This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer (raw, json) Hash identifier: XAZeXPVCd4LAdDZjBiEJNSkSVgKGfdbLQZG6EVUeN00= Subject key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84FC7B5A2AF74AB11815175FB43A22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60542 IP: 89.106.206.0/24 IP: 193.104.40.0/24 IP: 2a0b:6740::/29 IP: 2a12:eb80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fc:7b:5a:2a:f7:4a:b1:18:15:17:5f:b4:3a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:10:68:43:ce:26:cc:71:64:fe:18:6e:07: ab:49:e8:c5:b6:21:7e:44:c2:d6:98:db:b6:c6:17: f2:e0:b3:7c:36:26:a1:99:56:0f:7c:a9:c0:f0:99: 14:17:2f:11:f5:ec:b3:5e:29:5f:63:ef:0a:37:23: 87:37:a3:05:04:cd:2d:16:8b:a6:2b:fa:d8:8a:7a: a5:41:47:72:93:9d:56:6f:57:ab:06:58:8d:82:7c: c1:95:e1:4b:40:ba:08:8e:32:68:89:2b:b0:9c:a8: a3:ea:48:4e:bc:2b:4d:a3:b0:fa:9f:d9:6c:ca:a7: 35:7a:0a:46:ce:91:93:f4:2a:99:31:31:98:1d:c5: d3:ad:98:73:6b:5d:bc:2d:ba:cb:1b:67:75:39:19: d2:ef:ab:3e:5a:8c:aa:39:b9:c5:29:9c:51:35:20: 7f:bb:60:4b:c3:19:bf:31:0b:08:a3:db:0a:c9:3d: 06:1f:28:18:05:47:01:9d:61:28:45:37:cc:4b:db: 9a:f3:5e:c6:1e:3a:e6:70:65:f0:e0:f9:09:70:8f: b3:90:22:45:1f:43:4f:45:3a:19:48:96:f9:db:d9: 98:94:b2:b5:84:7d:4a:d7:53:ef:49:89:b1:17:41: 1a:d6:ec:4b:fc:e6:cb:1e:db:5e:01:2f:3d:aa:95: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.206.0/24 193.104.40.0/24 IPv6: 2a0b:6740::/29 2a12:eb80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60542 Signature Algorithm: sha256WithRSAEncryption b1:5b:3d:40:26:3e:9f:8b:d2:da:fa:2a:d6:a2:75:dd:29:56: 88:fc:03:52:e3:ab:46:dc:96:9f:5c:92:0f:70:c7:a6:6e:30: 4a:ef:7a:4c:a5:2f:41:a1:aa:cf:e9:d4:cf:2a:71:9b:51:9c: ba:3f:b8:8f:93:a9:42:74:77:b2:9b:b1:96:8f:19:94:96:82: d6:ff:30:32:13:de:47:a5:90:df:73:bd:02:69:d0:f6:7b:5a: 7a:d2:38:48:98:1d:56:80:a2:33:f9:a3:d6:ac:8d:18:68:54: 8b:99:ef:da:0d:99:1b:a0:12:52:f8:9a:a9:bc:f7:b0:d5:cc: 9e:0a:97:b1:f1:03:f1:b6:4f:9c:ef:a2:5a:6e:47:3a:33:9a: 2c:a4:c8:16:d3:63:4f:23:bd:5a:24:b9:42:38:4a:32:0a:c7: a7:52:64:5d:27:75:a2:a0:fe:dd:8e:8c:e9:c1:08:0c:29:e1: 88:1b:ca:46:16:bf:c6:76:02:a3:38:d5:12:6e:1a:ed:ec:57: 41:3b:e4:f3:17:28:ce:3b:41:8e:9a:3f:89:65:7a:66:69:11: 0c:41:37:3b:6b:bf:39:2b:87:b8:27:ac:5a:ac:dd:98:a2:19: 84:2c:05:3e:0a:87:3f:02:d6:fa:4c:fa:9d:8f:45:e9:6c:ac: 0a:79:38:1f -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt/hPx7Wir3SrEYFRdftDoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTM4MGM1NWM0NjExN2Y5ZDBmOWY4OWY4ODVmZDhhYzU4NGM3MmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6AQaEPOJsxxZP4YbgerSejFtiF+ RMLWmNu2xhfy4LN8NiahmVYPfKnA8JkUFy8R9eyzXilfY+8KNyOHN6MFBM0tFoum K/rYinqlQUdyk51Wb1erBliNgnzBleFLQLoIjjJoiSuwnKij6khOvCtNo7D6n9ls yqc1egpGzpGT9CqZMTGYHcXTrZhza128LbrLG2d1ORnS76s+WoyqObnFKZxRNSB/ u2BLwxm/MQsIo9sKyT0GHygYBUcBnWEoRTfMS9ua817GHjrmcGXw4PkJcI+zkCJF H0NPRToZSJb529mYlLK1hH1K11PvSYmxF0Ea1uxL/ObLHtteAS89qpURRwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFJo4DFXEYRf50Pn4n4hf2KxYTHLnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzBmMjY4 Mi05ODc4LTQxNmItOTY1Yy00MGFhYzYzOTY3NzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMGYyNjgy LTk4NzgtNDE2Yi05NjVjLTQwYWFjNjM5Njc3Ny8xL21qZ01WY1JoRl9uUS1maWZp Rl9ZckZoTWN1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAWWrOAwQAwWgoMBQEAgACMA4DBQMqC2dAAwUD KhLrgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA7H4wDQYJKoZIhvcNAQELBQAD ggEBALFbPUAmPp+L0tr6Ktaidd0pVoj8A1Ljq0bclp9ckg9wx6ZuMErvekylL0Gh qs/p1M8qcZtRnLo/uI+TqUJ0d7KbsZaPGZSWgtb/MDIT3kelkN9zvQJp0PZ7WnrS OEiYHVaAojP5o9asjRhoVIuZ79oNmRugElL4mqm897DVzJ4Kl7HxA/G2T5zvolpu RzozmiykyBbTY08jvVokuUI4SjIKx6dSZF0ndaKg/t2OjOnBCAwp4YgbykYWv8Z2 AqM41RJuGu3sV0E75PMXKM47QY6aP4llemZpEQxBNztrvzkrh7gnrFqs3ZiiGYQs BT4Khz8C1vpM+p2PRelsrAp5OB8= -----END CERTIFICATE-----Generated at Sun Jan 11 15:13:48 2026 by rpki-client