This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer File: NkgvLv77kno8r_6h2R8kF_PS59c.cer (raw, json) Hash identifier: Ze06gQkTZ9msWVyQY/nD2JBBqsShYNVcjqieFIg02u0= Subject key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA44EBCB6797E70EE0AD25FF92D829B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51871 IP: 185.239.20.0/22 IP: 193.34.28.0/22 IP: 2001:67c:21b0::/48 IP: 2a13:9140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:4e:bc:b6:79:7e:70:ee:0a:d2:5f:f9:2d:82:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:14:c7:e0:10:af:5a:9b:cc:5e:45:c4:fb: 5d:7a:9b:bb:a7:00:72:cb:a4:e1:02:49:55:8b:2b: 36:3a:54:28:88:a8:37:06:f0:19:5f:80:79:37:ee: 77:10:81:6a:f9:2a:7a:63:95:b1:25:88:9a:d5:1d: b4:0a:75:33:b1:4e:9b:ed:2f:cf:c8:e4:88:b0:fc: c3:17:fb:b4:c9:b7:ff:5a:44:0f:fc:23:6f:dc:47: 73:f1:26:1a:77:8a:3f:e5:bf:56:46:3d:58:b8:b8: b5:02:dd:62:1f:3d:ae:ea:f0:54:97:c7:0c:68:39: ba:27:c6:e5:27:70:09:ca:35:40:73:18:a1:14:0b: f5:d1:b0:b7:7c:2a:5b:60:0b:25:4c:8f:0d:dd:27: e4:22:ee:be:7a:a8:cb:52:01:60:9d:2b:30:6c:c0: 98:e4:e8:56:64:67:a7:83:bb:25:52:56:ef:aa:aa: 5b:5f:e2:a8:bf:78:ab:81:b1:4f:4e:52:dd:5c:b5: a0:bb:3e:6a:32:77:eb:01:08:c1:13:3d:1a:8f:14: 45:47:3f:da:a5:65:e9:0e:24:7f:54:3f:fb:89:c5: a2:92:f8:86:79:ff:69:93:ca:5b:46:04:45:fb:7a: 4e:5b:2a:c4:f1:d6:6d:5b:dc:65:bf:4b:8d:2c:4e: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.20.0/22 193.34.28.0/22 IPv6: 2001:67c:21b0::/48 2a13:9140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51871 Signature Algorithm: sha256WithRSAEncryption 82:5b:de:7a:42:b8:d5:46:b4:2d:b7:9c:84:61:05:91:30:62: 5b:a7:2b:61:3f:a6:b8:41:d5:d6:5c:b2:60:6d:20:d4:d3:36: 85:1a:a8:1c:78:ef:c7:70:6e:37:0b:f2:df:50:4c:08:76:23: e0:87:2f:62:4b:2d:fd:80:35:2c:bb:f2:de:95:5a:6d:71:29: d8:f7:8b:82:a4:f4:74:0e:44:64:a2:99:7c:4b:36:93:0a:b6: 04:97:fd:52:c2:fc:1c:4d:8a:a2:15:b4:5a:02:2a:3e:85:b8: bd:8e:8e:70:88:03:75:7e:81:a0:e8:61:29:cc:6c:86:58:0e: ee:cc:c3:d1:f2:0a:76:dd:0a:4a:82:2b:ae:d2:10:63:50:f7: 36:cc:46:e9:a7:14:b3:9c:68:94:bb:ba:0d:e4:f8:d2:cf:6d: 6a:d2:07:a3:62:46:dd:ca:9b:0d:e7:39:2c:a0:6b:9d:b4:24: 57:c6:2e:88:41:8e:7a:82:30:ca:32:87:c6:11:50:37:20:88: 39:06:59:a1:5d:29:8c:30:7c:f1:ae:c7:24:18:71:a3:16:00: 69:20:27:d4:73:d8:b9:4a:e8:9e:22:c2:99:ed:74:12:58:bf: 68:35:f5:54:e6:7e:a5:28:d8:ec:d9:85:f5:ff:71:51:25:60: 62:19:4e:ef -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt7pE68tnl+cO4K0l/5LYKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjQ4MmYyZWZlZmI5MjdhM2NhZmZlYTFkOTFmMjQxN2YzZDJlN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjkUx+AQr1qbzF5FxPtdepu7pwBy y6ThAklViys2OlQoiKg3BvAZX4B5N+53EIFq+Sp6Y5WxJYia1R20CnUzsU6b7S/P yOSIsPzDF/u0ybf/WkQP/CNv3Edz8SYad4o/5b9WRj1YuLi1At1iHz2u6vBUl8cM aDm6J8blJ3AJyjVAcxihFAv10bC3fCpbYAslTI8N3SfkIu6+eqjLUgFgnSswbMCY 5OhWZGeng7slUlbvqqpbX+Kov3irgbFPTlLdXLWguz5qMnfrAQjBEz0ajxRFRz/a pWXpDiR/VD/7icWikviGef9pk8pbRgRF+3pOWyrE8dZtW9xlv0uNLE7OBQIDAQAB o4ICvjCCArowHQYDVR0OBBYEFDZILy7++5J6PK/+odkfJBfz0ufXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2U0YjAw Yy1hOTI5LTQ4ZDQtYjdkOC03Njg4NzMxYmVkOWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZTRiMDBj LWE5MjktNDhkNC1iN2Q4LTc2ODg3MzFiZWQ5ZC8xL05rZ3ZMdjc3a25vOHJfNmgy UjhrRl9QUzU5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQCue8UAwQCwSIcMBYEAgACMBADBwAgAQZ8IbAD BQMqE5FAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDKnzANBgkqhkiG9w0BAQsF AAOCAQEAglveekK41Ua0LbechGEFkTBiW6crYT+muEHV1lyyYG0g1NM2hRqoHHjv x3BuNwvy31BMCHYj4IcvYkst/YA1LLvy3pVabXEp2PeLgqT0dA5EZKKZfEs2kwq2 BJf9UsL8HE2KohW0WgIqPoW4vY6OcIgDdX6BoOhhKcxshlgO7szD0fIKdt0KSoIr rtIQY1D3NsxG6acUs5xolLu6DeT40s9tatIHo2JG3cqbDec5LKBrnbQkV8YuiEGO eoIwyjKHxhFQNyCIOQZZoV0pjDB88a7HJBhxoxYAaSAn1HPYuUroniLCme10Eli/ aDX1VOZ+pSjY7NmF9f9xUSVgYhlO7w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:36 2026 by rpki-client