This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer File: Nv7S1etbPFJmq6phfJYHA8VdB4U.cer (raw, json) Hash identifier: P1K5RKitNvNALP4fXOaujndL2d8QDTpDRDoJuSR/E8Q= Subject key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC935532097B17D9B8BC8BB3B352075 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.57.4.0/22 IP: 2a09:cc40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:35:53:20:97:b1:7d:9b:8b:c8:bb:3b:35:20:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:0b:36:91:6f:f2:15:95:c8:8c:7e:04:c4: 05:4d:f5:fd:1a:7d:2f:fe:72:e1:4f:0b:48:88:fd: 8f:a7:d7:89:0f:d3:e3:30:30:22:bf:a5:4b:fa:b1: 44:4a:ab:15:e5:75:a6:5b:32:d8:41:56:94:4a:f2: b7:d3:e6:a9:b1:1c:3b:e6:82:ac:f6:f5:a8:e3:1b: 0a:8a:ce:2e:56:ec:1f:97:c2:dc:8e:d2:e4:22:52: 04:11:8e:3e:de:48:48:46:d1:4e:75:bc:79:24:41: e9:65:bc:e3:fa:19:ab:f0:2f:e2:c7:ff:04:00:bf: 00:6d:59:1d:2f:9c:c9:06:31:f6:56:40:d7:f9:e6: 37:a1:69:56:f8:fb:09:9f:d3:63:c1:71:ab:c2:3c: c0:57:33:e3:6d:ad:f9:77:ae:2d:33:41:99:64:cb: 2a:59:9c:0d:c1:5a:88:ea:57:fe:4f:59:b0:59:e3: f2:89:95:c6:2b:9f:2d:d8:30:27:89:7b:88:2c:e8: d7:10:57:d6:c7:b6:94:4c:94:a6:62:5f:2c:13:78: fb:40:41:5f:11:58:3f:4b:c1:41:70:6d:18:34:57: 62:a7:b4:69:46:93:d2:9c:31:9f:3c:0b:03:e0:6d: 7f:6c:27:52:c4:99:1b:22:7e:95:3a:6a:92:19:e5: 0f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.4.0/22 IPv6: 2a09:cc40::/29 Signature Algorithm: sha256WithRSAEncryption 28:c4:8a:59:34:7c:77:12:b5:a4:79:0a:65:ab:2f:74:53:7d: 28:7c:21:f1:22:64:49:5b:a0:63:d1:0f:d7:38:d0:2f:6a:99: ae:8b:68:e2:ff:a9:2f:e6:a7:09:72:1c:d2:b5:30:56:1b:a2: 2c:5f:76:a7:1e:5a:7e:5c:d6:e6:fa:ba:da:d6:77:d3:bd:9f: 62:4c:ec:fd:32:c0:e4:0f:ec:b8:80:d0:e7:fb:05:c0:ef:e9: 03:91:c3:ea:60:b6:7e:a0:f7:60:fd:0e:55:4c:99:13:b1:b0: 28:96:fc:54:6b:e2:4f:a9:92:c7:44:7c:2b:33:80:6e:be:06: 60:99:d3:52:50:dc:1a:44:2b:67:9e:09:c2:cc:6e:9e:1f:fc: 17:3f:07:62:f9:29:10:f9:60:16:1a:5c:af:c7:76:f3:e0:d3: 0c:d4:0d:f4:b7:98:c5:92:3b:f8:4c:b4:79:20:d7:e7:e8:13: ec:ca:8f:69:6f:d2:b8:8e:18:83:6f:ca:bb:4b:43:f6:01:1a: ee:88:ed:33:58:9f:ff:dc:8e:23:5a:e3:1a:8a:41:9a:b2:05: bc:37:cc:48:60:a4:02:c5:9a:40:ac:f6:21:8a:a9:d4:a9:42: cb:9d:24:b4:c0:99:1a:62:e3:d3:cc:44:ca:1f:d7:40:2a:55: e7:ab:d4:29 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yTVTIJexfZuLyLs7NSB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmZlZDJkNWViNWIzYzUyNjZhYmFhNjE3Yzk2MDcwM2M1NWQwNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIALNpFv8hWVyIx+BMQFTfX9Gn0v /nLhTwtIiP2Pp9eJD9PjMDAiv6VL+rFESqsV5XWmWzLYQVaUSvK30+apsRw75oKs 9vWo4xsKis4uVuwfl8LcjtLkIlIEEY4+3khIRtFOdbx5JEHpZbzj+hmr8C/ix/8E AL8AbVkdL5zJBjH2VkDX+eY3oWlW+PsJn9NjwXGrwjzAVzPjba35d64tM0GZZMsq WZwNwVqI6lf+T1mwWePyiZXGK58t2DAniXuILOjXEFfWx7aUTJSmYl8sE3j7QEFf EVg/S8FBcG0YNFdip7RpRpPSnDGfPAsD4G1/bCdSxJkbIn6VOmqSGeUPPQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDb+0tXrWzxSZquqYXyWBwPFXQeFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzUzMjRi ZC03OTI2LTQ1MTMtYmQxZi02OGVmMzIzOGE3MmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTMyNGJk LTc5MjYtNDUxMy1iZDFmLTY4ZWYzMjM4YTcyZS8xL052N1MxZXRiUEZKbXE2cGhm SllIQThWZEI0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCAjkEMA0EAgACMAcDBQMqCcxAMA0GCSqGSIb3 DQEBCwUAA4IBAQAoxIpZNHx3ErWkeQplqy90U30ofCHxImRJW6Bj0Q/XONAvapmu i2ji/6kv5qcJchzStTBWG6IsX3anHlp+XNbm+rra1nfTvZ9iTOz9MsDkD+y4gNDn +wXA7+kDkcPqYLZ+oPdg/Q5VTJkTsbAolvxUa+JPqZLHRHwrM4BuvgZgmdNSUNwa RCtnngnCzG6eH/wXPwdi+SkQ+WAWGlyvx3bz4NMM1A30t5jFkjv4TLR5INfn6BPs yo9pb9K4jhiDb8q7S0P2ARruiO0zWJ//3I4jWuMaikGasgW8N8xIYKQCxZpArPYh iqnUqULLnSS0wJkaYuPTzETKH9dAKlXnq9Qp -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:07 2026 by rpki-client