This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer (raw, json) Hash identifier: PTR1b13lv95JaxFQEGjsUl5/06HxhJrWzaPOLcNo+jg= Subject key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C806C4D86AC66B2026E52A5681304AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.247.150.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6c:4d:86:ac:66:b2:02:6e:52:a5:68:13:04:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:44:34:54:3b:5f:37:94:bf:50:4b:79:1f: ae:c6:f3:5c:75:00:28:fb:e1:1d:ff:a9:06:ef:a8: e3:c8:7c:36:24:20:c8:ca:6f:6b:e3:8f:f5:86:da: 82:cf:da:7f:a9:4b:8f:32:00:e3:fa:35:b0:ee:ba: 35:a0:ea:f1:ed:1d:18:b0:c3:48:55:ab:ce:20:b0: 5f:a4:52:27:ab:0d:5c:b3:56:7b:1e:85:ea:d1:78: 71:7f:eb:b5:67:a4:06:80:d9:2e:2b:da:dd:bc:77: 89:df:54:08:09:28:2f:1c:0b:69:ff:87:28:d0:4d: cb:21:63:53:b8:f0:30:12:20:db:d3:7e:f6:da:ee: bf:36:46:04:57:05:81:b1:2e:1f:50:c2:aa:61:3d: eb:e9:28:54:d0:77:db:2f:93:78:18:66:04:d5:c6: 7c:b2:3b:40:aa:a4:6a:72:d1:57:fa:c9:c1:a2:86: 67:3d:5c:58:d9:01:59:da:63:9d:61:51:85:51:c9: 83:9f:e4:7a:9d:28:02:87:09:0f:3c:41:42:8b:cb: 71:1f:4d:08:d9:a7:b1:be:00:bf:a8:3c:0e:bb:55: 97:0c:4d:78:13:d6:93:d0:21:35:61:4a:84:3e:af: 1d:af:a8:17:c3:f5:64:9b:e2:5c:45:27:57:f3:ce: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.150.0/24 Signature Algorithm: sha256WithRSAEncryption 20:d0:c7:89:e9:27:b7:0f:64:74:31:7a:bc:a0:b1:dd:2a:56: 4d:63:8f:95:46:c4:17:b4:c0:1d:1f:c8:22:a4:bb:63:d6:98: d7:34:18:fd:73:00:4e:b6:cf:e5:85:bf:ea:95:cd:9d:37:10: a0:43:15:16:2e:f0:9e:92:98:9c:2f:0b:ea:8f:e4:61:f5:ac: e5:f4:17:3a:c6:8b:d2:27:6d:51:eb:63:1d:c7:1b:36:44:54: 22:fe:3e:a2:ed:cb:ef:70:fd:dc:6d:40:a0:e5:5b:6a:2a:92: 0d:2e:59:ab:7c:eb:f7:60:78:d0:ec:b7:ad:f5:1e:34:00:13: c7:58:50:8c:96:3d:da:56:95:3e:d0:68:db:20:8f:c6:64:1c: 74:6e:02:fe:64:fb:63:5c:9f:31:75:66:c2:e0:8d:69:87:1b: 0e:52:ad:ea:35:92:c9:f2:da:2d:8a:f2:d5:dd:fd:4c:8b:94: a9:7f:48:72:32:ee:5d:ad:f8:41:6a:10:24:ed:55:7a:5a:24: 2a:36:24:df:f0:6b:7d:7b:3d:f7:3b:cb:f5:76:d1:cc:94:9f: 17:5e:95:79:5c:f4:6e:b4:fd:2a:29:92:62:0a:ca:96:56:41: a3:b7:4f:52:dc:a5:c5:5b:5d:1e:0a:f9:f0:24:6e:39:c2:e2: fb:0f:f5:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gGxNhqxmsgJuUqVoEwStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzFmYjg1ZDRmODA4Y2IxNjA3YTJiZTRmNGE3OThjYTNlYWQzODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD1ENFQ7XzeUv1BLeR+uxvNcdQAo ++Ed/6kG76jjyHw2JCDIym9r44/1htqCz9p/qUuPMgDj+jWw7ro1oOrx7R0YsMNI VavOILBfpFInqw1cs1Z7HoXq0Xhxf+u1Z6QGgNkuK9rdvHeJ31QICSgvHAtp/4co 0E3LIWNTuPAwEiDb03722u6/NkYEVwWBsS4fUMKqYT3r6ShU0HfbL5N4GGYE1cZ8 sjtAqqRqctFX+snBooZnPVxY2QFZ2mOdYVGFUcmDn+R6nSgChwkPPEFCi8txH00I 2aexvgC/qDwOu1WXDE14E9aT0CE1YUqEPq8dr6gXw/Vkm+JcRSdX886vTQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDcfuF1PgIyxYHor5PSnmMo+rTgQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2M1YTg0 OC0yNjBkLTRhZDAtYWVmMy1kN2IyYzkzNDQyZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYzVhODQ4 LTI2MGQtNGFkMC1hZWYzLWQ3YjJjOTM0NDJkMy8xL054LTRYVS1BakxGZ2Vpdms5 S2VZeWo2dE9CQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwfeWMA0GCSqGSIb3DQEBCwUAA4IBAQAg0MeJ 6Se3D2R0MXq8oLHdKlZNY4+VRsQXtMAdH8gipLtj1pjXNBj9cwBOts/lhb/qlc2d NxCgQxUWLvCekpicLwvqj+Rh9azl9Bc6xovSJ21R62Mdxxs2RFQi/j6i7cvvcP3c bUCg5VtqKpINLlmrfOv3YHjQ7Let9R40ABPHWFCMlj3aVpU+0GjbII/GZBx0bgL+ ZPtjXJ8xdWbC4I1phxsOUq3qNZLJ8totivLV3f1Mi5Spf0hyMu5drfhBahAk7VV6 WiQqNiTf8Gt9ez33O8v1dtHMlJ8XXpV5XPRutP0qKZJiCsqWVkGjt09S3KXFW10e CvnwJG45wuL7D/We -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:59 2026 by rpki-client