This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer File: NIWdiibI6Ih3f06AGyC3hd7mVM8.cer (raw, json) Hash identifier: K16RHBd4DiWeR/aRMtg6Uwp/Un95uCcyRnJuo5PQQWI= Subject key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7168EB90FEFDAA3524341DAC7F7FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48178 IP: 193.202.21.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:16:8e:b9:0f:ef:da:a3:52:43:41:da:c7:f7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34859d8a26c8e888777f4e801b20b785dee654cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:e2:06:13:76:f4:29:a0:17:ec:0c:c2:96: da:31:90:e8:c3:3e:bf:1b:43:b1:95:6f:cc:c7:3b: 1e:77:52:73:1a:4b:d9:2d:78:a1:67:b1:5d:f1:4a: 33:c9:d8:b4:84:3d:1f:77:5d:29:40:a6:b9:fc:57: d5:9f:9a:06:05:4c:52:76:16:40:44:f5:c8:59:57: 5e:d6:47:99:b9:78:52:e0:e9:ba:3e:18:96:b4:58: 36:17:17:16:23:e0:7a:94:9c:35:27:61:10:bb:4e: ef:c4:82:bb:cb:da:b2:42:70:ca:b6:4f:87:e6:06: 29:ca:0c:75:1c:60:ac:a4:12:27:aa:77:29:d5:01: 29:30:d2:f4:74:01:47:3f:86:93:e1:a6:41:06:21: 19:8f:3c:ad:28:8d:b9:c6:75:08:f4:b4:ab:8b:2a: 1f:13:32:32:2f:32:7d:e3:36:79:03:99:3b:e7:dd: a7:bc:c2:b8:72:97:f4:b4:02:6d:bb:9d:9a:08:bb: 3a:e0:e7:37:3f:44:38:f2:6b:96:36:35:9f:a0:1f: b3:60:56:fa:86:4a:77:f5:16:17:d9:e9:2e:aa:74: 37:7d:86:97:1b:72:0d:cd:63:08:e2:88:30:b4:b2: 84:4d:c7:27:ab:0c:c9:c7:01:5a:2f:af:c5:9f:fe: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.21.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48178 Signature Algorithm: sha256WithRSAEncryption 81:de:e0:79:f9:a1:da:23:a5:16:6e:cd:94:db:cc:1a:a4:61: 11:e7:95:c3:09:86:28:a7:ae:79:88:28:1e:98:21:5f:15:59: 55:68:f1:4e:3f:68:e3:fe:78:1b:a3:e8:05:74:a4:b0:82:cf: 23:aa:98:3b:06:b4:d8:43:d7:ae:e8:08:14:10:16:ea:dd:dc: 8a:c8:61:34:bf:03:fd:06:44:b8:2a:b4:a5:6c:31:55:50:4c: 49:fb:49:53:39:94:14:3e:36:d7:ff:60:53:96:0f:75:27:f4: a2:02:07:19:8a:8b:67:3f:77:0c:14:62:a0:22:b9:ad:1d:6f: 23:4c:11:1f:0d:c8:3c:33:73:04:3a:01:1b:c8:7b:6a:9b:28: 65:0c:55:e5:a4:49:ac:bc:4c:ca:de:7a:81:1a:a3:5e:d7:c9: 08:d1:2c:75:72:d7:6a:3c:08:ec:72:6a:5c:9c:b2:b9:63:dc: 8b:b0:14:9d:df:f3:bc:68:f8:a4:69:8f:ce:8f:ae:67:4b:8a: 26:a2:d3:eb:d0:c9:2a:62:44:58:74:68:a4:c4:73:83:dd:d1: d6:3f:88:a3:62:84:57:98:48:cf:7f:95:db:da:d1:f8:d1:4a: 38:5b:d9:45:d8:59:e3:b8:61:a4:06:89:28:3d:a1:f1:2e:27: 26:c5:cb:b3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xxaOuQ/v2qNSQ0Hax/f9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDg1OWQ4YTI2YzhlODg4Nzc3ZjRlODAxYjIwYjc4NWRlZTY1NGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42jiBhN29CmgF+wMwpbaMZDowz6/ G0OxlW/Mxzsed1JzGkvZLXihZ7Fd8Uozydi0hD0fd10pQKa5/FfVn5oGBUxSdhZA RPXIWVde1keZuXhS4Om6PhiWtFg2FxcWI+B6lJw1J2EQu07vxIK7y9qyQnDKtk+H 5gYpygx1HGCspBInqncp1QEpMNL0dAFHP4aT4aZBBiEZjzytKI25xnUI9LSriyof EzIyLzJ94zZ5A5k7592nvMK4cpf0tAJtu52aCLs64Oc3P0Q48muWNjWfoB+zYFb6 hkp39RYX2ekuqnQ3fYaXG3INzWMI4ogwtLKETccnqwzJxwFaL6/Fn/7R6QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDSFnYomyOiId39OgBsgt4Xe5lTPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3Lzc4ZmVm Yy1lOWM1LTRjNmItOWVjZC0xODcyM2M4NDExMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvNzhmZWZj LWU5YzUtNGM2Yi05ZWNkLTE4NzIzYzg0MTEyMS8xL05JV2RpaWJJNkloM2YwNkFH eUMzaGQ3bVZNOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcoVMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC8MjANBgkqhkiG9w0BAQsFAAOCAQEAgd7gefmh2iOlFm7NlNvMGqRhEeeVwwmG KKeueYgoHpghXxVZVWjxTj9o4/54G6PoBXSksILPI6qYOwa02EPXrugIFBAW6t3c ishhNL8D/QZEuCq0pWwxVVBMSftJUzmUFD421/9gU5YPdSf0ogIHGYqLZz93DBRi oCK5rR1vI0wRHw3IPDNzBDoBG8h7apsoZQxV5aRJrLxMyt56gRqjXtfJCNEsdXLX ajwI7HJqXJyyuWPci7AUnd/zvGj4pGmPzo+uZ0uKJqLT69DJKmJEWHRopMRzg93R 1j+Io2KEV5hIz3+V29rR+NFKOFvZRdhZ47hhpAaJKD2h8S4nJsXLsw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:56 2026 by rpki-client