This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer (raw, json) Hash identifier: zMxFreZYelQISPGgVJwULsFLDhL8YZsCE4KLDkjMIE4= Subject key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A23C74571AAA21AAAC6782E4B2421F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208653 IP: 5.183.136.0/22 IP: 2a0e:dc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3c:74:57:1a:aa:21:aa:ac:67:82:e4:b2:42:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:5f:ea:1e:a9:cf:60:01:3e:72:92:5a:9a: 9e:b7:3a:39:ed:99:69:36:74:c8:91:10:0e:b2:10: f4:d9:40:78:f4:b6:69:f2:ba:64:90:c9:cf:e7:80: a6:88:8e:ab:53:f2:11:b2:59:33:5e:e4:dc:79:95: 06:52:d6:0c:1e:70:b6:09:0e:8f:74:c5:b1:58:2e: 6b:01:25:8b:dc:6a:16:4a:f7:34:df:87:4d:7f:d6: bc:8f:db:78:8b:0c:71:18:26:0a:1f:3e:a8:ab:20: b9:76:8d:7f:4f:36:98:90:ba:e5:34:29:d6:36:3c: 45:94:81:d6:91:a2:0f:3c:63:c5:0e:50:9e:94:d3: dd:f7:02:d7:1e:4d:02:f3:58:cd:35:93:d4:7f:31: ec:ec:c5:3d:97:cb:c6:34:64:51:31:af:01:2e:aa: 8b:40:f8:a1:b9:c8:96:cb:1c:45:86:c9:9e:8e:ba: 86:d6:ed:32:be:24:be:fe:c7:28:fa:24:c8:d1:37: e6:e6:b6:f8:a7:2c:87:29:d5:83:97:e1:05:1e:06: a5:1f:d0:1a:0c:3e:3e:9c:63:76:10:fe:d2:6d:73: 00:74:31:3c:71:73:d5:9d:bb:7c:6c:10:50:62:68: 4a:8c:18:0f:4b:5d:ce:d9:5f:11:f4:ad:ed:ed:72: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.136.0/22 IPv6: 2a0e:dc00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208653 Signature Algorithm: sha256WithRSAEncryption b0:88:89:68:b5:fb:e0:81:a3:c2:37:53:64:45:63:4b:94:37: 76:03:dd:3b:ee:cb:1d:e5:e8:46:ec:cb:46:d9:c5:bf:e8:d7: 1d:2f:05:33:e3:9f:b5:b6:5d:f2:db:79:b2:dc:dc:7d:df:30: 30:e9:1a:e7:a2:6f:e7:51:f3:7a:29:7b:9f:ac:6f:da:80:26: 27:7a:44:a5:65:df:8f:60:12:57:fa:7e:6e:3c:32:e3:5c:f8: 12:d1:29:e9:de:18:5f:a8:9f:84:6c:46:2d:7f:a5:ce:14:01: db:fc:fe:99:d5:71:f2:f2:6f:73:30:1b:21:f9:1c:e3:ab:c9: 71:61:0d:c9:7b:e0:b7:ac:33:39:99:f7:32:cb:c8:c5:70:62: 9a:a2:a8:75:3c:b3:a4:c8:89:92:32:19:0c:f3:32:b0:0c:64: 8e:fd:ff:5c:cd:a4:fd:11:cc:cb:7a:d5:16:ac:b7:dc:88:f4: 30:a6:2a:3c:d7:c2:c6:4d:bb:1d:f5:5b:ff:a6:29:3e:59:8e: ca:b2:5e:cb:46:77:9e:05:a6:2c:4b:41:ef:0d:b9:b6:0f:0f: 58:51:1a:9b:86:96:e8:dd:cb:bc:b7:6b:f3:08:d7:cd:ac:1e: 28:d2:30:7f:13:16:cd:9d:5a:6c:7b:2e:04:f2:41:5b:97:99: 62:12:f4:0d -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt4ojx0VxqqIaqsZ4LkskIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGQ2ZGRlZTM0YzViYjhlYzBlYjkxOWNlMjY1NmJmMGNkODU1ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqopf6h6pz2ABPnKSWpqetzo57Zlp NnTIkRAOshD02UB49LZp8rpkkMnP54CmiI6rU/IRslkzXuTceZUGUtYMHnC2CQ6P dMWxWC5rASWL3GoWSvc034dNf9a8j9t4iwxxGCYKHz6oqyC5do1/TzaYkLrlNCnW NjxFlIHWkaIPPGPFDlCelNPd9wLXHk0C81jNNZPUfzHs7MU9l8vGNGRRMa8BLqqL QPihuciWyxxFhsmejrqG1u0yviS+/sco+iTI0Tfm5rb4pyyHKdWDl+EFHgalH9Aa DD4+nGN2EP7SbXMAdDE8cXPVnbt8bBBQYmhKjBgPS13O2V8R9K3t7XKLRQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPjW3e40xbuOwOuRnOJla/DNhV1UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2Lzc4M2Rh NS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFkMmMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1 LTY1NzItNDEzZC05ZDZiLTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdj NG1WcjhNMkZYVlEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAgW3iDANBAIAAjAHAwUDKg7cADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDLw0wDQYJKoZIhvcNAQELBQADggEBALCIiWi1++CB o8I3U2RFY0uUN3YD3Tvuyx3l6Ebsy0bZxb/o1x0vBTPjn7W2XfLbebLc3H3fMDDp Gueib+dR83ope5+sb9qAJid6RKVl349gElf6fm48MuNc+BLRKeneGF+on4RsRi1/ pc4UAdv8/pnVcfLyb3MwGyH5HOOryXFhDcl74LesMzmZ9zLLyMVwYpqiqHU8s6TI iZIyGQzzMrAMZI79/1zNpP0RzMt61Rast9yI9DCmKjzXwsZNux31W/+mKT5Zjsqy XstGd54FpixLQe8NubYPD1hRGpuGlujdy7y3a/MI182sHijSMH8TFs2dWmx7LgTy QVuXmWIS9A0= -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:32 2026 by rpki-client