This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer (raw, json) Hash identifier: jEa7ajlRbuAxWWCCAtIta6gmHN34ZIO6tDRPVnmTxYU= Subject key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35DA7EEA8438D5749EBFA5C2C68B6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.211.208.0/22 IP: 2a0b:6a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:da:7e:ea:84:38:d5:74:9e:bf:a5:c2:c6:8b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:6f:25:29:74:d1:c7:4c:f8:70:d7:d6:e4: b7:9a:f3:d6:f4:65:45:a9:f7:35:89:ac:90:cf:67: b7:f2:ac:5e:01:29:88:75:e9:a8:7e:93:8e:9a:64: 0e:4f:81:65:8e:f1:2e:fd:0d:21:80:f9:d3:50:be: 04:95:e9:05:a2:f8:ce:4c:f5:cf:50:25:67:12:ff: 9f:58:ec:8d:b2:ef:18:ab:74:cf:08:7a:b0:47:b8: 6e:77:db:a9:e1:30:29:a1:1b:38:06:0b:62:51:22: ad:2e:16:4d:7f:2e:8a:81:f4:49:80:47:ea:06:cf: 26:40:ff:6f:9f:5a:f5:92:18:3b:9b:45:12:a8:67: 95:00:83:08:67:cb:a8:5b:f9:de:0e:63:b5:53:41: be:54:f1:db:30:f8:bb:c4:00:1b:42:cc:49:f8:1b: e8:9b:56:f5:0e:e8:6b:f8:b1:f8:7d:17:8f:a2:c2: f7:0b:8b:0a:04:f5:70:23:32:e3:c9:4d:82:1e:c4: b6:73:2c:06:2b:99:6c:bb:e0:ab:c4:49:ec:e3:7b: b7:39:a6:4b:c4:43:b7:ed:37:74:d2:7e:a7:02:76: 08:09:f1:05:90:db:0a:35:c5:35:4b:3c:df:50:5d: e4:3f:d9:75:5d:f0:6a:31:b1:af:ae:5c:00:c8:46: 75:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.208.0/22 IPv6: 2a0b:6a40::/29 Signature Algorithm: sha256WithRSAEncryption 71:60:af:f3:df:98:66:4c:1d:b9:ad:6a:c7:79:26:a3:ee:32: e3:3d:e8:25:b2:05:86:91:ba:f6:ac:71:87:01:1c:c0:15:57: e5:26:c6:ec:a6:d4:c4:85:06:09:b4:e5:85:5a:07:88:87:b5: df:14:47:49:6d:4b:6f:a7:7d:45:b3:93:11:d2:e3:44:86:94: 0a:41:2e:bf:72:45:69:18:a4:47:fe:ef:78:90:15:5c:91:92: 98:ca:f0:b8:11:60:9f:f4:54:0d:ea:46:c0:db:2f:42:75:8c: f1:69:ee:c8:47:d4:dc:1f:b2:b9:8d:b1:20:55:00:a3:cc:3a: 1f:ac:4b:80:4e:1b:80:81:86:c6:3c:52:bf:62:5c:32:a6:cc: 6a:a3:f6:6a:d7:d3:82:a1:c1:f1:36:8c:17:6f:5a:af:51:92: c4:8a:43:67:26:6d:da:b6:70:bc:a9:c0:67:82:61:f9:83:89: 6b:96:40:13:2b:0e:7e:99:65:bd:f6:d0:52:c9:54:ab:63:5a: 73:59:eb:0b:78:5f:d6:5c:3b:70:97:d8:71:ab:3a:67:c4:b5: 2a:23:7b:19:81:03:91:1b:d9:03:06:77:bd:6f:25:30:4e:1d: 31:6b:51:30:5c:ac:0f:f1:66:0c:8c:78:2a:b1:3a:2b:06:c3: f0:ef:27:d5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Ndp+6oQ41XSev6XCxotsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmJkNGEzODJkYWUyYmU1Y2I5OGIzNWU1YTA0OGQwM2I0Y2NiZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGVvJSl00cdM+HDX1uS3mvPW9GVF qfc1iayQz2e38qxeASmIdemofpOOmmQOT4FljvEu/Q0hgPnTUL4ElekFovjOTPXP UCVnEv+fWOyNsu8Yq3TPCHqwR7hud9up4TApoRs4BgtiUSKtLhZNfy6KgfRJgEfq Bs8mQP9vn1r1khg7m0USqGeVAIMIZ8uoW/neDmO1U0G+VPHbMPi7xAAbQsxJ+Bvo m1b1Duhr+LH4fRePosL3C4sKBPVwIzLjyU2CHsS2cywGK5lsu+CrxEns43u3OaZL xEO37Td00n6nAnYICfEFkNsKNcU1SzzfUF3kP9l1XfBqMbGvrlwAyEZ1/wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDa9Sjgtrivly5izXloEjQO0zL4rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2U3NGY1 Zi03NWM1LTRhNzUtOThiOS05ZmVjYmQyNWQ0MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZTc0ZjVm LTc1YzUtNGE3NS05OGI5LTlmZWNiZDI1ZDQzNC8xL05yMUtPQzJ1Sy1YTG1MTmVX Z1NOQTdUTXZpcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudPQMA0EAgACMAcDBQMqC2pAMA0GCSqGSIb3 DQEBCwUAA4IBAQBxYK/z35hmTB25rWrHeSaj7jLjPeglsgWGkbr2rHGHARzAFVfl JsbsptTEhQYJtOWFWgeIh7XfFEdJbUtvp31Fs5MR0uNEhpQKQS6/ckVpGKRH/u94 kBVckZKYyvC4EWCf9FQN6kbA2y9CdYzxae7IR9TcH7K5jbEgVQCjzDofrEuAThuA gYbGPFK/Ylwypsxqo/Zq19OCocHxNowXb1qvUZLEikNnJm3atnC8qcBngmH5g4lr lkATKw5+mWW99tBSyVSrY1pzWesLeF/WXDtwl9hxqzpnxLUqI3sZgQORG9kDBne9 byUwTh0xa1EwXKwP8WYMjHgqsTorBsPw7yfV -----END CERTIFICATE-----Generated at Tue Jan 27 07:45:59 2026 by rpki-client