This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer File: mdy98GMqEBYTqPbJRJsp7UXBqHI.cer (raw, json) Hash identifier: j5TaFocqPA1LlCVT/OP3cWm45bv2jBoTjeNGVKGwa3Y= Subject key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F7117BC30213F6F73A900D0F04A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206352 IP: 185.188.252.0/22 IP: 185.217.48.0/22 IP: 185.248.0.0/22 IP: 2a0b:d480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f7:11:7b:c3:02:13:f6:f7:3a:90:0d:0f:04:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:ea:7a:d9:14:9d:1c:6c:d4:aa:6c:e1:45: 14:67:2a:9b:17:52:2d:9f:b4:12:1a:ec:73:bc:d9: 77:1a:c9:56:af:1e:78:be:44:d6:b9:3d:d7:29:f3: 94:63:38:93:65:ae:7e:1e:a6:13:07:45:37:16:60: f5:7b:a7:49:2f:b5:ef:ee:18:16:f7:dc:8d:2c:0b: d2:a8:89:8b:5d:97:0b:fa:72:23:97:f8:ae:79:4e: ea:26:06:c3:1c:d2:fb:54:cd:82:82:27:31:fd:78: 8d:0d:2d:d5:b9:68:9b:5c:c6:3e:90:af:e9:55:bf: 0d:58:a3:12:1b:00:28:d8:e1:d0:21:d7:1f:80:76: 4e:25:5c:bc:ea:64:65:33:82:16:a7:5b:88:ea:fc: d3:d5:24:7f:fa:f1:8b:ff:53:0a:a2:3f:fb:82:48: bf:53:a0:7c:54:16:03:a6:21:e2:bc:be:50:d3:6d: 62:9d:77:0d:98:9b:e1:a8:6b:0f:f9:e4:cf:aa:84: 7f:0f:4a:4a:6d:38:ee:26:fa:1a:e4:22:d4:7b:e3: bd:c4:81:0d:75:38:1b:56:d9:7e:dc:66:ce:10:17: 03:46:7d:9d:b4:b5:52:0b:c1:0b:02:19:11:54:0c: fe:47:92:26:3d:99:81:be:cd:51:e1:29:36:71:2b: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.252.0/22 185.217.48.0/22 185.248.0.0/22 IPv6: 2a0b:d480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206352 Signature Algorithm: sha256WithRSAEncryption 1d:39:99:90:a9:a6:22:8f:47:0c:f3:32:d2:fe:d7:68:4a:f1: 37:54:76:bc:1d:db:8d:ad:19:37:8f:93:1d:dc:ef:c3:44:b2: e0:93:3f:10:5c:15:8a:f4:4a:ae:c4:79:b1:2a:32:5a:eb:76: 4a:17:03:45:c4:45:c4:52:1c:49:91:fd:05:df:17:1b:e5:07: b8:70:e8:04:e5:ec:66:9d:dc:19:32:f4:68:ad:f2:d0:92:cf: 08:b7:f0:26:1d:11:05:ef:8e:1a:46:fa:13:2e:ad:56:d5:c9: 5f:cf:b6:a4:d0:fa:9d:73:02:e9:64:f3:d7:bb:88:70:8f:d0: 5f:28:2c:2a:68:47:1b:86:fb:e2:e0:67:d3:65:02:d3:5f:aa: 61:8f:43:71:68:c1:da:54:99:02:7b:74:f4:5f:23:7d:a2:a1: 79:6c:16:b5:e5:2e:1e:a6:b2:5b:6f:f2:5e:1d:7d:35:ec:0f: 27:82:2f:27:79:f3:8b:2c:d9:99:28:45:a7:50:71:19:57:a9: 12:ef:73:70:dd:de:67:2c:c7:e9:80:43:32:88:4e:93:59:1c: a5:58:33:51:0c:7b:d5:db:24:8d:bb:cf:a8:ee:8b:d0:77:cc: 55:5f:70:97:90:2c:8e:45:b4:4f:ad:b4:ae:25:c0:c1:10:f9: 1b:ee:c4:dc -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/FfcRe8MCE/b3OpANDwSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWRjYmRmMDYzMmExMDE2MTNhOGY2Yzk0NDliMjllZDQ1YzFhODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudvqetkUnRxs1Kps4UUUZyqbF1It n7QSGuxzvNl3GslWrx54vkTWuT3XKfOUYziTZa5+HqYTB0U3FmD1e6dJL7Xv7hgW 99yNLAvSqImLXZcL+nIjl/iueU7qJgbDHNL7VM2Cgicx/XiNDS3VuWibXMY+kK/p Vb8NWKMSGwAo2OHQIdcfgHZOJVy86mRlM4IWp1uI6vzT1SR/+vGL/1MKoj/7gki/ U6B8VBYDpiHivL5Q021inXcNmJvhqGsP+eTPqoR/D0pKbTjuJvoa5CLUe+O9xIEN dTgbVtl+3GbOEBcDRn2dtLVSC8ELAhkRVAz+R5ImPZmBvs1R4Sk2cSuWvwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFJncvfBjKhAWE6j2yUSbKe1FwahyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzRmM2Qx Yi04MzYxLTQxMWUtYTE0OC04ODU4YTU1OWYyNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvNGYzZDFi LTgzNjEtNDExZS1hMTQ4LTg4NThhNTU5ZjI1MS8xL21keTk4R01xRUJZVHFQYkpS SnNwN1VYQnFISS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCubz8AwQCudkwAwQCufgAMA0EAgACMAcDBQMq C9SAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmEDANBgkqhkiG9w0BAQsFAAOC AQEAHTmZkKmmIo9HDPMy0v7XaErxN1R2vB3bja0ZN4+THdzvw0Sy4JM/EFwVivRK rsR5sSoyWut2ShcDRcRFxFIcSZH9Bd8XG+UHuHDoBOXsZp3cGTL0aK3y0JLPCLfw Jh0RBe+OGkb6Ey6tVtXJX8+2pND6nXMC6WTz17uIcI/QXygsKmhHG4b74uBn02UC 01+qYY9DcWjB2lSZAnt09F8jfaKheWwWteUuHqayW2/yXh19NewPJ4IvJ3nziyzZ mShFp1BxGVepEu9zcN3eZyzH6YBDMohOk1kcpVgzUQx71dskjbvPqO6L0HfMVV9w l5AsjkW0T620riXAwRD5G+7E3A== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:12 2026 by rpki-client