This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer (raw, json) Hash identifier: XmmTjF58vAp7X67Tj4Uf42W1Cq0rYklHZ3NiVbEVf3w= Subject key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FC642DCA5FB43B79854853201DDF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206309 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c6:42:dc:a5:fb:43:b7:98:54:85:32:01:dd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36d8c1a73b1595109d26067b4291f71dc1db9957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:cb:dd:1b:54:99:53:db:0f:67:ef:73:71: 42:f8:ef:48:32:5f:79:70:ac:dd:23:9f:d4:ac:81: b6:41:fb:06:52:f7:d1:76:63:dc:f6:2d:cc:b1:aa: 96:97:23:d3:dc:95:e1:14:a2:16:0e:4c:ea:f7:e2: 7a:89:b0:37:22:bd:e2:2c:c5:0b:78:47:04:c5:df: ee:2d:68:0d:a1:4a:5e:df:68:86:a5:dc:90:ba:79: 31:34:a4:06:67:dd:1b:3a:dd:ab:6f:c2:68:23:94: 35:fe:34:ca:b0:ef:d7:f2:50:1d:73:72:96:dd:65: 58:47:94:3c:a8:36:e8:93:f6:8d:df:88:6e:7d:3d: d0:87:85:0b:f5:e3:63:34:dc:d4:2c:74:6f:87:6e: d4:a7:ac:32:71:29:20:6d:ba:07:d8:7c:55:20:2f: fb:c9:e8:04:e4:59:c6:ca:c1:78:ed:b0:74:a0:ea: 28:cf:5e:4d:f6:46:25:ca:d2:75:2e:9f:10:4e:47: e0:2b:52:80:58:4b:9e:14:a9:f1:73:cb:de:7c:cf: 2e:36:76:53:34:fe:27:9e:76:f7:ea:d3:a3:12:73: 1c:0e:68:2e:23:56:84:2b:c7:1e:5f:e0:3f:66:3e: da:c4:18:ea:d8:43:3c:1c:96:65:d4:5c:f9:a2:29: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206309 Signature Algorithm: sha256WithRSAEncryption 7d:95:22:c9:13:c8:88:cb:b6:b7:5c:10:56:f0:88:1a:1d:7a: 56:b8:fb:49:63:b4:90:f6:0d:f5:ba:3e:31:ba:b4:18:10:06: 04:f2:0d:8a:70:29:60:00:7a:14:35:11:29:38:af:01:f1:2a: 92:db:2a:6a:ba:f2:e5:86:5b:18:13:62:48:79:90:26:c2:22: c4:e3:9f:52:2f:18:95:d5:16:6f:e8:fe:6d:3f:d7:4b:a4:33: 44:70:e5:fc:48:d3:22:df:d5:fb:1d:4a:4e:6d:8c:ce:09:71: 96:2d:31:5e:07:dc:36:04:12:ac:1c:bd:1d:9d:01:60:cb:8e: 7b:11:a3:27:8f:59:dc:61:c8:ad:55:12:2f:42:05:98:e9:39: e2:08:af:d0:98:44:26:91:82:41:97:72:8a:9e:46:93:f7:c8: 5a:f0:d1:f0:10:94:8b:e9:2d:f5:ce:6e:a0:a6:da:5f:bb:e8: 65:88:9f:e6:fa:ae:b7:78:2b:aa:de:a1:06:ca:95:94:d9:7b: 7c:4e:bf:0d:43:d5:dd:42:40:e0:ad:33:1b:c5:d8:8c:18:f0: 21:e9:d6:c4:83:50:df:2d:f2:d9:97:18:db:69:00:9c:26:1c: e5:92:8f:c4:b2:42:14:58:27:e0:7e:f4:27:ac:31:60:54:89: 0e:c4:a8:8e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8f8ZC3KX7Q7eYVIUyAd33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmQ4YzFhNzNiMTU5NTEwOWQyNjA2N2I0MjkxZjcxZGMxZGI5OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrjL3RtUmVPbD2fvc3FC+O9IMl95 cKzdI5/UrIG2QfsGUvfRdmPc9i3MsaqWlyPT3JXhFKIWDkzq9+J6ibA3Ir3iLMUL eEcExd/uLWgNoUpe32iGpdyQunkxNKQGZ90bOt2rb8JoI5Q1/jTKsO/X8lAdc3KW 3WVYR5Q8qDbok/aN34hufT3Qh4UL9eNjNNzULHRvh27Up6wycSkgbboH2HxVIC/7 yegE5FnGysF47bB0oOooz15N9kYlytJ1Lp8QTkfgK1KAWEueFKnxc8vefM8uNnZT NP4nnnb36tOjEnMcDmguI1aEK8ceX+A/Zj7axBjq2EM8HJZl1Fz5oilCaQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDbYwac7FZUQnSYGe0KR9x3B25lXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2VlY2Nh NS1jMzM5LTQ5MTgtYTBhOC1mNjFlYzg1ZDBmNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvZWVjY2E1 LWMzMzktNDkxOC1hMGE4LWY2MWVjODVkMGY1Ny8xL050akJwenNWbFJDZEpnWjdR cEgzSGNIYm1WYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMl5TANBgkqhkiG9w0BAQsFAAOCAQEAfZUiyRPIiMu2 t1wQVvCIGh16Vrj7SWO0kPYN9bo+Mbq0GBAGBPINinApYAB6FDURKTivAfEqktsq arry5YZbGBNiSHmQJsIixOOfUi8YldUWb+j+bT/XS6QzRHDl/EjTIt/V+x1KTm2M zglxli0xXgfcNgQSrBy9HZ0BYMuOexGjJ49Z3GHIrVUSL0IFmOk54giv0JhEJpGC QZdyip5Gk/fIWvDR8BCUi+kt9c5uoKbaX7voZYif5vqut3grqt6hBsqVlNl7fE6/ DUPV3UJA4K0zG8XYjBjwIenWxINQ3y3y2ZcY22kAnCYc5ZKPxLJCFFgn4H70J6wx YFSJDsSojg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:56 2026 by rpki-client