This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer File: NyNz56hEBs6rX3qpFSNMk9i4jpE.cer (raw, json) Hash identifier: UwTwDahtGoDF2MH2RT6raZDVrPc0q7DTNkMrmLxWtz8= Subject key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFADD005E9E025B6787CED359B0399A8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 15:12:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51214 IP: 193.25.120.0/23 IP: 2001:67c:2ee0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:dd:00:5e:9e:02:5b:67:87:ce:d3:59:b0:39:9a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 15:12:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=372373e7a84406ceab5f7aa915234c93d8b88e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:eb:19:6c:2d:c7:33:5a:22:5b:12:ef:90: 41:65:05:ac:dd:e6:f3:dd:d3:20:64:fa:4c:73:4e: 8c:bc:f0:3b:f7:5a:e7:da:dd:b7:7d:d6:be:bd:97: d2:a3:42:18:7a:ce:14:cf:46:d3:ac:82:52:1f:c3: be:e6:5c:57:82:71:37:1d:93:1e:42:12:a8:1c:ee: cf:37:aa:09:52:66:cb:6e:f3:80:15:90:25:e2:a6: 5b:03:ed:ff:74:0d:d0:26:ec:94:60:1c:a4:93:1b: e0:41:5e:f5:d3:e9:a7:aa:b0:06:2b:15:f5:e2:e4: 16:96:0b:bd:d4:a1:20:2b:d1:24:b6:6d:98:b4:a0: 95:d3:5f:f6:f4:3e:87:df:5a:7f:9d:8c:58:45:51: ef:8a:86:e5:8a:61:b1:90:8d:95:21:d7:1b:29:c2: 4f:d9:62:11:43:6c:28:fa:ff:93:10:bd:c1:8f:11: 7a:67:7e:6c:6c:a0:33:73:64:c3:e0:b3:9b:e0:7c: 15:e5:2a:41:b8:fe:6c:3f:c1:1d:e0:65:12:08:25: 14:aa:fb:54:85:51:30:02:1f:13:5c:f1:79:2a:b3: 6b:6a:b0:ce:f4:82:82:33:ac:23:2f:fc:4d:9f:7b: 2a:37:55:c3:dd:9e:1e:e5:4a:56:6a:7f:57:07:78: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.120.0/23 IPv6: 2001:67c:2ee0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51214 Signature Algorithm: sha256WithRSAEncryption 93:f7:80:2d:b9:ab:56:78:5e:d0:7d:a4:16:a8:f0:24:b1:ec: df:4a:5a:b2:91:78:8f:12:00:79:47:8b:ee:b6:91:3d:22:7f: 0e:3a:8b:ee:1a:3a:54:3b:d7:fb:15:2e:51:5d:f3:32:e9:b9: 9e:da:2f:bc:10:9b:21:b5:ad:67:a8:cc:ff:b8:ae:7e:64:00: 75:8a:d7:c0:ef:b6:88:90:7f:eb:9a:ab:18:45:23:66:c5:68: 29:0f:c1:c6:37:9f:ab:3d:80:08:6c:76:eb:40:b2:af:08:93: 35:1f:4e:cf:38:40:23:17:ab:fb:fc:e6:d3:46:b2:b2:29:b9: c2:7a:a4:bf:47:d5:29:e8:b2:4e:53:3b:97:8c:7d:c9:6a:14: 76:e8:60:94:d1:ce:db:08:99:03:33:9b:f9:36:10:8d:b5:e1: 11:ec:b9:b8:13:20:f8:88:64:f0:56:f6:cc:4e:cc:9d:6c:8e: 7d:64:80:cf:97:cd:d5:07:c5:61:dd:6f:64:c2:c2:3b:e3:07: b8:14:a0:23:d4:8d:1b:98:1e:bf:25:79:6b:af:60:1e:45:1c: 39:34:f6:ce:d2:3f:d5:81:df:0e:69:33:9f:37:d3:99:64:98: dc:5f:74:03:04:95:0b:8d:ad:44:e1:e6:f5:85:c8:e6:c7:05: b1:aa:05:5d -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZv63QBengJbZ4fO01mwOZqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTUxMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzIzNzNlN2E4NDQwNmNlYWI1ZjdhYTkxNTIzNGM5M2Q4Yjg4ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P3rGWwtxzNaIlsS75BBZQWs3ebz 3dMgZPpMc06MvPA791rn2t23fda+vZfSo0IYes4Uz0bTrIJSH8O+5lxXgnE3HZMe QhKoHO7PN6oJUmbLbvOAFZAl4qZbA+3/dA3QJuyUYBykkxvgQV710+mnqrAGKxX1 4uQWlgu91KEgK9Ektm2YtKCV01/29D6H31p/nYxYRVHvioblimGxkI2VIdcbKcJP 2WIRQ2wo+v+TEL3BjxF6Z35sbKAzc2TD4LOb4HwV5SpBuP5sP8Ed4GUSCCUUqvtU hVEwAh8TXPF5KrNrarDO9IKCM6wjL/xNn3sqN1XD3Z4e5UpWan9XB3iV5QIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFDcjc+eoRAbOq196qRUjTJPYuI6RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2IzYTRj Ni0wY2UxLTQ5NTQtYjkzNi03YTFlYzVkNDlkMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvYjNhNGM2 LTBjZTEtNDk1NC1iOTM2LTdhMWVjNWQ0OWQzMy8xL055Tno1NmhFQnM2clgzcXBG U05NazlpNGpwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwRl4MA8EAgACMAkDBwAgAQZ8LuAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMgOMA0GCSqGSIb3DQEBCwUAA4IBAQCT94AtuatW eF7QfaQWqPAksezfSlqykXiPEgB5R4vutpE9In8OOovuGjpUO9f7FS5RXfMy6bme 2i+8EJshta1nqMz/uK5+ZAB1itfA77aIkH/rmqsYRSNmxWgpD8HGN5+rPYAIbHbr QLKvCJM1H07POEAjF6v7/ObTRrKyKbnCeqS/R9Up6LJOUzuXjH3JahR26GCU0c7b CJkDM5v5NhCNteER7Lm4EyD4iGTwVvbMTsydbI59ZIDPl83VB8Vh3W9kwsI74we4 FKAj1I0bmB6/JXlrr2AeRRw5NPbO0j/Vgd8OaTOfN9OZZJjcX3QDBJULja1E4eb1 hcjmxwWxqgVd -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:52 2026 by rpki-client