This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer File: nAK6r7b7qr_o-oTdJp9bopIPFYM.cer (raw, json) Hash identifier: EiAx1RSYiI0myGulOtMNdKqtUJoUo+mqQ78QrXZiTmg= Subject key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77592C9900F5B096F71396FD25AB418A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43165 IP: 91.194.114.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2c:99:00:f5:b0:96:f7:13:96:fd:25:ab:41:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:2d:1f:84:9e:02:a0:cb:50:5f:f3:ff:9e: 00:bb:f3:b6:9b:6d:0c:88:21:a1:2f:7f:36:41:19: 2a:a5:36:fd:59:4a:cf:bc:d4:e3:47:d6:a1:d0:cc: df:46:e1:1a:42:b5:fd:fd:35:5a:19:b2:ab:b2:04: 6e:e0:8a:2d:c0:47:82:10:2a:b8:c0:5c:73:ae:34: 44:87:08:88:9a:6e:9b:28:6e:cb:69:55:ca:56:8e: 7e:48:c1:42:d2:b5:15:81:b4:e0:be:7f:ef:75:86: 55:b5:bb:58:23:a1:29:8d:7d:8d:08:5a:de:ab:2b: bf:85:71:b8:92:df:b1:f4:16:3f:c3:5a:6e:ff:a9: b1:d2:9a:72:ca:01:68:7c:5d:6f:45:ea:53:20:0b: e6:13:0f:1b:d9:9c:9e:ff:da:3c:8f:32:85:3b:c4: 5b:a7:89:bc:47:8d:f9:ad:e6:18:f6:a8:c4:33:26: 9c:69:2d:2d:15:60:ce:50:3c:84:7c:b9:1e:fa:ae: 6c:37:9c:83:6c:2f:18:d6:7e:9d:4f:1d:b3:15:15: 60:e7:83:c0:63:16:44:11:19:a4:21:93:ad:fa:9e: eb:ae:80:19:15:3d:f7:56:82:4b:7f:2c:cb:d8:56: e0:06:41:b0:1f:06:84:93:b0:a6:20:4e:e3:af:eb: 0c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.114.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43165 Signature Algorithm: sha256WithRSAEncryption 94:e4:b2:84:c8:11:b5:1f:80:77:84:05:d8:44:93:4f:52:33: 8e:81:5c:84:53:5b:4d:52:cb:6b:92:e4:01:a3:41:de:f2:26: 7f:58:52:02:4b:87:c1:51:b2:3e:4b:78:ff:a5:5a:29:e8:86: 3f:76:c0:ea:44:95:ef:49:d6:09:0b:3a:1e:d8:18:df:aa:18: 84:4a:a6:18:a2:9f:cc:ae:d6:82:c0:16:00:8a:60:4c:03:f2: e4:ae:33:3e:9b:a1:75:ff:e4:e6:8c:05:07:41:6f:1f:25:b2: 50:0b:0c:79:47:18:ba:73:66:4d:03:59:e6:1a:37:83:14:73: d2:a6:23:a4:d8:22:09:8a:1c:f6:0d:b5:13:fb:fc:d2:87:81: 07:6b:33:19:72:a1:c9:7e:95:ea:83:ba:7d:10:06:a5:40:55: a8:ef:2a:e4:ac:7f:17:8c:4b:ff:e2:fa:50:30:e0:42:20:f4: ab:e5:2f:79:ac:c0:d2:7f:76:09:0c:f4:c1:ac:a6:0e:9e:95: cb:ad:3b:9c:92:3a:d7:63:ec:da:1c:a2:17:38:fb:ff:e2:5a: d0:40:9f:db:07:45:68:4c:48:f8:7c:b3:c2:8b:1c:b4:b8:09: df:47:8a:58:9d:05:74:6a:f0:98:f6:fc:31:1f:20:5b:69:6c: 75:8c:0a:d5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WSyZAPWwlvcTlv0lq0GKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzAyYmFhZmI2ZmJhYWJmZThmYTg0ZGQyNjlmNWJhMjkyMGYxNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R0tH4SeAqDLUF/z/54Au/O2m20M iCGhL382QRkqpTb9WUrPvNTjR9ah0MzfRuEaQrX9/TVaGbKrsgRu4IotwEeCECq4 wFxzrjREhwiImm6bKG7LaVXKVo5+SMFC0rUVgbTgvn/vdYZVtbtYI6EpjX2NCFre qyu/hXG4kt+x9BY/w1pu/6mx0ppyygFofF1vRepTIAvmEw8b2Zye/9o8jzKFO8Rb p4m8R435reYY9qjEMyacaS0tFWDOUDyEfLke+q5sN5yDbC8Y1n6dTx2zFRVg54PA YxZEERmkIZOt+p7rroAZFT33VoJLfyzL2FbgBkGwHwaEk7CmIE7jr+sMZwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJwCuq+2+6q/6PqE3SafW6KSDxWDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2I5NDdk YS1lMmYyLTRjZGQtYWIzMC02MjRjZDE5ZTFhYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvYjk0N2Rh LWUyZjItNGNkZC1hYjMwLTYyNGNkMTllMWFhZC8xL25BSzZyN2I3cXJfby1vVGRK cDlib3BJUEZZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW8JyMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwConTANBgkqhkiG9w0BAQsFAAOCAQEAlOSyhMgRtR+Ad4QF2ESTT1IzjoFchFNb TVLLa5LkAaNB3vImf1hSAkuHwVGyPkt4/6VaKeiGP3bA6kSV70nWCQs6HtgY36oY hEqmGKKfzK7WgsAWAIpgTAPy5K4zPpuhdf/k5owFB0FvHyWyUAsMeUcYunNmTQNZ 5ho3gxRz0qYjpNgiCYoc9g21E/v80oeBB2szGXKhyX6V6oO6fRAGpUBVqO8q5Kx/ F4xL/+L6UDDgQiD0q+UveazA0n92CQz0waymDp6Vy607nJI612Ps2hyiFzj7/+Ja 0ECf2wdFaExI+HyzwosctLgJ30eKWJ0FdGrwmPb8MR8gW2lsdYwK1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:11 2026 by rpki-client