAWowSTu/ss jsFdvhCQOQ== -----END CERTIFICATE-----Generated at Thu Jan 1 07:22:15 2026 by rpki-client