This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer (raw, json) Hash identifier: ViEumV7XLohgQe/5vs+Gb23ZJg4gAg+hrBU+E0ZFTug= Subject key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F713F6179A275F17F6DF17B200F49 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210096 IP: 85.235.76.0/22 IP: 2a09:1dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:71:3f:61:79:a2:75:f1:7f:6d:f1:7b:20:0f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:3e:20:5d:bb:3b:9b:ea:2d:78:6b:d3:d2: 90:76:24:9d:d0:b2:71:bf:53:fe:3e:ae:2b:9d:48: ba:6c:46:79:9d:34:97:d3:af:92:67:d8:1e:a1:a4: 3a:73:cd:d2:26:1b:1f:58:15:86:cc:d3:d3:21:06: 90:c6:60:b0:fa:01:85:cf:ee:dd:bc:6c:aa:3b:4f: d9:c4:c4:16:0a:ab:51:ad:0a:75:04:22:ad:af:12: 93:b2:0a:7d:e3:64:90:66:b4:8c:01:96:2b:fc:fd: f0:be:38:2c:84:c2:08:c9:33:ed:d0:5d:3c:b1:b2: be:45:a1:ff:77:0e:76:c9:28:11:f3:93:77:73:48: 34:b7:90:bb:c1:47:de:35:26:4b:f5:59:c6:24:a7: 0d:c9:f1:66:a3:56:f7:d8:75:b8:bd:06:3b:4b:de: f9:96:9a:37:ce:50:0d:36:c3:57:8c:4f:8f:b2:6c: 6a:72:1a:1a:4e:0c:75:43:36:4c:75:40:db:f1:09: 0d:bd:e5:9b:2d:84:51:c2:b5:d7:d0:e4:d1:74:49: 56:6f:23:c6:0b:96:4f:ae:f2:de:a0:54:b5:b4:3c: 0e:48:bb:8d:f1:d5:76:6b:ce:62:43:17:f4:18:fb: fc:03:df:e8:fc:2d:9b:4b:13:ab:86:0a:b3:ce:5d: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.76.0/22 IPv6: 2a09:1dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210096 Signature Algorithm: sha256WithRSAEncryption 14:95:af:d0:b8:60:05:3b:86:bc:84:b7:30:42:ec:7d:32:70: 19:ad:bd:8b:c8:5a:9a:b8:81:e6:20:43:32:b5:81:b3:a0:77: a6:5d:60:fc:d4:8e:24:2d:81:f4:a3:ff:2b:1a:0a:7d:a5:a3: d3:db:50:fe:a6:9b:72:7b:40:86:74:c4:bf:2c:0c:fa:63:b4: 3c:39:97:27:99:17:7f:8b:59:08:de:be:ec:40:51:10:04:fb: 4b:e9:c8:9e:ea:9c:aa:04:77:e3:1f:40:19:96:37:91:81:32: 1a:77:d3:a8:d8:53:ba:24:29:54:b3:7d:c6:f8:94:4f:23:b4: 91:83:1e:30:1c:31:72:b5:c4:90:af:de:01:5f:ff:5b:91:cf: 62:b8:c4:e9:18:a3:30:61:12:44:33:ff:de:af:ff:06:db:b9: 47:eb:42:bf:cc:1c:6f:c1:f6:24:a4:f5:5f:f4:f5:fc:8b:ac: 7d:41:1d:e1:46:83:0a:13:d5:b3:26:bb:59:96:c6:d5:56:95: de:11:6a:d4:74:16:36:8b:ab:f2:7d:b9:02:a5:a2:f9:6e:07: f3:fb:c5:24:4c:c1:5c:f8:fb:2a:53:41:f4:43:fb:18:83:11: e6:2d:68:51:f5:1d:e4:c4:f2:ee:b4:ea:93:34:d6:f3:4f:b0: f0:53:ce:e4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f3E/YXmidfF/bfF7IA9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmE0NjY4ZmY4MzgxNGFmOTBhNzhiNGZjOGQyNjIzMjUwNThjYmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0k+IF27O5vqLXhr09KQdiSd0LJx v1P+Pq4rnUi6bEZ5nTSX06+SZ9geoaQ6c83SJhsfWBWGzNPTIQaQxmCw+gGFz+7d vGyqO0/ZxMQWCqtRrQp1BCKtrxKTsgp942SQZrSMAZYr/P3wvjgshMIIyTPt0F08 sbK+RaH/dw52ySgR85N3c0g0t5C7wUfeNSZL9VnGJKcNyfFmo1b32HW4vQY7S975 lpo3zlANNsNXjE+PsmxqchoaTgx1QzZMdUDb8QkNveWbLYRRwrXX0OTRdElWbyPG C5ZPrvLeoFS1tDwOSLuN8dV2a85iQxf0GPv8A9/o/C2bSxOrhgqzzl17ewIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDakZo/4OBSvkKeLT8jSYjJQWMvGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzAzMWZj Yi1iNzRlLTRlNzUtYTdiOS05MGU2NTQxMjI1MmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvMDMxZmNi LWI3NGUtNGU3NS1hN2I5LTkwZTY1NDEyMjUyYS8xL05xUm1qX2c0RkstUXA0dFB5 TkppTWxCWXk4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCVetMMA0EAgACMAcDBQMqCR3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0sDANBgkqhkiG9w0BAQsFAAOCAQEAFJWv0LhgBTuG vIS3MELsfTJwGa29i8hamriB5iBDMrWBs6B3pl1g/NSOJC2B9KP/KxoKfaWj09tQ /qabcntAhnTEvywM+mO0PDmXJ5kXf4tZCN6+7EBREAT7S+nInuqcqgR34x9AGZY3 kYEyGnfTqNhTuiQpVLN9xviUTyO0kYMeMBwxcrXEkK/eAV//W5HPYrjE6RijMGES RDP/3q//Btu5R+tCv8wcb8H2JKT1X/T1/IusfUEd4UaDChPVsya7WZbG1VaV3hFq 1HQWNour8n25AqWi+W4H8/vFJEzBXPj7KlNB9EP7GIMR5i1oUfUd5MTy7rTqkzTW 80+w8FPO5A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:01 2026 by rpki-client