This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer File: NYzSZ8VKP8IovKHe43LZbGA3PCc.cer (raw, json) Hash identifier: dxVTSSgXd8ZhZNph1BQkfBVjjFN6n4lBKq1SU/vvwpM= Subject key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECC10BF9A31AC969B633E8498B30C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a0c:3b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c1:0b:f9:a3:1a:c9:69:b6:33:e8:49:8b:30:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=358cd267c54a3fc228bca1dee372d96c60373c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:8a:f6:23:ad:13:c8:bb:2b:e0:b1:21:de: 25:6f:d1:e6:d0:a9:f5:2c:38:ff:3e:51:9d:78:53: 3a:8c:a9:d3:9a:51:db:4f:a5:b9:2f:df:55:29:bb: 8b:25:fe:0d:5d:a6:c1:42:8e:dc:0c:4b:b4:5b:95: 05:34:de:6c:3d:f6:30:82:ea:db:75:32:bd:11:c6: 31:94:1a:54:8f:72:5b:09:c9:15:98:3e:23:59:c2: 6b:34:86:fc:f6:5f:86:2f:29:aa:c8:c4:b0:9a:d0: b8:85:0c:11:f0:49:83:2b:d3:36:15:bd:65:bf:28: 34:92:c3:79:40:5e:66:66:ad:d9:cc:20:a9:4e:eb: 52:0a:6f:f3:78:7d:9b:16:82:0e:58:6f:7e:02:50: 05:9e:74:5b:df:52:4d:69:0a:85:b2:7c:ac:50:95: e3:93:c7:77:0c:ec:77:24:ea:7b:f2:64:0b:64:36: 73:0e:59:1b:02:c8:2b:c2:2b:77:61:e1:da:29:69: 54:3c:ae:e7:75:d6:a3:0b:de:ff:b0:60:d2:46:67: eb:68:eb:a0:92:fe:39:8f:7e:e3:03:29:f4:4a:e0: b2:c9:7e:7e:e8:ed:df:c5:50:55:f0:8d:7d:df:21: 52:ff:a0:86:d2:55:a0:26:a1:6a:10:55:41:75:81: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:3b40::/29 Signature Algorithm: sha256WithRSAEncryption 1f:24:4e:2c:cd:1a:70:38:0a:5d:93:4e:4c:0a:88:6e:c4:60: 37:97:55:bc:d4:52:d2:ef:26:f1:ed:3b:66:68:9c:e7:7b:e5: e3:d3:f4:88:10:dd:db:47:37:fc:94:07:c5:06:d9:f9:c0:92: 5d:dc:c5:70:6b:90:ff:19:4f:0f:59:3b:45:13:9e:36:0a:b9: e7:ff:a7:27:fa:18:ac:20:51:da:88:f1:64:50:47:20:55:b3: 64:0d:4d:d0:24:bf:5b:80:c5:3b:ca:b1:7e:99:35:6f:76:ed: d7:63:35:38:ec:69:86:69:c3:77:1e:84:d8:d4:d3:eb:23:f2: c2:c1:68:4a:07:c8:e8:77:56:81:60:f9:62:f3:c2:72:f3:ec: 9c:80:3f:8d:09:12:4d:7f:05:96:70:52:64:c4:47:b4:57:28: 43:9b:a8:65:62:7f:5f:22:3e:5b:24:cf:f2:15:94:d2:58:a4: 92:a7:ef:81:83:40:4a:04:2b:60:b0:3f:58:0c:25:5d:b2:e4: 4b:66:c0:66:27:16:15:67:19:d5:fd:f4:69:00:d3:6f:cd:9a: 5b:7a:ee:e3:9b:7f:6f:2b:74:64:1c:54:41:ed:2f:49:43:1c: ec:7d:2d:a6:4c:e3:6f:bb:85:de:9a:04:3a:7e:22:b3:a2:79: 24:f5:ec:14 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt87MEL+aMayWm2M+hJizDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNThjZDI2N2M1NGEzZmMyMjhiY2ExZGVlMzcyZDk2YzYwMzczYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0GK9iOtE8i7K+CxId4lb9Hm0Kn1 LDj/PlGdeFM6jKnTmlHbT6W5L99VKbuLJf4NXabBQo7cDEu0W5UFNN5sPfYwgurb dTK9EcYxlBpUj3JbCckVmD4jWcJrNIb89l+GLymqyMSwmtC4hQwR8EmDK9M2Fb1l vyg0ksN5QF5mZq3ZzCCpTutSCm/zeH2bFoIOWG9+AlAFnnRb31JNaQqFsnysUJXj k8d3DOx3JOp78mQLZDZzDlkbAsgrwit3YeHaKWlUPK7nddajC97/sGDSRmfraOug kv45j37jAyn0SuCyyX5+6O3fxVBV8I193yFS/6CG0lWgJqFqEFVBdYHuIwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFDWM0mfFSj/CKLyh3uNy2WxgNzwnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzg0YTFi NS0xYWFkLTRlZGYtYWI5Yi04YTJlOWE0NjgxOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvODRhMWI1 LTFhYWQtNGVkZi1hYjliLThhMmU5YTQ2ODE5Yi8xL05ZelNaOFZLUDhJb3ZLSGU0 M0xaYkdBM1BDYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgw7QDANBgkqhkiG9w0BAQsFAAOCAQEAHyRO LM0acDgKXZNOTAqIbsRgN5dVvNRS0u8m8e07Zmic53vl49P0iBDd20c3/JQHxQbZ +cCSXdzFcGuQ/xlPD1k7RROeNgq55/+nJ/oYrCBR2ojxZFBHIFWzZA1N0CS/W4DF O8qxfpk1b3bt12M1OOxphmnDdx6E2NTT6yPywsFoSgfI6HdWgWD5YvPCcvPsnIA/ jQkSTX8FlnBSZMRHtFcoQ5uoZWJ/XyI+WyTP8hWU0likkqfvgYNASgQrYLA/WAwl XbLkS2bAZicWFWcZ1f30aQDTb82aW3ru45t/byt0ZBxUQe0vSUMc7H0tpkzjb7uF 3poEOn4is6J5JPXsFA== -----END CERTIFICATE-----Generated at Sun Jan 18 14:17:21 2026 by rpki-client