This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer File: NEwINt1cc7B3WQTqo7foekoMDPU.cer (raw, json) Hash identifier: f+X8uzd4NrsJbCn4g0YKJRs5kvA+g8uvH6P2TXAhwhs= Subject key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F847844009760DA0B621D3C67D3883D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201568 IP: 185.60.68.0/22 IP: 2a04:e6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:78:44:00:97:60:da:0b:62:1d:3c:67:d3:88:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:82:da:a4:02:af:c6:0f:a9:a0:4b:a6:a3: 7f:00:e5:07:2d:9a:d1:b0:bb:db:38:a3:df:44:4e: 23:fe:9b:1a:f1:5b:ac:56:47:56:bf:01:2c:52:77: f5:26:f7:2f:ce:61:33:15:ba:f2:13:67:90:34:0d: 67:ba:fb:e5:04:3b:d2:fe:70:d3:dc:1e:bd:08:0e: 60:fe:75:e4:d4:6a:64:19:f8:87:c5:4b:ee:65:a2: 1f:51:54:7b:49:01:6d:6c:8b:ff:05:72:2c:87:3e: f7:42:f8:b8:b6:8b:5e:1f:65:29:03:21:7e:65:6a: 4c:37:94:40:cd:ad:81:fb:f5:cf:6d:52:0e:f5:79: 4c:3a:e4:01:8e:58:c7:30:40:d0:27:d4:09:19:57: 75:b8:91:22:7e:7a:80:ae:a0:70:ac:44:60:33:95: b8:75:ab:3f:9b:e8:9c:39:44:e3:d3:cf:fe:62:26: c4:96:c9:91:55:50:4b:43:1d:92:3d:35:48:1b:b0: bf:2e:20:3b:7c:06:45:ba:a1:9b:c2:6b:29:63:04: 50:aa:b6:a7:82:4e:0d:0a:18:50:62:a4:4f:9b:ba: 1e:c0:de:02:53:3e:34:59:b1:ec:a6:4c:5a:bc:7f: 7b:dd:45:ab:bc:fc:96:1a:ab:dc:f1:22:f6:cb:c4: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.68.0/22 IPv6: 2a04:e6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201568 Signature Algorithm: sha256WithRSAEncryption 84:2d:6f:cc:68:ac:0e:fe:12:26:fd:cc:91:d8:31:e3:4a:41: 2c:61:c1:c8:b4:72:6e:a5:ff:00:0f:55:29:5e:99:77:e5:6f: 19:bf:31:ed:f2:51:3d:ad:a6:35:34:b2:e3:52:1a:91:10:12: 32:47:61:09:d2:ec:de:71:28:43:fd:a5:1b:40:89:e9:02:a6: 8d:de:32:2e:09:21:ee:38:ef:c9:da:65:a2:0b:cb:d3:5d:86: c6:8b:56:e3:c3:a5:4f:03:fd:30:36:38:67:d5:77:b5:5a:5b: a5:87:06:f8:4f:d4:cc:28:b9:1b:af:73:7b:ce:ee:d0:00:00: e4:14:f1:75:02:d0:aa:66:3a:74:3b:3f:b4:b1:30:a2:e3:8a: 80:48:c7:46:02:54:8b:a8:f8:6a:ef:58:27:99:5d:f8:c6:8f: 48:bf:21:97:0d:bd:61:49:d6:1a:3f:dd:bc:f1:fd:6c:32:cc: a2:45:2a:84:40:d7:d6:80:ef:8f:2c:bb:f0:2e:70:6c:18:a8: e3:1b:b2:7f:be:42:7a:be:44:32:a3:17:1d:26:24:e8:d0:71: c7:72:9f:35:3c:a4:68:dd:05:62:b5:f4:60:f2:f0:6d:76:21: d4:ba:a2:eb:e4:12:80:30:bb:27:85:71:14:13:0f:a1:5d:2a: 57:28:1b:cb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hHhEAJdg2gtiHTxn04g9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRjMDgzNmRkNWM3M2IwNzc1OTA0ZWFhM2I3ZTg3YTRhMGMwY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweqC2qQCr8YPqaBLpqN/AOUHLZrR sLvbOKPfRE4j/psa8VusVkdWvwEsUnf1JvcvzmEzFbryE2eQNA1nuvvlBDvS/nDT 3B69CA5g/nXk1GpkGfiHxUvuZaIfUVR7SQFtbIv/BXIshz73Qvi4toteH2UpAyF+ ZWpMN5RAza2B+/XPbVIO9XlMOuQBjljHMEDQJ9QJGVd1uJEifnqArqBwrERgM5W4 das/m+icOUTj08/+YibElsmRVVBLQx2SPTVIG7C/LiA7fAZFuqGbwmspYwRQqran gk4NChhQYqRPm7oewN4CUz40WbHspkxavH973UWrvPyWGqvc8SL2y8TL2QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDRMCDbdXHOwd1kE6qO36HpKDAz1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzAxMGRj My00Y2VmLTQ0ZTMtYWU5Mi0xOWUxMzQ3MTJlOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvMDEwZGMz LTRjZWYtNDRlMy1hZTkyLTE5ZTEzNDcxMmU5Mi8xL05Fd0lOdDFjYzdCM1dRVHFv N2ZvZWtvTURQVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTxEMA0EAgACMAcDBQMqBObAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTYDANBgkqhkiG9w0BAQsFAAOCAQEAhC1vzGisDv4S Jv3Mkdgx40pBLGHByLRybqX/AA9VKV6Zd+VvGb8x7fJRPa2mNTSy41IakRASMkdh CdLs3nEoQ/2lG0CJ6QKmjd4yLgkh7jjvydplogvL012GxotW48OlTwP9MDY4Z9V3 tVpbpYcG+E/UzCi5G69ze87u0AAA5BTxdQLQqmY6dDs/tLEwouOKgEjHRgJUi6j4 au9YJ5ld+MaPSL8hlw29YUnWGj/dvPH9bDLMokUqhEDX1oDvjyy78C5wbBio4xuy f75Cer5EMqMXHSYk6NBxx3KfNTykaN0FYrX0YPLwbXYh1Lqi6+QSgDC7J4VxFBMP oV0qVygbyw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:00 2026 by rpki-client