This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer File: NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer (raw, json) Hash identifier: hJB54V8wl6xyUVHe0Bv5UJDPSYFtzVtr2UzTQomkVGw= Subject key identifier: 35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1F7F9E475CA39F119A2A5F59881A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.49.180.0/22 IP: 2a01:9960::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1f:7f:9e:47:5c:a3:9f:11:9a:2a:5f:59:88:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35f49b5d505000b909932c6b4f443e7ef81d780d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:9b:0a:ab:70:96:2a:12:dd:9d:a4:cd:11: 26:68:9e:41:50:11:5e:17:9f:f4:78:52:49:4f:a6: a3:5d:e1:4b:1f:95:f8:fa:f2:2f:9d:b6:33:9e:eb: 76:a5:67:54:b0:9d:0f:24:bf:b1:58:8c:03:c1:92: 15:0c:aa:f8:bd:b2:40:35:ff:6e:93:97:fe:d0:e5: 1d:0e:93:68:9b:76:dc:dd:f4:e9:b8:64:dc:75:b9: 85:3c:22:b9:9a:66:ff:1a:47:64:5d:35:99:60:6d: 33:ed:ee:0f:12:f3:e8:a6:fe:2d:9e:fa:04:f6:df: cf:3c:64:17:48:34:ab:a8:c2:53:33:84:5d:cb:cd: 45:d3:39:7a:4d:bf:5d:9a:b1:01:5a:97:9f:97:b6: a7:29:a1:36:d0:71:4c:4e:5d:ff:2f:e1:26:20:9e: e8:d5:7f:8c:65:c1:e0:ba:be:2d:1a:8d:10:79:ed: 51:1a:d7:e0:d6:21:2a:aa:bc:bb:de:df:47:1b:21: 03:36:87:2c:7f:41:2a:73:e2:59:bd:99:c5:9a:02: 9b:ea:50:54:d9:06:ed:f9:60:2a:2e:fe:43:25:52: ed:2f:55:fb:51:0e:9b:ca:05:38:01:16:64:56:13: 50:2f:f2:0e:87:29:96:26:d5:0f:f8:bc:b1:37:83: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.180.0/22 IPv6: 2a01:9960::/32 Signature Algorithm: sha256WithRSAEncryption 4f:12:36:bc:6c:85:b6:5b:f4:67:ff:fd:41:6d:39:68:90:68: 53:c2:3a:56:f0:ab:d2:77:e6:6f:35:49:5b:cb:72:7e:29:7e: 32:3c:58:36:a1:eb:7e:21:0f:8a:88:6d:e2:cb:b8:8b:63:39: 2c:28:cf:21:48:f3:bd:30:a7:93:00:55:84:db:08:ae:22:95: 53:1d:ef:f0:df:7d:c9:f5:61:f4:98:b1:d1:4a:68:d9:db:65: 9c:ae:ff:c7:33:28:9b:3f:eb:c7:92:43:78:ed:4d:dc:19:d4: 35:69:d7:94:cd:06:3c:6e:63:14:17:fa:8c:4f:fd:4f:2a:54: e1:d4:15:38:b8:3f:23:1c:fe:af:2e:b5:d3:8a:d2:62:17:fe: 1f:3b:a7:8e:af:c0:7d:a3:72:2f:e7:56:93:da:d6:3a:76:21: d4:ff:35:eb:42:10:b8:98:1d:db:b0:f8:03:26:eb:a6:2c:67: 37:74:21:9c:34:a1:88:f5:8d:11:d8:fe:7b:3c:01:bd:87:7e: c3:db:ad:63:f6:d6:77:0b:f1:02:b7:17:6a:47:c6:8d:02:1e: 9a:41:08:2e:f9:d1:09:63:60:4c:47:72:d4:42:0e:f7:ca:a1: d6:32:da:3b:7d:41:f6:ea:6f:fc:c9:0f:79:54:f7:aa:0b:7c: c0:5f:bb:95 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26x9/nkdco58RmipfWYgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWY0OWI1ZDUwNTAwMGI5MDk5MzJjNmI0ZjQ0M2U3ZWY4MWQ3ODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT2bCqtwlioS3Z2kzREmaJ5BUBFe F5/0eFJJT6ajXeFLH5X4+vIvnbYznut2pWdUsJ0PJL+xWIwDwZIVDKr4vbJANf9u k5f+0OUdDpNom3bc3fTpuGTcdbmFPCK5mmb/GkdkXTWZYG0z7e4PEvPopv4tnvoE 9t/PPGQXSDSrqMJTM4Rdy81F0zl6Tb9dmrEBWpefl7anKaE20HFMTl3/L+EmIJ7o 1X+MZcHgur4tGo0Qee1RGtfg1iEqqry73t9HGyEDNocsf0Eqc+JZvZnFmgKb6lBU 2Qbt+WAqLv5DJVLtL1X7UQ6bygU4ARZkVhNQL/IOhymWJtUP+LyxN4MYzQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDX0m11QUAC5CZMsa09EPn74HXgNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzL2IzOTIx Ny0yNWQzLTQwMWQtYTFkMS0wMmIzZGU4MzRiZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYjM5MjE3 LTI1ZDMtNDAxZC1hMWQxLTAyYjNkZTgzNGJmNC8xL05mU2JYVkJRQUxrSmt5eHJU MFEtZnZnZGVBMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTG0MA0EAgACMAcDBQAqAZlgMA0GCSqGSIb3 DQEBCwUAA4IBAQBPEja8bIW2W/Rn//1BbTlokGhTwjpW8KvSd+ZvNUlby3J+KX4y PFg2oet+IQ+KiG3iy7iLYzksKM8hSPO9MKeTAFWE2wiuIpVTHe/w333J9WH0mLHR SmjZ22Wcrv/HMyibP+vHkkN47U3cGdQ1adeUzQY8bmMUF/qMT/1PKlTh1BU4uD8j HP6vLrXTitJiF/4fO6eOr8B9o3Iv51aT2tY6diHU/zXrQhC4mB3bsPgDJuumLGc3 dCGcNKGI9Y0R2P57PAG9h37D261j9tZ3C/ECtxdqR8aNAh6aQQgu+dEJY2BMR3LU Qg73yqHWMto7fUH26m/8yQ95VPeqC3zAX7uV -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:30 2026 by rpki-client