This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer (raw, json) Hash identifier: hvxiqSRO9kWbeJ8+FNF/rGvz1IHR5HBbuPwyN3XVUM0= Subject key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE3A1CD77F0EBF162270C40A13EF84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.140.160.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3a:1c:d7:7f:0e:bf:16:22:70:c4:0a:13:ef:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34803a2cf290b0bdc69addc003d564a234aa4f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:fa:62:ca:4c:c9:2a:a8:0b:cf:d0:a9:fd: b3:b4:e9:72:d3:91:1d:c6:47:96:f6:18:dc:48:3a: 27:e0:7a:3d:7c:5b:22:68:3a:4e:cd:83:06:4b:f5: 31:1c:bb:c2:8b:09:70:0d:aa:be:a6:a2:5d:d3:c1: 08:77:79:d1:c5:88:b3:15:20:e8:a7:0a:5a:80:c5: b0:d4:8b:f4:a8:7b:4c:1e:c6:98:97:2f:e3:c8:59: 30:77:d1:78:16:48:ba:ed:52:ea:1e:9b:47:98:a4: ec:f5:47:e2:52:b5:8e:54:2b:7d:34:7b:f1:37:6b: 3d:09:5e:65:af:f8:42:03:e1:b8:be:2e:36:ff:26: 34:de:1f:23:81:a9:ed:8d:ba:ed:1d:3a:28:3b:2b: 4b:bb:df:81:b9:0c:8e:d6:07:54:27:83:ac:da:3f: 2d:a7:ce:3d:a9:1b:18:63:16:44:52:ef:9e:3e:69: 3f:da:a3:16:f8:7e:79:5a:42:7f:1e:51:b7:65:91: 56:7d:d1:d1:50:06:0b:4d:18:86:87:fd:15:ca:26: 4f:8f:35:64:f4:7d:56:a5:34:ee:3f:e0:67:14:6e: d1:0f:ad:e2:cb:3a:7e:8d:a8:05:48:64:84:9a:99: a6:29:b5:e1:30:b3:c5:ab:87:f5:79:8a:ed:1c:ed: 7f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.160.0/22 Signature Algorithm: sha256WithRSAEncryption 21:ae:84:6c:33:6c:03:1a:ba:4c:33:51:c6:b9:6d:d2:07:ff: 88:ce:28:67:1a:48:02:d0:18:70:86:32:09:13:7f:7f:2a:3a: a2:80:01:4a:1b:0f:43:e0:94:c9:b4:8c:d9:61:d1:9c:6e:38: 5b:b0:30:59:80:56:5a:69:93:be:f1:5f:54:88:9a:37:2e:14: 40:ce:07:1f:be:ac:d3:65:80:70:69:3b:47:fc:39:05:7a:f8: 28:38:25:94:ad:0b:c5:4c:57:c5:07:97:7b:64:f2:19:a0:2b: e4:5e:88:02:0c:dd:8c:46:4f:8c:8f:02:e6:2e:93:7a:82:e4: 35:2e:f2:ee:b2:d9:b7:e9:f6:c7:2f:4f:aa:32:45:50:bd:4d: 60:15:dc:49:cc:16:36:18:3b:15:6b:bf:11:ca:af:51:3b:3b: f0:2f:24:84:88:e6:eb:c1:84:47:7e:40:3a:08:02:98:e8:93: f8:ba:ee:17:63:a0:81:eb:67:a9:69:75:4f:dd:71:f0:ee:4e: b6:c0:e8:1c:ff:a1:b6:a9:16:db:56:ad:ff:bc:1c:24:e3:c3: 19:1b:06:b2:8d:11:c6:1f:a3:86:71:06:c2:2b:53:96:0f:cf: 30:b6:02:03:cd:bb:57:98:d9:7d:95:bd:f7:5e:dc:60:4b:e1: c0:82:70:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87joc138OvxYicMQKE++EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDgwM2EyY2YyOTBiMGJkYzY5YWRkYzAwM2Q1NjRhMjM0YWE0Zjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnP6YspMySqoC8/Qqf2ztOly05Ed xkeW9hjcSDon4Ho9fFsiaDpOzYMGS/UxHLvCiwlwDaq+pqJd08EId3nRxYizFSDo pwpagMWw1Iv0qHtMHsaYly/jyFkwd9F4Fki67VLqHptHmKTs9UfiUrWOVCt9NHvx N2s9CV5lr/hCA+G4vi42/yY03h8jgantjbrtHTooOytLu9+BuQyO1gdUJ4Os2j8t p849qRsYYxZEUu+ePmk/2qMW+H55WkJ/HlG3ZZFWfdHRUAYLTRiGh/0VyiZPjzVk 9H1WpTTuP+BnFG7RD63iyzp+jagFSGSEmpmmKbXhMLPFq4f1eYrtHO1/CQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDSAOizykLC9xprdwAPVZKI0qk92MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2ZlNjIz NC02NDM3LTQ5NjctYmE2My04NWMzZmE3OWViYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZmU2MjM0 LTY0MzctNDk2Ny1iYTYzLTg1YzNmYTc5ZWJjMS8xL05JQTZMUEtRc0wzR210M0FB OVZrb2pTcVQzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLYygMA0GCSqGSIb3DQEBCwUAA4IBAQAhroRs M2wDGrpMM1HGuW3SB/+IzihnGkgC0BhwhjIJE39/KjqigAFKGw9D4JTJtIzZYdGc bjhbsDBZgFZaaZO+8V9UiJo3LhRAzgcfvqzTZYBwaTtH/DkFevgoOCWUrQvFTFfF B5d7ZPIZoCvkXogCDN2MRk+MjwLmLpN6guQ1LvLustm36fbHL0+qMkVQvU1gFdxJ zBY2GDsVa78Ryq9ROzvwLySEiObrwYRHfkA6CAKY6JP4uu4XY6CB62epaXVP3XHw 7k62wOgc/6G2qRbbVq3/vBwk48MZGwayjRHGH6OGcQbCK1OWD88wtgIDzbtXmNl9 lb33XtxgS+HAgnBD -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:51 2026 by rpki-client