This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer (raw, json) Hash identifier: ufPLiTgbTDrBOINb/NGKWFs/SIL9WeVoBDUq34n+P4M= Subject key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECE8559C61630EAB07ADB07A86D15C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48168 IP: 194.113.144.0/22 IP: 2a07:e300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e8:55:9c:61:63:0e:ab:07:ad:b0:7a:86:d1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=340551ace81314829351a27e399aeddb33246155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:39:30:01:21:1f:44:a4:63:4d:de:18:e9: 5d:6c:6f:6b:b0:41:4c:e3:ee:9f:04:83:b0:0a:7c: 96:52:79:b2:09:60:dd:cb:74:0b:f8:8c:fe:42:af: ab:76:08:5e:c7:e4:f4:33:d2:53:d0:11:58:f0:e6: 33:a4:1e:db:08:61:01:56:00:6e:89:95:db:13:90: de:3e:02:78:2d:1f:71:1f:1f:94:8b:54:27:30:01: 28:95:2d:1f:b5:ac:f6:0d:9c:c7:27:73:77:ad:c1: 56:ea:7f:a3:c8:d2:69:11:5e:c1:6b:77:88:36:24: 4d:20:19:a0:00:0d:e9:15:e9:f0:2a:78:14:ec:35: 5a:c2:a3:7a:0f:3a:af:8e:19:65:19:30:b2:ef:97: c3:db:8a:3e:a6:91:1d:b4:37:0b:c6:9b:23:d3:5a: a8:47:76:13:8a:9f:70:11:77:36:96:99:52:04:60: b9:81:c9:a4:b9:57:e4:b6:50:8d:01:de:cd:57:f7: 68:aa:c6:90:6a:5f:d0:ef:45:e4:9e:02:d9:3a:0d: b5:cb:3c:a1:a7:a2:50:2c:c5:38:0e:3a:8f:5d:ad: 0b:11:ee:7e:93:21:88:b4:2a:59:a5:23:e6:5c:ec: 04:eb:87:7e:09:f9:35:f4:81:d9:ea:78:47:f2:94: b1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.144.0/22 IPv6: 2a07:e300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48168 Signature Algorithm: sha256WithRSAEncryption ae:64:fd:b8:aa:d5:cf:69:83:51:e0:2d:ea:33:3a:e5:f6:74: c8:45:cd:8d:f6:d5:c3:5a:0b:36:ef:c2:72:bb:b7:6c:80:4b: a7:06:f0:40:f7:fc:f1:19:49:dd:21:a7:61:34:4a:70:07:ae: cb:c7:37:8f:a5:63:71:fe:24:01:b6:3c:65:05:f3:86:5d:90: d8:27:42:ef:c6:1a:c1:27:c0:3b:bd:85:05:46:ec:10:ee:cf: b1:b5:d3:9a:03:4e:16:9c:e3:24:ca:ac:15:2f:09:95:36:87: c0:15:66:c1:93:59:30:95:b5:00:d2:5d:85:65:1f:8b:53:c7: 81:b7:2b:fb:ba:c6:26:dc:bd:64:62:c9:40:f9:6e:88:70:f4: d5:de:4b:31:18:89:ab:bb:18:ad:a0:27:ae:6f:3a:6a:94:6a: 55:d7:1d:cc:15:ba:69:64:1c:42:18:c3:ca:7b:e9:c4:f4:cb: 78:5b:f7:bf:5b:c1:aa:79:ed:fa:0b:a3:94:ab:5e:af:6a:b8: cc:ea:4d:8f:96:3c:f0:b3:03:ba:ea:a7:98:6b:ff:28:5d:44: 89:5d:c5:8c:e0:03:3b:74:16:9c:98:47:63:f8:79:e6:a6:67: 49:5b:3e:c4:a2:c1:e1:b1:4a:7b:ab:57:3b:2c:9c:58:b3:f6: dd:df:ec:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57OhVnGFjDqsHrbB6htFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDA1NTFhY2U4MTMxNDgyOTM1MWEyN2UzOTlhZWRkYjMzMjQ2MTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFo5MAEhH0SkY03eGOldbG9rsEFM 4+6fBIOwCnyWUnmyCWDdy3QL+Iz+Qq+rdghex+T0M9JT0BFY8OYzpB7bCGEBVgBu iZXbE5DePgJ4LR9xHx+Ui1QnMAEolS0ftaz2DZzHJ3N3rcFW6n+jyNJpEV7Ba3eI NiRNIBmgAA3pFenwKngU7DVawqN6DzqvjhllGTCy75fD24o+ppEdtDcLxpsj01qo R3YTip9wEXc2lplSBGC5gcmkuVfktlCNAd7NV/doqsaQal/Q70XkngLZOg21yzyh p6JQLMU4DjqPXa0LEe5+kyGItCpZpSPmXOwE64d+Cfk19IHZ6nhH8pSxxwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDQFUazoExSCk1Gifjma7dszJGFVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2FhMzgw NS1jOGE0LTRmNjUtODdjYi0xM2VhNTZkMWY2M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvYWEzODA1 LWM4YTQtNGY2NS04N2NiLTEzZWE1NmQxZjYzYS8xL05BVlJyT2dURklLVFVhSi1P WnJ0MnpNa1lWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwnGQMA0EAgACMAcDBQMqB+MAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8KDANBgkqhkiG9w0BAQsFAAOCAQEArmT9uKrVz2mD UeAt6jM65fZ0yEXNjfbVw1oLNu/Ccru3bIBLpwbwQPf88RlJ3SGnYTRKcAeuy8c3 j6Vjcf4kAbY8ZQXzhl2Q2CdC78YawSfAO72FBUbsEO7PsbXTmgNOFpzjJMqsFS8J lTaHwBVmwZNZMJW1ANJdhWUfi1PHgbcr+7rGJty9ZGLJQPluiHD01d5LMRiJq7sY raAnrm86apRqVdcdzBW6aWQcQhjDynvpxPTLeFv3v1vBqnnt+gujlKter2q4zOpN j5Y88LMDuuqnmGv/KF1EiV3FjOADO3QWnJhHY/h55qZnSVs+xKLB4bFKe6tXOyyc WLP23d/sHA== -----END CERTIFICATE-----Generated at Tue Feb 10 10:12:33 2026 by rpki-client