This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer File: m-NDwvs9a40jeJq02m_NRlppBYM.cer (raw, json) Hash identifier: Y0kINQKyK1LxL/oF1APL2rE6br7v6X5cTuZiilctnSo= Subject key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3764F3E9DA93D4178068946DC3034 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205600 IP: 185.236.47.0/24 IP: 2a10:88c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:76:4f:3e:9d:a9:3d:41:78:06:89:46:dc:30:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:9b:a9:ca:7e:91:d7:7c:a2:d2:1b:1e:d5: ff:5a:a3:25:d3:19:2e:9c:8a:08:51:c5:03:49:0d: 10:0b:36:ff:e5:44:6d:95:0c:c5:c4:33:c0:11:41: ab:34:ab:3b:04:29:4a:1f:c6:f4:9d:c5:55:31:93: 51:94:37:89:ab:3d:e3:6c:e2:13:30:2a:0a:20:1b: 2b:9a:3d:04:1d:44:cd:af:53:c2:a6:26:8a:62:69: 27:56:b9:dd:43:c5:ed:4c:9a:2d:48:59:7a:33:cb: 4a:9c:c5:9d:b3:b8:66:d1:98:a0:13:b8:c7:ee:e5: f3:c8:8c:53:bb:ec:6d:08:5e:00:37:59:89:e5:10: 2d:7a:44:23:c4:9e:d6:25:10:d9:b8:41:b5:24:bc: 6a:6c:8d:9e:ae:f3:7d:69:83:32:43:00:93:1d:6b: 96:74:f7:5b:8f:e1:e2:31:08:02:ee:c9:fb:35:cb: 33:e8:26:a5:e1:8a:cd:5d:ac:96:6d:d5:16:98:06: 3f:01:e5:0a:a6:44:b3:61:06:cd:9d:09:bd:1c:c6: a0:a1:9e:ea:8b:6b:94:e6:23:93:0a:b0:cd:d7:44: be:64:06:7a:d1:90:33:51:2f:a9:b0:65:4a:37:69: bf:5b:e2:f4:2a:ed:98:83:d3:05:fe:a2:42:34:5e: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.47.0/24 IPv6: 2a10:88c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205600 Signature Algorithm: sha256WithRSAEncryption 4e:1a:f2:48:ec:a9:87:22:a3:5e:29:07:49:2b:5e:87:38:60: e9:f8:a6:f7:a6:c2:6f:8b:77:04:b6:7e:7c:9f:87:92:8c:f0: 9f:8b:4e:ba:66:91:2e:bf:37:e6:82:14:d6:b2:1d:a9:75:2b: cb:0b:1e:59:02:74:bc:5d:54:c2:4b:57:15:fc:e4:94:95:83: 6e:ac:84:ad:1f:82:c4:43:15:05:74:22:b6:45:30:67:d2:ed: fa:c4:7a:e4:55:dd:30:94:d1:74:16:a4:dd:3e:31:61:da:bd: ba:be:24:a9:f8:39:e8:55:11:22:0b:45:68:c2:e0:4b:8b:9a: e3:8b:bb:59:35:43:8a:8e:85:91:69:18:f6:95:53:24:03:b3: 75:77:16:9e:a0:0b:e6:c9:07:d7:b5:4f:2e:1b:4b:90:41:6b: e4:f0:3a:6c:3a:f8:81:cc:4a:2c:82:f8:7a:76:e5:3f:f2:00: 67:9e:bc:93:f4:49:d3:15:06:b6:0e:b5:58:e1:4f:01:b4:66: 81:a6:bf:c8:2d:c6:07:f2:a1:bf:86:f0:4a:68:7b:d3:e0:20: 05:4c:04:63:d6:8d:51:70:ab:f0:94:d9:4b:f4:7d:e5:00:56: f9:0d:4b:3e:33:b1:97:1d:34:de:1a:08:15:05:01:7e:f9:b3: 2b:c8:92:92 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o3ZPPp2pPUF4BolG3DA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmUzNDNjMmZiM2Q2YjhkMjM3ODlhYjRkYTZmY2Q0NjVhNjkwNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ebqcp+kdd8otIbHtX/WqMl0xku nIoIUcUDSQ0QCzb/5URtlQzFxDPAEUGrNKs7BClKH8b0ncVVMZNRlDeJqz3jbOIT MCoKIBsrmj0EHUTNr1PCpiaKYmknVrndQ8XtTJotSFl6M8tKnMWds7hm0ZigE7jH 7uXzyIxTu+xtCF4AN1mJ5RAtekQjxJ7WJRDZuEG1JLxqbI2ervN9aYMyQwCTHWuW dPdbj+HiMQgC7sn7Ncsz6Cal4YrNXayWbdUWmAY/AeUKpkSzYQbNnQm9HMagoZ7q i2uU5iOTCrDN10S+ZAZ60ZAzUS+psGVKN2m/W+L0Ku2Yg9MF/qJCNF4FSQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJvjQ8L7PWuNI3iatNpvzUZaaQWDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2E5YmQ5 My05MmJkLTRiZjktYjY1NS1hZGNlZmRhYTEwMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYTliZDkz LTkyYmQtNGJmOS1iNjU1LWFkY2VmZGFhMTAyOC8xL20tTkR3dnM5YTQwamVKcTAy bV9OUmxwcEJZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuewvMA0EAgACMAcDBQMqEIjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMjIDANBgkqhkiG9w0BAQsFAAOCAQEAThrySOyphyKj XikHSStehzhg6fim96bCb4t3BLZ+fJ+Hkozwn4tOumaRLr835oIU1rIdqXUrywse WQJ0vF1UwktXFfzklJWDbqyErR+CxEMVBXQitkUwZ9Lt+sR65FXdMJTRdBak3T4x Ydq9ur4kqfg56FURIgtFaMLgS4ua44u7WTVDio6FkWkY9pVTJAOzdXcWnqAL5skH 17VPLhtLkEFr5PA6bDr4gcxKLIL4enblP/IAZ568k/RJ0xUGtg61WOFPAbRmgaa/ yC3GB/Khv4bwSmh70+AgBUwEY9aNUXCr8JTZS/R95QBW+Q1LPjOxlx003hoIFQUB fvmzK8iSkg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:27 2026 by rpki-client