This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer File: NMSVb4VnESWILFdM0uLSA6q97QU.cer (raw, json) Hash identifier: 6wBCAab+55InLUYIhI6MmDmotoMUHEJwFCEUcMRSLAA= Subject key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33ADE0B1AE7FA03330CA7D519BC4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29042 IP: 195.68.198.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3a:de:0b:1a:e7:fa:03:33:0c:a7:d5:19:bc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34c4956f85671125882c574cd2e2d203aabded05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:3a:ed:2e:99:d0:0f:4a:a5:24:80:ef:8d: e5:7a:c7:18:36:1f:6e:ae:d4:62:87:6d:be:ae:77: 9c:e4:e6:fe:c6:9f:05:b6:1e:82:12:7b:10:f1:3d: 73:04:ae:65:74:92:2d:69:4e:48:23:07:be:2b:ce: 61:d8:9c:bd:5c:b7:ff:62:78:e6:42:ff:8b:05:cd: 9f:82:c6:f9:83:a3:4d:54:95:6a:06:84:c6:59:0b: 79:04:41:80:6c:09:97:89:b4:af:04:05:ad:ed:cd: 66:b1:8b:2d:e4:5a:5f:d6:59:48:69:f9:90:9f:ab: b6:29:f3:31:be:78:74:c4:02:c1:c2:0f:c6:63:c3: 04:5d:fa:21:94:30:96:ce:44:eb:ef:24:a5:c5:59: 16:57:94:ff:94:7c:cb:98:51:c7:b0:01:44:3f:9b: 1f:b5:fb:6e:bc:77:3b:b9:2d:48:b1:ac:02:2e:45: 33:1e:91:0c:47:21:df:7b:b5:21:f1:c0:e4:82:53: 96:b2:18:c4:b2:f4:dd:b0:b1:90:81:76:b5:e9:b1: 81:cc:fb:08:06:cc:1c:24:cc:a1:2e:ce:60:dd:46: db:2c:c8:52:68:44:f5:77:8b:34:71:14:9f:bb:a2: f8:d4:5b:10:cb:df:8a:e3:85:af:e0:9f:75:86:7a: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.68.198.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29042 Signature Algorithm: sha256WithRSAEncryption 81:2b:84:ac:30:85:ee:a1:e2:c5:34:c8:01:b5:e7:0e:8d:57: a2:c8:80:f8:26:b9:3b:c1:7f:54:aa:18:f7:48:1a:8e:c6:35: 53:be:49:00:cc:2e:70:2c:60:73:cb:57:30:b9:df:f3:e2:8e: 93:81:6a:1d:f1:f7:ff:73:c3:72:10:48:bf:69:c5:25:02:00: 81:c4:cd:2f:1b:97:3e:9a:86:21:8e:df:1e:d5:91:33:3b:95: b7:4d:cd:b7:0c:8c:9f:b5:47:ae:cc:2f:e6:28:7b:de:68:9c: 38:02:dc:e6:51:36:bc:1c:a5:c4:5a:0c:54:0d:21:ca:5b:1b: 99:2c:5a:d5:af:bf:85:9d:6c:31:60:32:d1:d4:b4:c7:2d:9d: 32:92:56:98:54:37:56:c2:00:08:2e:af:f5:e9:8a:47:c7:df: 10:11:10:d8:8e:6b:f1:53:30:32:a3:d7:a6:f1:de:87:cd:8b: ea:03:fe:f3:60:5e:52:e6:57:91:2d:b2:46:10:d5:6b:2e:49: 4b:2d:a9:3c:89:ee:a1:fc:87:f4:67:da:3c:ca:b4:50:02:97: 6f:6f:0e:5b:7b:72:33:d9:60:f5:57:f0:18:e1:56:64:19:82: db:8b:d8:e5:d3:ea:fc:69:e3:6a:aa:d7:c0:ba:9f:82:40:c6: b8:ac:7b:b6 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4ozreCxrn+gMzDKfVGbxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGM0OTU2Zjg1NjcxMTI1ODgyYzU3NGNkMmUyZDIwM2FhYmRlZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4U67S6Z0A9KpSSA743lescYNh9u rtRih22+rnec5Ob+xp8Fth6CEnsQ8T1zBK5ldJItaU5IIwe+K85h2Jy9XLf/Ynjm Qv+LBc2fgsb5g6NNVJVqBoTGWQt5BEGAbAmXibSvBAWt7c1msYst5Fpf1llIafmQ n6u2KfMxvnh0xALBwg/GY8MEXfohlDCWzkTr7ySlxVkWV5T/lHzLmFHHsAFEP5sf tftuvHc7uS1IsawCLkUzHpEMRyHfe7Uh8cDkglOWshjEsvTdsLGQgXa16bGBzPsI BswcJMyhLs5g3UbbLMhSaET1d4s0cRSfu6L41FsQy9+K44Wv4J91hnpaHQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFDTElW+FZxEliCxXTNLi0gOqve0FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2YzZTY3 YS1jZmQ3LTQ3NDUtODJiNy0yZDkwYzdmZDBkNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvZjNlNjdh LWNmZDctNDc0NS04MmI3LTJkOTBjN2ZkMGQ2MC8xL05NU1ZiNFZuRVNXSUxGZE0w dUxTQTZxOTdRVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw0TGMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnFyMA0GCSqGSIb3DQEBCwUAA4IBAQCBK4SsMIXuoeLFNMgBtecOjVeiyID4Jrk7 wX9Uqhj3SBqOxjVTvkkAzC5wLGBzy1cwud/z4o6TgWod8ff/c8NyEEi/acUlAgCB xM0vG5c+moYhjt8e1ZEzO5W3Tc23DIyftUeuzC/mKHveaJw4AtzmUTa8HKXEWgxU DSHKWxuZLFrVr7+FnWwxYDLR1LTHLZ0yklaYVDdWwgAILq/16YpHx98QERDYjmvx UzAyo9em8d6HzYvqA/7zYF5S5leRLbJGENVrLklLLak8ie6h/If0Z9o8yrRQApdv bw5be3Iz2WD1V/AY4VZkGYLbi9jl0+r8aeNqqtfAup+CQMa4rHu2 -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:51 2026 by rpki-client