This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer File: NxnxmwrdjQwod8i6f-CliTCbsUQ.cer (raw, json) Hash identifier: Lia8mBPI3aWcr3QXe6cCoMqvYsIYj7HJYNz3zyFxME4= Subject key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ACC0AE86DA89BF86F580E8A665125 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57455 IP: 193.222.52.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cc:0a:e8:6d:a8:9b:f8:6f:58:0e:8a:66:51:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:50:b2:95:13:0a:88:44:4c:fc:1e:a9:a3: ab:22:ad:c2:17:73:0f:18:c9:ab:6c:c9:ab:9b:9e: 7d:ce:d8:b1:41:a8:d7:0f:d9:ed:91:67:5f:38:09: 2b:fe:71:85:ab:91:1c:6d:ed:48:73:de:36:98:10: 2a:c7:1a:31:5d:cc:0b:97:f6:68:1b:71:ff:24:99: 1d:80:6c:c4:9c:7d:59:93:30:5d:77:58:8b:fc:56: 4a:d9:db:0a:6e:7a:0a:ae:82:42:4d:45:da:11:03: c9:c0:c4:ee:fd:79:87:52:e3:a7:aa:76:42:cb:00: b5:a8:92:05:9c:60:e9:d8:ae:79:19:2e:65:d5:ad: 5a:ea:4a:64:f6:6a:2b:30:42:6d:9d:30:d8:71:f9: 4e:2a:71:7d:21:74:f2:87:a4:1c:23:87:e3:e9:a3: 06:94:bf:2c:63:84:bb:53:db:d5:aa:68:c9:57:6b: 0c:47:b1:90:38:34:80:cb:6f:db:d9:31:08:dd:7c: ee:6f:e8:02:1a:46:77:32:c5:8c:28:3c:58:be:f1: 1e:a9:ac:44:5f:69:b2:ba:d1:ed:74:1d:6b:68:ba: e4:f0:3b:e7:80:25:70:45:19:a6:33:d6:7a:a8:35: de:b5:81:31:05:a5:09:38:90:ca:32:42:86:2b:cb: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57455 Signature Algorithm: sha256WithRSAEncryption 44:f1:59:96:7b:64:d4:07:8f:9b:75:15:87:9f:80:2b:69:3d: 71:2e:fc:16:15:a4:5d:1b:b2:00:75:0c:d8:54:a2:31:f4:4d: 7e:ac:75:65:2a:18:ed:93:fb:4e:6d:cd:af:c8:0f:d5:8c:ad: ab:d9:21:76:dc:89:c2:ad:ad:de:8d:62:20:7e:30:52:b1:88: cb:65:d8:fd:47:ea:c0:22:26:b9:bc:c7:c2:31:de:65:80:ce: 2b:60:d5:fd:3c:be:12:45:d6:9b:9d:93:aa:5b:ec:a7:ac:87: e9:a9:b2:35:2b:d1:ef:0f:0c:6c:c2:58:de:26:04:88:fd:f1: 85:36:bd:db:0e:44:c2:d9:da:32:0e:ad:ba:c3:9d:05:2e:c8: 40:dc:ef:31:e6:fe:28:75:f9:40:e5:c2:24:88:1e:0e:df:fe: a3:a0:2a:23:c1:e5:1e:39:78:44:87:2f:e8:d7:86:7a:80:05: 9c:cf:b7:6f:66:46:17:85:fa:d2:3e:d0:65:f7:ae:67:4f:cf: 34:fe:d5:5d:3c:3a:09:0f:37:36:40:3f:d0:c6:f0:3f:fc:1d: 86:c3:6a:a0:8c:1f:cf:f3:93:4c:87:35:aa:75:91:64:fc:2f: f3:e6:13:3e:d1:f2:0f:6d:19:d4:cc:5c:31:0e:53:ea:58:63: ca:73:4e:6a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WswK6G2om/hvWA6KZlElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzE5ZjE5YjBhZGQ4ZDBjMjg3N2M4YmE3ZmUwYTU4OTMwOWJiMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvtQspUTCohETPweqaOrIq3CF3MP GMmrbMmrm559ztixQajXD9ntkWdfOAkr/nGFq5Ecbe1Ic942mBAqxxoxXcwLl/Zo G3H/JJkdgGzEnH1ZkzBdd1iL/FZK2dsKbnoKroJCTUXaEQPJwMTu/XmHUuOnqnZC ywC1qJIFnGDp2K55GS5l1a1a6kpk9morMEJtnTDYcflOKnF9IXTyh6QcI4fj6aMG lL8sY4S7U9vVqmjJV2sMR7GQODSAy2/b2TEI3Xzub+gCGkZ3MsWMKDxYvvEeqaxE X2myutHtdB1raLrk8DvngCVwRRmmM9Z6qDXetYExBaUJOJDKMkKGK8sAtwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2Y1NGYz YS02YjhhLTQ4YzMtYjJkZS03N2E5YzUyOTc3N2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZjU0ZjNh LTZiOGEtNDhjMy1iMmRlLTc3YTljNTI5Nzc3Yy8xL054bnhtd3JkalF3b2Q4aTZm LUNsaVRDYnNVUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwd40MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDgbzANBgkqhkiG9w0BAQsFAAOCAQEARPFZlntk1AePm3UVh5+AK2k9cS78FhWk XRuyAHUM2FSiMfRNfqx1ZSoY7ZP7Tm3Nr8gP1Yytq9khdtyJwq2t3o1iIH4wUrGI y2XY/UfqwCImubzHwjHeZYDOK2DV/Ty+EkXWm52Tqlvsp6yH6amyNSvR7w8MbMJY 3iYEiP3xhTa92w5EwtnaMg6tusOdBS7IQNzvMeb+KHX5QOXCJIgeDt/+o6AqI8Hl Hjl4RIcv6NeGeoAFnM+3b2ZGF4X60j7QZfeuZ0/PNP7VXTw6CQ83NkA/0MbwP/wd hsNqoIwfz/OTTIc1qnWRZPwv8+YTPtHyD20Z1MxcMQ5T6lhjynNOag== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:42 2026 by rpki-client