This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer (raw, json) Hash identifier: /z4fNvvV2RV9efqqD+NKtiv7pNxcE/fL7xPgsT4iT4k= Subject key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC86F26431C6E2B146B11CD33367341 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205808 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6f:26:43:1c:6e:2b:14:6b:11:cd:33:36:73:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:88:f3:3b:7f:2a:c1:b4:b8:11:30:36:a6:04: fe:8d:3f:94:cf:46:ea:c0:b3:f5:ee:ef:c6:b6:87: a8:d9:e9:e6:d0:db:e9:65:97:13:d2:b3:89:f4:41: ac:d0:50:d3:7a:c2:85:80:4b:e7:76:70:60:c4:98: 00:7f:0d:70:53:b7:30:70:22:e6:18:31:a0:db:c4: 83:10:3b:be:eb:f9:ac:77:72:9d:af:3c:f8:72:27: cc:62:c7:11:f2:11:5b:5c:96:30:d5:f6:22:9c:bb: e3:88:c0:20:16:36:bf:ca:86:a9:77:b9:ad:95:1d: ec:4e:41:36:65:3d:3e:1b:3c:7b:b6:34:8d:c5:5e: 6d:57:f7:38:10:32:1a:0b:a1:e3:ea:b5:95:0c:60: 11:00:95:3a:2f:be:50:bf:0d:b6:cf:b9:3d:10:57: e0:20:c1:9e:09:48:c2:5a:8f:6c:59:e6:75:82:ff: 57:c2:e5:71:a7:4c:2d:47:77:d3:9c:c1:20:5a:5b: e9:44:e8:2e:20:26:c6:2f:9a:81:67:8c:87:90:f5: 67:a7:2f:3c:79:24:32:20:84:f6:4f:fa:ab:82:b2: ba:e6:76:ac:4b:74:44:a4:e2:c0:f5:27:af:e8:ee: ad:d6:d1:91:9e:80:6a:41:7c:16:8f:d0:dc:68:ba: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205808 Signature Algorithm: sha256WithRSAEncryption ac:3f:af:17:09:c0:f0:73:41:0c:f8:e5:26:f3:58:c1:cb:e7: 85:5a:96:9a:dd:91:c8:a5:a3:1c:6b:d1:b3:69:8c:44:6a:b6: d9:99:b7:5d:f6:8d:e1:84:cb:c3:fc:5e:16:f9:e6:89:58:c4: e1:ca:ba:8c:d9:94:fc:d0:e6:b2:03:e3:64:ac:c3:a3:e6:bc: 6c:c4:6b:e7:a8:e4:bd:76:cb:ab:a5:78:98:3f:e2:21:b3:5e: 7f:25:71:56:01:24:23:3e:88:67:63:aa:aa:27:62:9f:38:37: 4b:25:40:de:4c:da:25:e3:6b:74:cd:5b:24:e9:6b:93:3e:e9: c0:90:d3:22:c2:a0:7a:67:f1:81:eb:79:09:7a:7d:61:9c:b6: 79:12:7a:20:91:b0:ca:aa:7d:9a:18:0f:47:de:15:45:e2:bb: 59:67:08:32:33:1d:c5:e9:2f:af:7a:42:17:d2:1a:ce:7d:53: de:d9:f7:36:77:d6:e2:39:86:1c:fd:09:d5:77:ba:bf:47:05: 69:79:e9:43:d7:1f:61:0d:d2:b6:c2:98:13:e5:e6:89:d4:5f: 99:80:de:40:58:c5:c1:af:75:bb:50:a4:5e:2b:65:f3:14:06: 67:e0:6e:35:58:2f:8d:fe:eb:89:b0:a7:e1:29:2f:67:14:7a: b5:00:9f:13 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yG8mQxxuKxRrEc0zNnNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzA1NTRiM2E2OTA3N2NiMjYyOWRhNDgwN2MzZTAyYTU2MWFkOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIjzO38qwbS4ETA2pgT+jT+Uz0bq wLP17u/Gtoeo2enm0NvpZZcT0rOJ9EGs0FDTesKFgEvndnBgxJgAfw1wU7cwcCLm GDGg28SDEDu+6/msd3Kdrzz4cifMYscR8hFbXJYw1fYinLvjiMAgFja/yoapd7mt lR3sTkE2ZT0+Gzx7tjSNxV5tV/c4EDIaC6Hj6rWVDGARAJU6L75Qvw22z7k9EFfg IMGeCUjCWo9sWeZ1gv9XwuVxp0wtR3fTnMEgWlvpROguICbGL5qBZ4yHkPVnpy88 eSQyIIT2T/qrgrK65nasS3REpOLA9Sev6O6t1tGRnoBqQXwWj9DcaLq4hQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJwFVLOmkHfLJinaSAfD4CpWGtlKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzVmMjhi Ni02MDgyLTRhMzUtYTMyOC00MDgyMGM4NDI2YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvNWYyOGI2 LTYwODItNGEzNS1hMzI4LTQwODIwYzg0MjZiNC8xL25BVlVzNmFRZDhzbUtkcElC OFBnS2xZYTJVby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMj8DANBgkqhkiG9w0BAQsFAAOCAQEArD+vFwnA8HNB DPjlJvNYwcvnhVqWmt2RyKWjHGvRs2mMRGq22Zm3XfaN4YTLw/xeFvnmiVjE4cq6 jNmU/NDmsgPjZKzDo+a8bMRr56jkvXbLq6V4mD/iIbNefyVxVgEkIz6IZ2Oqqidi nzg3SyVA3kzaJeNrdM1bJOlrkz7pwJDTIsKgemfxget5CXp9YZy2eRJ6IJGwyqp9 mhgPR94VReK7WWcIMjMdxekvr3pCF9Iazn1T3tn3NnfW4jmGHP0J1Xe6v0cFaXnp Q9cfYQ3StsKYE+XmidRfmYDeQFjFwa91u1CkXitl8xQGZ+BuNVgvjf7ribCn4Skv ZxR6tQCfEw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:15 2026 by rpki-client