This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer File: Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer (raw, json) Hash identifier: ++ytRVa6L9jT1SMC8e0kqmhssyUhM31xyLPayhjifCo= Subject key identifier: 36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E78D139CCB5521782C9BCA8B79F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205476 IP: 185.136.208.0/22 IP: 2a06:fec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e7:8d:13:9c:cb:55:21:78:2c:9b:ca:8b:79:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:1c:8d:c5:72:94:16:d9:ad:e8:fe:61:97: f7:bf:f1:5b:bd:4d:b6:db:36:79:9f:d6:28:07:1f: c4:1c:80:b2:f6:23:2a:90:2e:4b:01:d7:9a:fb:23: b6:73:bc:11:9d:8f:57:d0:0e:d2:d4:39:05:cb:43: ff:ef:ac:74:98:20:09:d3:84:4a:e2:69:3e:ad:0b: fe:4c:15:c5:62:ac:eb:a8:94:a8:c5:35:67:8b:ec: dc:6f:20:fe:f0:54:a4:e4:8f:2e:27:48:4d:32:0d: 92:eb:56:46:a2:39:46:6e:da:5d:b0:32:4d:5f:20: e2:d3:d4:0e:55:75:0f:b1:45:92:3e:08:a1:f6:ca: 1d:d5:51:04:f3:c0:21:25:a5:f7:17:eb:5c:95:c3: 1f:83:d9:33:e0:d0:26:92:07:bd:a4:ed:8a:f8:59: 1c:23:21:8d:f7:e9:f5:11:d3:47:19:87:f2:5a:47: 95:03:58:c3:21:0a:9d:62:a2:17:c0:58:ff:5f:7e: 8f:a5:95:4c:bf:cf:eb:e3:2f:cf:00:d9:fb:d7:dd: a0:f7:f2:5a:f3:52:9b:27:9a:72:70:65:cb:fe:ea: 08:f9:a6:b3:9c:66:ee:d7:36:62:39:87:55:50:1c: 82:a4:04:fc:1e:ea:9d:85:c5:b6:13:12:c1:51:f8: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.208.0/22 IPv6: 2a06:fec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205476 Signature Algorithm: sha256WithRSAEncryption 3b:97:9f:37:b2:a2:12:59:79:ec:93:c9:a7:e7:0b:59:87:a3: e2:cc:99:73:87:5f:ea:a2:68:f7:35:d2:2a:80:2f:3b:bb:73: ee:b8:85:74:65:09:7c:fd:3b:17:e5:e8:19:ed:a6:1f:80:a9: a6:f2:d8:8a:4f:46:34:81:24:84:15:a1:f2:92:6c:29:a6:3e: a1:4c:54:3b:b8:2d:97:9d:8a:fe:1a:7c:50:e7:82:df:b1:72: f9:df:e1:18:2b:90:c3:9c:b6:8a:38:fe:e1:04:19:85:42:43: 16:86:94:c0:ef:97:0a:b0:67:47:4f:3f:cf:c2:20:61:5a:bc: 92:4f:0a:50:42:55:d3:45:24:6d:83:45:6a:e6:41:81:dd:96: 9e:d7:c6:09:dc:f6:6d:43:c7:38:25:2d:51:ef:d2:56:bc:8a: 17:ac:06:74:3e:c8:84:cf:8e:2e:dc:6f:b1:2a:04:06:31:ad: 1f:2d:66:43:f9:d4:99:69:0d:54:5c:32:58:ef:1f:e5:1f:94: e9:f4:6b:63:57:39:76:18:a9:26:1f:c9:3d:41:d2:77:fe:1e: 04:17:79:97:a6:a4:6a:e3:3c:8b:cb:51:73:fa:75:7b:ff:03: 3c:37:bd:f1:7e:6a:00:72:4b:a0:92:dc:7d:5f:a4:51:f2:84: 34:f3:84:3f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EOeNE5zLVSF4LJvKi3nyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmE5YjgyYmQ1OWFjYTYzNDBmNmRmNTRmZThkMzM2MDBiN2U5MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC4cjcVylBbZrej+YZf3v/FbvU22 2zZ5n9YoBx/EHICy9iMqkC5LAdea+yO2c7wRnY9X0A7S1DkFy0P/76x0mCAJ04RK 4mk+rQv+TBXFYqzrqJSoxTVni+zcbyD+8FSk5I8uJ0hNMg2S61ZGojlGbtpdsDJN XyDi09QOVXUPsUWSPgih9sod1VEE88AhJaX3F+tclcMfg9kz4NAmkge9pO2K+Fkc IyGN9+n1EdNHGYfyWkeVA1jDIQqdYqIXwFj/X36PpZVMv8/r4y/PANn7192g9/Ja 81KbJ5pycGXL/uoI+aaznGbu1zZiOYdVUByCpAT8HuqdhcW2ExLBUfgwoQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDapuCvVmspjQPbfVP6NM2ALfpHkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzU2YjRj MS04MDE1LTQxODktYTNlNS01YWQzMDI2ZDhmMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNTZiNGMx LTgwMTUtNDE4OS1hM2U1LTVhZDMwMjZkOGYyOC8xL05xbTRLOVdheW1OQTl0OVVf bzB6WUF0LWtlUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYjQMA0EAgACMAcDBQMqBv7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMipDANBgkqhkiG9w0BAQsFAAOCAQEAO5efN7KiEll5 7JPJp+cLWYej4syZc4df6qJo9zXSKoAvO7tz7riFdGUJfP07F+XoGe2mH4CppvLY ik9GNIEkhBWh8pJsKaY+oUxUO7gtl52K/hp8UOeC37Fy+d/hGCuQw5y2ijj+4QQZ hUJDFoaUwO+XCrBnR08/z8IgYVq8kk8KUEJV00UkbYNFauZBgd2WntfGCdz2bUPH OCUtUe/SVryKF6wGdD7IhM+OLtxvsSoEBjGtHy1mQ/nUmWkNVFwyWO8f5R+U6fRr Y1c5dhipJh/JPUHSd/4eBBd5l6akauM8i8tRc/p1e/8DPDe98X5qAHJLoJLcfV+k UfKENPOEPw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:16 2026 by rpki-client