This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer File: NjSXIAQAsPGq56h_yjbwd-DtYs4.cer (raw, json) Hash identifier: ozHMNKViA1R8rvEpx3ryLWmFsQ8kSAgSXdTwhxsaKtM= Subject key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1D6F91A1EFD7CB14A17D61F34E49 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210755 IP: 193.200.32.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1d:6f:91:a1:ef:d7:cb:14:a1:7d:61:f3:4e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=363497200400b0f1aae7a87fca36f077e0ed62ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:ce:8f:76:9d:78:f7:33:45:1d:8f:f2:36: cc:bf:6e:65:67:95:0c:fe:63:72:75:07:af:e6:e4: 30:cd:2c:c6:7a:79:b9:be:9b:4d:40:d4:2c:2f:74: 27:09:2f:41:8d:de:1b:ce:fd:4c:78:22:9a:6e:83: c4:2f:2b:9b:09:54:ed:8b:dd:b2:52:d5:4d:04:b8: 02:10:66:74:0c:e5:0b:f4:70:9d:ee:2a:7f:75:32: 3d:5b:5e:ee:e0:c3:f7:c5:3d:8c:63:78:1c:67:97: ac:fe:03:f4:33:44:8d:cd:38:5d:dd:c0:80:20:83: 59:7c:72:af:2f:e0:0a:f0:b0:db:e5:93:2f:64:e6: 41:4a:29:46:6a:2b:90:17:96:cc:9d:14:ae:af:0d: 31:2c:b0:bb:ff:eb:f0:b5:d8:a9:40:40:ea:23:5b: ce:0f:ea:9f:75:44:ff:1c:fe:34:c6:ed:12:79:34: fe:69:b3:4f:61:ef:d9:6a:45:d4:d1:08:29:6c:47: a8:2c:16:96:96:34:03:4c:7a:74:21:82:c1:f0:f7: 2d:a9:af:9f:0c:5b:46:68:3d:c6:a6:2a:86:b9:ee: 76:b4:a1:3d:7d:6e:a1:75:16:60:06:e3:2e:d9:01: c8:bf:c1:d5:23:99:4a:1e:da:5c:28:d0:52:dd:6f: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.32.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210755 Signature Algorithm: sha256WithRSAEncryption 53:b8:c3:2f:77:b1:c3:06:be:e8:0d:8c:3d:5c:53:4b:ac:47: 16:e9:16:6c:10:23:fc:88:9f:40:cb:77:b1:f6:88:f7:a9:85: b8:60:df:50:60:3f:f4:83:df:2d:ad:d7:28:dd:f1:a2:89:f4: 00:c3:32:16:4d:78:57:c1:9f:a4:b2:c4:8a:15:dd:b3:e0:60: 94:9a:22:63:e7:32:7b:ee:d3:d6:27:0f:b3:95:e8:1c:51:60: ed:19:f8:8b:69:5c:cf:73:4d:61:bc:d8:33:4b:5c:54:c9:5f: 15:fe:62:23:79:45:73:3c:9d:3d:ff:40:2b:67:54:1b:20:47: c2:42:d0:5b:6a:3d:43:cd:52:8e:70:88:ce:28:cd:be:8b:4d: 96:a9:8d:b8:28:4c:92:f2:ba:a7:8f:00:99:01:7e:bc:a4:f5: 53:3d:3e:10:de:16:b1:01:74:f8:00:75:3d:44:df:48:b6:cb: cf:b2:9b:08:65:af:41:fe:9a:9e:ef:1f:08:a0:cd:d4:cc:08: 05:2f:51:72:61:4a:cc:56:f7:74:84:71:1b:4f:95:69:a3:41: ff:3f:bf:1d:70:0b:db:39:bd:1d:09:34:2f:a6:7e:3d:53:72: 10:87:fa:63:37:2f:ab:0e:9f:e7:19:f0:2f:5b:76:3e:59:61: ae:7e:39:94 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6Wx1vkaHv18sUoX1h805JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjM0OTcyMDA0MDBiMGYxYWFlN2E4N2ZjYTM2ZjA3N2UwZWQ2MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSrOj3adePczRR2P8jbMv25lZ5UM /mNydQev5uQwzSzGenm5vptNQNQsL3QnCS9Bjd4bzv1MeCKaboPELyubCVTti92y UtVNBLgCEGZ0DOUL9HCd7ip/dTI9W17u4MP3xT2MY3gcZ5es/gP0M0SNzThd3cCA IINZfHKvL+AK8LDb5ZMvZOZBSilGaiuQF5bMnRSurw0xLLC7/+vwtdipQEDqI1vO D+qfdUT/HP40xu0SeTT+abNPYe/ZakXU0QgpbEeoLBaWljQDTHp0IYLB8Pctqa+f DFtGaD3GpiqGue52tKE9fW6hdRZgBuMu2QHIv8HVI5lKHtpcKNBS3W9ThQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDY0lyAEALDxqueof8o28Hfg7WLOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzBkZTBi NC1jOTlhLTQzNjAtYTQ0YS0xOWExOTk5ZDlkN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMGRlMGI0 LWM5OWEtNDM2MC1hNDRhLTE5YTE5OTlkOWQ3ZS8xL05qU1hJQVFBc1BHcTU2aF95 amJ3ZC1EdFlzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcggMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM3QzANBgkqhkiG9w0BAQsFAAOCAQEAU7jDL3exwwa+6A2MPVxTS6xHFukWbBAj /IifQMt3sfaI96mFuGDfUGA/9IPfLa3XKN3xoon0AMMyFk14V8GfpLLEihXds+Bg lJoiY+cye+7T1icPs5XoHFFg7Rn4i2lcz3NNYbzYM0tcVMlfFf5iI3lFczydPf9A K2dUGyBHwkLQW2o9Q81SjnCIzijNvotNlqmNuChMkvK6p48AmQF+vKT1Uz0+EN4W sQF0+AB1PUTfSLbLz7KbCGWvQf6anu8fCKDN1MwIBS9RcmFKzFb3dIRxG0+VaaNB /z+/HXAL2zm9HQk0L6Z+PVNyEIf6Yzcvqw6f5xnwL1t2Pllhrn45lA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:26 2026 by rpki-client