This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer (raw, json) Hash identifier: HstL3BfUblv8pGSPBsFXrisaD4EnN0J4FttuHGIJSZY= Subject key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A280076BD49B80A3E15A482C859E4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 155.185.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:80:07:6b:d4:9b:80:a3:e1:5a:48:2c:85:9e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:a6:e0:e3:5a:75:90:15:da:80:94:ec:a0: 5c:1c:d0:bf:b7:f4:f1:24:b9:58:5a:3b:61:89:c7: a9:86:62:b9:a8:9c:51:79:12:63:ef:d4:07:9d:c0: 41:3d:68:a3:6e:c3:13:f1:c5:45:72:06:b8:a7:4b: 4d:f9:4e:70:3a:59:c4:ad:5b:a0:ac:cd:ab:e3:a5: da:23:87:76:e3:7a:6b:a2:6c:cf:b1:5b:c1:d9:75: 5c:ee:85:d7:89:73:6d:5d:b6:df:61:d3:0b:69:2d: b3:e2:b1:6f:48:8d:f2:8a:69:df:1a:34:f1:ec:b1: 65:f2:ee:3f:17:e5:b6:85:40:98:63:9e:3d:83:46: a8:54:73:e5:1d:7e:10:be:f7:a5:2a:ff:c3:ba:e9: 68:4d:57:57:1a:a9:45:38:6e:7e:06:e8:73:df:f0: 3b:a1:ed:02:90:57:be:19:ac:d3:5a:91:83:d3:f7: d6:58:a5:8d:a0:fb:ef:4e:17:8c:be:91:6d:28:72: a8:7d:87:f0:fe:c6:18:4d:8b:57:ba:c8:0b:40:4a: 81:75:68:f9:d3:cb:c0:5d:2f:6b:36:a3:ed:24:72: dc:24:1e:e5:d4:59:56:ec:44:79:a4:fb:52:c8:8c: 69:b4:ed:f4:55:11:37:2e:1b:a6:be:f2:7d:0e:fd: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9a:a2:14:fb:35:1a:a8:90:c5:5c:ff:f5:f7:3c:75:de:c3:34: 0e:57:4c:f2:37:67:e0:c6:c9:a5:58:2d:6c:9c:87:10:00:54: 44:df:5b:14:c8:c2:a2:6e:4c:66:3a:5c:73:c0:87:55:04:e0: 60:23:cc:1d:a4:d4:28:8a:35:58:c0:ff:21:81:db:50:7b:b5: d1:1b:48:0a:ab:14:34:42:e0:fc:b5:78:6f:fe:f1:da:60:6e: b6:40:f1:9a:c8:43:4d:00:67:91:96:64:d5:95:9f:34:7e:db: b7:4b:60:39:47:65:34:c4:44:1d:65:fc:bb:63:fd:9a:fa:f1: 1f:79:7d:16:74:fc:e1:b6:90:eb:f4:78:60:8a:ba:fa:0a:6e: 13:f1:7c:d5:ba:a6:10:50:60:a3:c5:fc:ee:3f:57:eb:3c:df: 9e:2b:8b:3a:dc:88:61:9f:55:3e:d9:50:dc:6b:e2:ca:0f:56: 66:41:31:ae:44:1c:c6:ac:f6:a8:27:9d:55:4d:68:15:0d:b4: 71:5c:ee:ea:09:f9:5d:29:36:86:1e:18:ad:77:b1:fc:7b:97: 8f:d0:81:3b:11:38:b9:7a:95:47:ef:42:a1:45:30:23:b9:d6: eb:05:40:06:2f:07:d3:a8:7b:06:2a:8b:31:8e:a7:94:c3:e9: 41:5d:74:d2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt4ooAHa9SbgKPhWkgshZ5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTdhOGQ3ZGIzMmE0MGQ0ZTFkMDAyOGE3Y2ZkMDgxNGI2NTBmNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDKm4ONadZAV2oCU7KBcHNC/t/Tx JLlYWjthicephmK5qJxReRJj79QHncBBPWijbsMT8cVFcga4p0tN+U5wOlnErVug rM2r46XaI4d243promzPsVvB2XVc7oXXiXNtXbbfYdMLaS2z4rFvSI3yimnfGjTx 7LFl8u4/F+W2hUCYY549g0aoVHPlHX4QvvelKv/DuuloTVdXGqlFOG5+Buhz3/A7 oe0CkFe+GazTWpGD0/fWWKWNoPvvTheMvpFtKHKofYfw/sYYTYtXusgLQEqBdWj5 08vAXS9rNqPtJHLcJB7l1FlW7ER5pPtSyIxptO30VRE3LhumvvJ9Dv0YXwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFP56jX2zKkDU4dACinz9CBS2UPQiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzcxZTk0 OC02OTFlLTRkZWEtYjAyYi1iMTJhNjkzM2Y4MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvNzFlOTQ4 LTY5MWUtNGRlYS1iMDJiLWIxMmE2OTMzZjgyOS8xL19ucU5mYk1xUU5UaDBBS0tm UDBJRkxaUTlDSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAm7kwDQYJKoZIhvcNAQELBQADggEBAJqiFPs1 GqiQxVz/9fc8dd7DNA5XTPI3Z+DGyaVYLWychxAAVETfWxTIwqJuTGY6XHPAh1UE 4GAjzB2k1CiKNVjA/yGB21B7tdEbSAqrFDRC4Py1eG/+8dpgbrZA8ZrIQ00AZ5GW ZNWVnzR+27dLYDlHZTTERB1l/Ltj/Zr68R95fRZ0/OG2kOv0eGCKuvoKbhPxfNW6 phBQYKPF/O4/V+s8354rizrciGGfVT7ZUNxr4soPVmZBMa5EHMas9qgnnVVNaBUN tHFc7uoJ+V0pNoYeGK13sfx7l4/QgTsROLl6lUfvQqFFMCO51usFQAYvB9OoewYq izGOp5TD6UFddNI= -----END CERTIFICATE-----Generated at Tue Feb 10 01:06:11 2026 by rpki-client