This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer File: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer (raw, json) Hash identifier: c7nw20U0RccoWUC4oCQemMzW/CUJyO7odeYot0bg3sg= Subject key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5036E70A4C2439C6AAC47F6333A43 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201510 IP: 80.73.246.0/24 IP: 91.211.160.0/23 IP: 185.73.92.0/22 IP: 2a03:41e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:03:6e:70:a4:c2:43:9c:6a:ac:47:f6:33:3a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:d7:cc:1b:8e:d0:28:5a:6d:e8:db:3d:ef: 43:3c:7b:36:12:6d:77:9e:35:59:01:ff:07:6d:3b: 2b:eb:33:c5:a4:0d:22:f2:68:a6:71:d2:94:48:e4: 1a:71:19:3a:14:0d:12:91:0e:81:1f:ce:2d:87:3a: 93:d4:62:1b:78:8b:2d:70:60:98:e6:00:67:d2:27: f7:b8:a9:56:c0:53:39:e0:cb:f1:49:d7:63:b9:93: b2:a2:db:b0:55:82:69:9c:64:46:38:0d:df:21:94: 59:84:67:ca:69:8f:ee:19:6c:c5:f0:98:9f:20:66: 09:52:35:4d:7e:d0:b4:48:19:0f:97:2b:db:28:2c: b7:16:e0:9d:a2:40:a8:e8:68:8c:f9:4f:87:3b:74: b7:f3:1f:61:22:6f:91:1b:98:d6:72:ee:b5:f2:28: e1:b0:48:9f:4e:39:9a:39:23:1c:76:c6:3f:43:0a: 30:62:23:d1:23:b6:4a:f6:c7:09:a8:97:f5:1f:b1: 2b:a5:27:42:4f:c3:60:c5:82:00:81:3c:7e:51:87: 96:33:ca:f3:01:bf:7f:57:1a:fa:0e:06:7d:d5:71: a4:f0:65:1e:17:b5:bd:47:71:a7:da:e2:00:bd:ce: f8:62:dc:88:b7:38:1e:02:aa:98:d5:5a:4e:55:fd: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.246.0/24 91.211.160.0/23 185.73.92.0/22 IPv6: 2a03:41e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201510 Signature Algorithm: sha256WithRSAEncryption a8:85:24:2c:d9:2b:b8:7b:ac:1e:c5:b7:c5:53:a5:b3:68:25: 43:9a:3f:1b:b4:14:46:c5:60:1c:ea:5c:9e:43:df:b3:12:57: d5:c6:ba:c0:31:92:86:b0:fa:8a:43:e6:14:81:3f:60:24:b0: 2f:05:3f:57:9c:cb:50:8e:81:12:50:85:e7:84:47:35:8f:26: fc:8f:3f:cc:8b:8c:4f:a6:ce:77:b8:fb:29:b7:ce:0b:79:a0: d7:f1:1d:ed:34:89:a1:45:f7:19:21:f4:ab:05:05:75:8e:29: cc:cd:50:50:e1:9a:28:58:cf:0c:f5:bf:6e:2d:49:73:67:1c: d2:3d:6d:8d:31:01:09:10:dd:9a:91:47:6a:75:49:59:3f:34: ce:a0:05:12:56:e6:05:c9:21:94:13:07:9d:2d:d6:fc:79:1f: 24:e8:53:a2:c2:7d:46:fd:45:61:83:5a:d1:15:b8:6f:f9:eb: 76:07:87:e4:76:db:49:c2:fe:3a:43:1d:96:0b:84:a2:21:7b: 68:68:ca:14:62:63:9d:ec:21:97:dd:4c:24:e1:f4:3d:87:91: 01:e8:29:90:d5:34:87:db:67:63:3d:57:df:86:f3:7e:e0:9c: bc:15:fc:f1:0f:9f:53:46:75:69:c5:5e:f6:a4:73:eb:5a:18: af:06:2e:58 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7pQNucKTCQ5xqrEf2MzpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzRjMjYxN2EzNzJlNDY2ZTk4ZDQyNTMyZGQwYmQ4ZTVjZGQ5OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCHXzBuO0ChabejbPe9DPHs2Em13 njVZAf8HbTsr6zPFpA0i8mimcdKUSOQacRk6FA0SkQ6BH84thzqT1GIbeIstcGCY 5gBn0if3uKlWwFM54MvxSddjuZOyotuwVYJpnGRGOA3fIZRZhGfKaY/uGWzF8Jif IGYJUjVNftC0SBkPlyvbKCy3FuCdokCo6GiM+U+HO3S38x9hIm+RG5jWcu618ijh sEifTjmaOSMcdsY/QwowYiPRI7ZK9scJqJf1H7ErpSdCT8NgxYIAgTx+UYeWM8rz Ab9/Vxr6DgZ91XGk8GUeF7W9R3Gn2uIAvc74YtyItzgeAqqY1VpOVf0gFQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFDdMJhejcuRm6Y1CUy3QvY5c3Zk9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzM4MTEy NS0wMjQ4LTRlYmMtYTc0ZC1iOGRhZDZlNWMzYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvMzgxMTI1 LTAyNDgtNGViYy1hNzRkLWI4ZGFkNmU1YzNiZi8xL04wd21GNk55NUdicGpVSlRM ZEM5amx6ZG1UMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAUEn2AwQBW9OgAwQCuUlcMA0EAgACMAcDBQAq A0HgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMTJjANBgkqhkiG9w0BAQsFAAOC AQEAqIUkLNkruHusHsW3xVOls2glQ5o/G7QURsVgHOpcnkPfsxJX1ca6wDGShrD6 ikPmFIE/YCSwLwU/V5zLUI6BElCF54RHNY8m/I8/zIuMT6bOd7j7KbfOC3mg1/Ed 7TSJoUX3GSH0qwUFdY4pzM1QUOGaKFjPDPW/bi1Jc2cc0j1tjTEBCRDdmpFHanVJ WT80zqAFElbmBckhlBMHnS3W/HkfJOhTosJ9Rv1FYYNa0RW4b/nrdgeH5HbbScL+ OkMdlguEoiF7aGjKFGJjnewhl91MJOH0PYeRAegpkNU0h9tnYz1X34bzfuCcvBX8 8Q+fU0Z1acVe9qRz61oYrwYuWA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:45:32 2026 by rpki-client