This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer (raw, json) Hash identifier: jUxKHAB/H1GZMgmtK4PreTi6d4buEbwnsV2/fTYXhow= Subject key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77587CBDD25AA3DA54380C3B5ABA37AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31522 IP: 193.138.67.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7c:bd:d2:5a:a3:da:54:38:0c:3b:5a:ba:37:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:8a:c3:10:4d:7c:d6:24:de:7c:bc:30:69: be:8f:16:de:d0:61:f8:89:cf:30:46:e5:36:d0:c7: 29:e8:32:ff:4c:a4:69:8c:00:99:6e:c6:1d:1b:71: 31:ad:60:fb:37:c4:9d:14:a4:b7:e8:ca:a7:cf:34: 47:a0:de:6b:fe:a4:0a:72:08:81:25:01:4a:dd:fb: f8:e6:a5:93:c4:2c:40:fa:f3:4c:a4:b0:b7:bc:e0: ec:6f:b1:a2:98:ab:bf:51:6d:93:d6:76:cb:87:0c: bf:f8:39:73:93:1f:a0:f0:2d:1e:ac:6f:fa:83:da: 78:fd:b7:5e:26:86:51:f7:38:7f:48:94:6e:1c:5e: 19:87:89:a5:e8:71:e2:84:18:d9:99:2a:da:b4:83: 4a:54:7c:cc:07:c6:7b:38:c0:42:96:67:fa:73:37: 12:4e:ca:b6:83:ef:6f:ea:c2:f8:c1:94:2d:11:09: c6:f5:d5:6a:d9:29:33:45:36:13:46:6e:e9:dc:78: e3:eb:1f:8e:8f:aa:6a:9e:1e:48:d0:67:ba:9f:44: ab:0d:7b:98:90:78:36:37:90:a5:a0:63:ae:ad:4d: c5:ff:09:d1:24:a7:3d:9b:ba:1a:1d:c4:53:77:99: 1e:83:a5:c6:02:05:59:b8:7c:08:8e:dc:c0:53:ef: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.67.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31522 Signature Algorithm: sha256WithRSAEncryption a7:a3:b4:83:55:3c:0f:1f:be:94:9a:05:40:d1:f9:9e:62:09: 7c:f5:c2:ab:c5:8c:65:51:9b:82:6a:b5:57:f7:5c:dd:f1:35: f4:09:dc:be:e3:64:3a:eb:19:85:0a:06:85:61:ff:8a:a1:a5: 61:37:8b:07:89:67:34:dc:7e:68:4e:95:05:7b:21:20:37:2c: 2e:ee:63:48:6f:2a:ad:c6:58:84:67:2a:a9:fe:53:ce:11:4d: 69:8b:fa:b2:c4:fb:6f:fb:46:ca:4f:9d:b2:00:66:ac:6c:05: a4:62:29:36:39:ac:c8:00:75:02:46:1f:ef:90:e4:d1:66:fa: ea:2f:7e:2e:39:e2:ef:04:f2:21:db:06:0b:14:77:44:08:c2: e4:ba:3f:d6:d7:2a:ef:dd:80:89:73:d1:a0:61:7d:27:96:94: 55:47:0d:34:79:f1:a8:57:53:fb:12:b4:8d:df:56:fa:03:ae: b0:8e:46:7c:7a:93:df:3e:f9:93:8f:64:a6:87:89:bb:3e:a1: 70:be:82:c9:f3:4e:70:fb:a3:93:2c:77:53:8c:aa:65:c6:91: eb:19:06:2b:37:ef:a3:38:56:1f:44:98:4d:46:c0:c6:9e:9a: f2:b0:2d:a4:7a:f3:5d:f7:ad:ce:a4:7f:eb:72:60:87:8e:81: de:e1:1b:4b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3WHy90lqj2lQ4DDtaujeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjhhM2M5YTllZGY2NDQ3MzVhOTRlYjA5ZjAxY2FiMzk4NTVkMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41OKwxBNfNYk3ny8MGm+jxbe0GH4 ic8wRuU20Mcp6DL/TKRpjACZbsYdG3ExrWD7N8SdFKS36MqnzzRHoN5r/qQKcgiB JQFK3fv45qWTxCxA+vNMpLC3vODsb7GimKu/UW2T1nbLhwy/+Dlzkx+g8C0erG/6 g9p4/bdeJoZR9zh/SJRuHF4Zh4ml6HHihBjZmSratINKVHzMB8Z7OMBClmf6czcS Tsq2g+9v6sL4wZQtEQnG9dVq2SkzRTYTRm7p3Hjj6x+Oj6pqnh5I0Ge6n0SrDXuY kHg2N5CloGOurU3F/wnRJKc9m7oaHcRTd5keg6XGAgVZuHwIjtzAU+8smwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFJ+KPJqe32RHNalOsJ8ByrOYVdJ4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1L2ExN2I5 My1jYzg5LTRkMDgtYTViMi02MzZkNmZjMDA0OGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvYTE3Yjkz LWNjODktNGQwOC1hNWIyLTYzNmQ2ZmMwMDQ4Zi8xL240bzhtcDdmWkVjMXFVNndu d0hLczVoVjBuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwYpDMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnsiMA0GCSqGSIb3DQEBCwUAA4IBAQCno7SDVTwPH76UmgVA0fmeYgl89cKrxYxl UZuCarVX91zd8TX0Cdy+42Q66xmFCgaFYf+KoaVhN4sHiWc03H5oTpUFeyEgNywu 7mNIbyqtxliEZyqp/lPOEU1pi/qyxPtv+0bKT52yAGasbAWkYik2OazIAHUCRh/v kOTRZvrqL34uOeLvBPIh2wYLFHdECMLkuj/W1yrv3YCJc9GgYX0nlpRVRw00efGo V1P7ErSN31b6A66wjkZ8epPfPvmTj2Smh4m7PqFwvoLJ805w+6OTLHdTjKplxpHr GQYrN++jOFYfRJhNRsDGnprysC2kevNd963OpH/rcmCHjoHe4RtL -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:11 2026 by rpki-client