This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer File: NrQT5TbZk1PwsFDudG_90k7bWTA.cer (raw, json) Hash identifier: 9QyqMX8SjJtaP5bAl+NMUb+do25jpVHmgDJWrD/x3N4= Subject key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4E1F6270E07DB5AC2146B8E9C6C1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47901 IP: 94.125.224.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e1:f6:27:0e:07:db:5a:c2:14:6b:8e:9c:6c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36b413e536d99353f0b050ee746ffdd24edb5930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:91:c0:91:7a:05:e5:3e:c5:91:32:43:f7: c3:8a:e5:e3:be:ac:83:36:d3:fc:33:cf:f1:68:f6: 43:e9:a7:ec:93:13:23:c3:44:3b:1e:7a:f5:0a:67: 2d:95:c6:4d:d6:5a:09:44:d2:21:09:c4:53:a4:0c: 81:9f:51:5b:bb:72:13:a9:e4:84:90:c9:31:2a:9b: d9:bc:90:d8:e1:8a:1d:88:af:e9:92:57:dc:ec:07: db:b1:2f:27:b5:fa:53:3f:f4:b2:e0:6e:35:06:36: 4b:f0:e6:1a:ba:d4:19:45:07:dc:33:70:6b:f2:9d: 16:07:d7:ef:17:f0:87:70:cc:30:2f:ca:b5:57:77: f1:ba:17:6e:f5:ed:4a:e0:90:f3:a7:a2:ff:e1:e9: 34:73:8e:ed:5e:dc:fd:ff:ec:5a:d9:d2:f6:50:99: 1a:55:2f:40:b3:1d:aa:54:16:85:d9:e6:24:84:a5: 9e:17:23:90:26:0f:06:c2:18:f0:94:df:5c:a4:26: d2:0f:49:27:22:f6:04:15:f1:74:13:da:5c:52:a2: 55:02:cc:02:fd:da:8b:59:86:da:be:25:48:3e:77: 2b:d1:a1:41:ee:6c:1a:3f:7e:04:31:33:97:9e:e0: f2:51:15:f9:66:d8:5b:b3:e0:6e:30:35:14:58:a3: 23:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.125.224.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47901 Signature Algorithm: sha256WithRSAEncryption 8e:40:f3:fd:a3:54:43:94:75:be:e1:fc:60:30:68:8d:8d:23: ff:ba:b9:c9:68:72:3a:87:d6:b3:cc:77:be:1b:df:a0:91:a7: 82:15:df:cd:e3:01:1a:b4:22:6e:e6:b9:f4:2d:29:05:d5:d3: 40:62:42:74:5e:3a:af:73:6f:c7:34:b5:be:fe:58:48:50:fe: be:f8:72:56:c3:bd:34:c2:26:88:95:a2:d8:62:5b:73:49:c1: 86:cd:f3:36:f0:a6:ad:ed:97:43:c8:36:cd:6a:eb:b7:1f:a2: e6:80:bf:99:ce:7f:8d:5a:b0:08:fc:cd:82:98:72:2c:96:ea: 03:93:d4:42:eb:59:ab:ba:55:56:f6:95:26:8f:af:de:79:b1: 94:d1:39:88:a0:11:3f:3a:a8:4f:82:ec:7d:93:0c:90:50:46: 00:33:0c:93:2a:7b:94:1e:05:e8:86:22:84:6a:96:1f:e7:e1: ed:fe:72:21:22:46:7e:eb:ae:f9:de:5f:51:82:ed:06:a6:ab: 6d:b2:ba:c8:7a:22:75:a9:0b:ce:c4:4b:f6:46:58:86:52:9f: 57:b3:1f:44:32:fd:ae:04:44:73:e0:bd:ad:7d:1d:fb:82:7c: 4a:01:91:8b:41:49:fe:81:62:c0:de:03:e1:30:da:d9:bc:42: c6:c9:d7:b1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pOH2Jw4H21rCFGuOnGwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmI0MTNlNTM2ZDk5MzUzZjBiMDUwZWU3NDZmZmRkMjRlZGI1OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40GRwJF6BeU+xZEyQ/fDiuXjvqyD NtP8M8/xaPZD6afskxMjw0Q7Hnr1CmctlcZN1loJRNIhCcRTpAyBn1Fbu3ITqeSE kMkxKpvZvJDY4YodiK/pklfc7AfbsS8ntfpTP/Sy4G41BjZL8OYautQZRQfcM3Br 8p0WB9fvF/CHcMwwL8q1V3fxuhdu9e1K4JDzp6L/4ek0c47tXtz9/+xa2dL2UJka VS9Asx2qVBaF2eYkhKWeFyOQJg8GwhjwlN9cpCbSD0knIvYEFfF0E9pcUqJVAswC /dqLWYbaviVIPncr0aFB7mwaP34EMTOXnuDyURX5Zthbs+BuMDUUWKMjbwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDa0E+U22ZNT8LBQ7nRv/dJO21kwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2U2NjI5 Ni0wNDc5LTRjNTItOWNlYS1hMWY1NzNkMDY5ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvZTY2Mjk2 LTA0NzktNGM1Mi05Y2VhLWExZjU3M2QwNjlkYS8xL05yUVQ1VGJaazFQd3NGRHVk R185MGs3YldUQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXn3gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC7HTANBgkqhkiG9w0BAQsFAAOCAQEAjkDz/aNUQ5R1vuH8YDBojY0j/7q5yWhy OofWs8x3vhvfoJGnghXfzeMBGrQibua59C0pBdXTQGJCdF46r3NvxzS1vv5YSFD+ vvhyVsO9NMImiJWi2GJbc0nBhs3zNvCmre2XQ8g2zWrrtx+i5oC/mc5/jVqwCPzN gphyLJbqA5PUQutZq7pVVvaVJo+v3nmxlNE5iKARPzqoT4LsfZMMkFBGADMMkyp7 lB4F6IYihGqWH+fh7f5yISJGfuuu+d5fUYLtBqarbbK6yHoidakLzsRL9kZYhlKf V7MfRDL9rgREc+C9rX0d+4J8SgGRi0FJ/oFiwN4D4TDa2bxCxsnXsQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:33 2026 by rpki-client