This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer File: caNBPUB9it-Ktr5VcGCU7-nD1do.cer (raw, json) Hash identifier: 0xjvG9Q6WiQjtOUt0+xLJpXPNt+Ilx2LaPWpydYeesI= Subject key identifier: 71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F159E132591557B5F065B515578BD42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.208.100.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9e:13:25:91:55:7b:5f:06:5b:51:55:78:bd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71a3413d407d8adf8ab6be55706094efe9c3d5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:c5:dd:c5:e3:ac:f0:9a:85:2d:31:c5:aa: 6f:4f:55:e2:0a:cc:28:58:7d:2f:fa:d2:c1:da:ac: 6d:55:78:66:94:72:65:a0:6b:fd:9b:1a:c0:da:8f: 51:9d:11:3e:4b:4f:4e:22:f3:e0:cb:5a:ed:3d:63: 62:fc:25:83:92:0b:35:85:5d:7a:86:48:c8:c4:4f: dd:7f:92:a1:77:a1:e5:85:fc:3a:aa:6d:d2:4d:90: df:2e:f1:bf:d9:70:d1:05:82:4a:ba:a6:9a:30:34: f5:7a:41:fd:d7:dc:9a:6b:87:50:d2:0f:79:36:f3: d9:9c:01:56:a0:ed:46:68:77:ee:c4:b0:65:f9:a3: e5:d3:01:af:ff:66:1d:c8:23:21:ee:fa:73:e9:a9: 86:e7:19:3a:ee:59:e2:d8:c1:96:fe:d6:70:ea:8e: b3:71:1b:ef:a7:1a:8d:9d:2c:ed:f1:cc:1b:d0:1a: 9c:37:e4:24:a1:f1:32:f7:db:8a:db:7e:86:52:cc: f5:e6:c6:f9:e2:a3:cc:7c:b0:39:f8:f9:7b:91:15: 29:d1:92:d7:64:46:fe:e9:79:25:15:ae:9d:d5:17: 08:71:3a:cd:e0:01:8c:26:e1:90:5c:ca:ec:5d:ed: 71:73:fb:70:33:f1:36:72:f0:1e:ff:4a:d2:71:ef: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.100.0/24 Signature Algorithm: sha256WithRSAEncryption 82:6a:98:66:ee:d4:a4:4b:14:f3:86:79:7a:dd:94:ca:44:97: 4f:69:64:c9:57:5d:44:3a:52:d0:3e:90:6d:5c:69:91:f4:af: a8:72:00:2b:de:0f:bf:a2:d2:64:3c:34:aa:c6:4d:3c:82:f0: 30:0c:d7:cc:44:b1:d2:e5:3f:eb:e3:6a:e6:08:bd:b5:9c:6c: e6:b9:87:32:9a:25:62:33:82:6b:78:93:9d:f3:96:b5:3a:e2: 2c:98:a1:0b:c9:e0:d9:3e:50:59:12:e6:03:8a:77:30:50:41: 46:8a:1c:54:8a:8e:36:34:26:da:6d:5d:10:c3:dd:61:82:15: ea:72:e1:fb:fe:66:1c:16:57:ed:6a:fb:df:fd:0b:83:c3:e9: 2c:83:1c:49:ba:a6:e3:bb:78:03:1a:6f:9c:ea:c4:99:86:8e: 3f:b0:27:ad:1f:47:45:7a:36:1d:6f:2f:58:6c:19:45:ee:c5: 17:5c:08:48:76:63:4c:a2:57:47:c4:8e:25:45:65:64:5d:47: 1d:02:7e:e7:bc:6b:04:b2:94:82:b0:8e:2c:d3:5c:95:26:c6: ad:65:b2:ce:d4:37:af:31:a6:c6:cf:a7:69:a9:95:c5:7c:48: ff:90:18:d1:67:96:b9:ef:b1:b4:c2:a9:6b:bf:fa:36:47:a5: c1:37:2f:83 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FZ4TJZFVe18GW1FVeL1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWEzNDEzZDQwN2Q4YWRmOGFiNmJlNTU3MDYwOTRlZmU5YzNkNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12XF3cXjrPCahS0xxapvT1XiCswo WH0v+tLB2qxtVXhmlHJloGv9mxrA2o9RnRE+S09OIvPgy1rtPWNi/CWDkgs1hV16 hkjIxE/df5Khd6Hlhfw6qm3STZDfLvG/2XDRBYJKuqaaMDT1ekH919yaa4dQ0g95 NvPZnAFWoO1GaHfuxLBl+aPl0wGv/2YdyCMh7vpz6amG5xk67lni2MGW/tZw6o6z cRvvpxqNnSzt8cwb0BqcN+QkofEy99uK236GUsz15sb54qPMfLA5+Pl7kRUp0ZLX ZEb+6XklFa6d1RcIcTrN4AGMJuGQXMrsXe1xc/twM/E2cvAe/0rSce9uzQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHGjQT1AfYrfira+VXBglO/pw9XaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzViNGIz Ni0xYWM5LTRkMjktYTA2Ny04MzIwZGU0NGRmOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvNWI0YjM2 LTFhYzktNGQyOS1hMDY3LTgzMjBkZTQ0ZGY4Yi8xL2NhTkJQVUI5aXQtS3RyNVZj R0NVNy1uRDFkby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9BkMA0GCSqGSIb3DQEBCwUAA4IBAQCCaphm 7tSkSxTzhnl63ZTKRJdPaWTJV11EOlLQPpBtXGmR9K+ocgAr3g+/otJkPDSqxk08 gvAwDNfMRLHS5T/r42rmCL21nGzmuYcymiViM4JreJOd85a1OuIsmKELyeDZPlBZ EuYDincwUEFGihxUio42NCbabV0Qw91hghXqcuH7/mYcFlftavvf/QuDw+ksgxxJ uqbju3gDGm+c6sSZho4/sCetH0dFejYdby9YbBlF7sUXXAhIdmNMoldHxI4lRWVk XUcdAn7nvGsEspSCsI4s01yVJsatZbLO1DevMabGz6dpqZXFfEj/kBjRZ5a577G0 wqlrv/o2R6XBNy+D -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:02 2026 by rpki-client