This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer File: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer (raw, json) Hash identifier: 8xmYjZOucVVWrgrMlKVpsry6ySKgG8y0YNE3QLz9KL0= Subject key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED640FC25D94E32E6A85CD6BC9A170 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211388 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:64:0f:c2:5d:94:e3:2e:6a:85:cd:6b:c9:a1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:65:33:d4:8c:5e:e5:f9:07:46:43:25:a1:c0: 22:cb:da:44:e3:a1:63:92:a0:be:9e:02:c4:36:27: 16:5e:a9:72:8e:f6:31:29:a5:db:65:c7:c8:f0:bc: 0f:81:f8:8c:f9:b6:20:5f:e6:2c:56:e4:87:17:2d: c2:3b:90:f8:b9:90:7a:7e:ff:18:1f:40:00:15:eb: a6:9c:6d:2f:f5:85:47:5c:1a:5d:87:3d:fb:38:66: 1d:96:b2:00:0c:60:1d:c1:4c:1e:fd:70:6a:67:42: 1e:be:c2:da:05:a5:d2:81:2d:fe:b2:63:6e:a6:b0: be:e3:78:44:a5:21:dd:25:a4:1c:11:7d:74:c0:e6: 0d:86:b4:eb:05:05:ed:f2:16:72:35:1a:56:a7:c9: 14:eb:28:3d:d4:f7:6a:da:0f:3a:90:50:ba:30:e8: a2:f8:0c:32:1a:b8:5b:61:7d:b4:44:92:36:80:c9: 6d:98:7c:81:a4:e1:65:6b:93:92:b1:55:f7:53:9e: e7:50:cc:85:15:45:56:ef:05:b1:b4:b6:8a:e3:b5: 14:d7:a6:19:b9:cf:35:92:07:41:a8:c9:d3:81:e7: 27:25:0e:1f:50:b9:39:fe:eb:ce:13:a5:b5:9e:63: 56:8a:ce:72:71:67:f9:f7:4f:6b:a3:0a:60:46:fa: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211388 Signature Algorithm: sha256WithRSAEncryption 00:ce:ff:e7:e0:1f:85:5f:fe:8f:4d:8a:99:ae:97:87:9c:7e: 4a:3a:eb:eb:ed:5f:cf:93:2f:1b:4d:db:ba:56:ff:97:e8:2b: 3d:82:0b:ee:b3:24:04:d1:08:4b:ee:34:60:db:bf:86:11:ef: a8:2c:42:eb:38:8f:d1:87:21:5c:79:77:bc:ba:7a:24:97:53: 6c:90:97:2e:e5:5c:7f:04:8b:0b:b4:47:a6:c6:2e:4e:f0:17: 6f:11:ba:48:b4:14:1e:64:1a:f8:95:69:41:c3:f2:f2:19:89: 19:14:76:df:9e:ba:b1:03:66:7d:cb:9d:60:3d:36:2f:26:39: d1:9f:49:69:de:81:da:90:8d:78:f6:c4:8f:79:62:10:97:a0: 74:02:9b:c9:98:25:df:bd:03:aa:64:dd:26:c0:fb:8e:2d:c3: cc:49:86:c5:53:96:07:12:03:67:80:ae:53:a2:28:55:5b:e8: 70:41:95:58:ac:7f:55:72:c1:ec:8e:8a:93:d8:fe:9e:b7:f1: 0b:31:52:44:66:9e:71:7f:f1:71:91:79:86:20:32:c5:03:a2: 81:4c:e0:43:2f:b9:91:da:fe:a5:9c:25:9e:8c:86:8f:ca:f2: a8:1c:32:e4:6e:aa:b8:1f:02:a6:f6:f3:22:a4:39:d8:d8:44: 5f:a5:5b:bc -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87WQPwl2U4y5qhc1ryaFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Q3Mzk5Zjg3NDcwYzNlYTRlNGRmZDY5N2E5OGFlMmJkMDI2ZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22Uz1Ixe5fkHRkMlocAiy9pE46Fj kqC+ngLENicWXqlyjvYxKaXbZcfI8LwPgfiM+bYgX+YsVuSHFy3CO5D4uZB6fv8Y H0AAFeumnG0v9YVHXBpdhz37OGYdlrIADGAdwUwe/XBqZ0IevsLaBaXSgS3+smNu prC+43hEpSHdJaQcEX10wOYNhrTrBQXt8hZyNRpWp8kU6yg91Pdq2g86kFC6MOii +AwyGrhbYX20RJI2gMltmHyBpOFla5OSsVX3U57nUMyFFUVW7wWxtLaK47UU16YZ uc81kgdBqMnTgecnJQ4fULk5/uvOE6W1nmNWis5ycWf5909rowpgRvog/wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPzXOZ+HRww+pOTf1pepiuK9Am+cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzZlODgx Ni01NTJiLTQ5OTYtOWZjNC1kZTkwZTllM2NjMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvNmU4ODE2 LTU1MmItNDk5Ni05ZmM0LWRlOTBlOWUzY2MzMi8xL19OYzVuNGRIREQ2azVOX1ds Nm1LNHIwQ2I1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM5vDANBgkqhkiG9w0BAQsFAAOCAQEAAM7/5+AfhV/+ j02Kma6Xh5x+Sjrr6+1fz5MvG03bulb/l+grPYIL7rMkBNEIS+40YNu/hhHvqCxC 6ziP0YchXHl3vLp6JJdTbJCXLuVcfwSLC7RHpsYuTvAXbxG6SLQUHmQa+JVpQcPy 8hmJGRR23566sQNmfcudYD02LyY50Z9Jad6B2pCNePbEj3liEJegdAKbyZgl370D qmTdJsD7ji3DzEmGxVOWBxIDZ4CuU6IoVVvocEGVWKx/VXLB7I6Kk9j+nrfxCzFS RGaecX/xcZF5hiAyxQOigUzgQy+5kdr+pZwlnoyGj8ryqBwy5G6quB8CpvbzIqQ5 2NhEX6VbvA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:13 2026 by rpki-client