This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer File: nBYm1f1UoXollC9v2VyDwOCIF7s.cer (raw, json) Hash identifier: 8AcFYUaBoNuuGx/rslf5OuOZfRC0aI0xEgfiUy7sRy4= Subject key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11954041B49B654E0B002323104EA3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56432 IP: 91.223.148.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:95:40:41:b4:9b:65:4e:0b:00:23:23:10:4e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:80:de:33:5a:ad:56:bd:c2:df:7b:fe:f4: d6:62:5d:cf:d8:9a:4e:6e:42:c2:4d:d0:7e:50:d3: 67:4f:96:ee:23:99:5a:ee:b8:6d:e2:6c:be:fb:40: 71:94:4d:b5:a6:df:d9:7c:8c:40:ae:7b:3b:aa:df: fa:fb:b4:dd:11:66:36:4d:5d:b8:c2:f6:d5:e5:39: 40:eb:34:5b:cf:fd:e7:dd:ad:2e:41:15:56:bc:d6: 5b:f9:29:02:2a:d5:3e:64:d1:3c:80:f4:e7:01:26: b2:3b:c2:7b:28:cf:30:d2:27:3b:4b:8c:ae:94:3c: ed:ea:57:62:74:1d:24:91:83:2c:3e:62:86:e4:c6: c6:89:8b:70:77:b1:56:f5:4b:39:99:43:51:d5:cd: e0:60:59:e3:62:18:51:fb:37:f9:7f:19:ae:3a:ff: 9d:c3:8d:fe:c2:e6:09:7f:9f:3e:52:23:73:3f:b6: 70:ec:8c:9e:4a:cd:7e:9a:a0:a5:66:d7:6a:18:33: ed:f5:1e:4b:2a:81:5a:6f:1e:95:42:0e:7e:74:ac: 34:de:33:f4:d5:2d:77:81:99:3c:44:1b:1a:1a:68: 99:de:47:59:da:b2:c6:05:95:87:28:22:8e:76:c2: 7d:03:31:e2:6e:bc:9b:ba:ac:7d:96:d1:08:aa:4a: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.148.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56432 Signature Algorithm: sha256WithRSAEncryption a7:9b:c2:43:af:78:47:33:1c:6b:54:63:4a:d0:83:c7:f2:06: 01:dc:ed:83:59:2e:dc:43:c5:ea:04:a1:ac:4d:69:49:2b:b6: 4c:96:69:42:d9:80:fe:fe:a5:c7:d7:3d:9f:05:f5:b9:cd:f0: 66:27:34:62:3c:4f:e6:42:93:d1:42:9a:0e:1c:02:d0:77:db: 81:fb:6a:87:ff:03:0e:95:b4:98:37:76:59:65:f7:4c:2c:bb: da:5b:81:30:03:f9:97:18:69:c3:4e:2b:b5:6b:59:4d:fb:e1: 34:b9:02:7b:ef:f9:e7:4e:02:a3:a0:ce:ab:97:c8:fe:93:40: f3:0c:28:92:07:e9:0c:b9:84:eb:17:8c:b7:74:98:53:16:c5: d6:b0:0f:cd:ba:52:ef:0e:7a:bd:4f:7b:8a:f5:09:61:72:76: 28:33:38:76:f1:48:9c:8e:40:4d:af:35:60:a6:14:de:40:8b: da:7b:01:02:41:4d:05:13:fa:75:36:b8:c2:23:26:cb:94:01: f5:93:80:ee:0b:0d:f2:95:14:52:65:72:74:66:71:ed:23:83: 5d:34:12:b7:15:c5:cf:94:5c:c3:c7:c2:b5:14:9b:98:e4:ef: 86:20:74:08:a1:30:18:df:40:7e:ee:14:de:25:98:95:53:05: 47:66:8b:00 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EZVAQbSbZU4LACMjEE6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzE2MjZkNWZkNTRhMTdhMjU5NDJmNmZkOTVjODNjMGUwODgxN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXqA3jNarVa9wt97/vTWYl3P2JpO bkLCTdB+UNNnT5buI5la7rht4my++0BxlE21pt/ZfIxArns7qt/6+7TdEWY2TV24 wvbV5TlA6zRbz/3n3a0uQRVWvNZb+SkCKtU+ZNE8gPTnASayO8J7KM8w0ic7S4yu lDzt6ldidB0kkYMsPmKG5MbGiYtwd7FW9Us5mUNR1c3gYFnjYhhR+zf5fxmuOv+d w43+wuYJf58+UiNzP7Zw7IyeSs1+mqClZtdqGDPt9R5LKoFabx6VQg5+dKw03jP0 1S13gZk8RBsaGmiZ3kdZ2rLGBZWHKCKOdsJ9AzHibrybuqx9ltEIqkr9xwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJwWJtX9VKF6JZQvb9lcg8DgiBe7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzU3OTQ3 OS03ZDRkLTQ5YzQtODNjMy0yMDdlOWI3MGMzODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNTc5NDc5 LTdkNGQtNDljNC04M2MzLTIwN2U5YjcwYzM4NS8xL25CWW0xZjFVb1hvbGxDOXYy VnlEd09DSUY3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9+UMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDccDANBgkqhkiG9w0BAQsFAAOCAQEAp5vCQ694RzMca1RjStCDx/IGAdztg1ku 3EPF6gShrE1pSSu2TJZpQtmA/v6lx9c9nwX1uc3wZic0YjxP5kKT0UKaDhwC0Hfb gftqh/8DDpW0mDd2WWX3TCy72luBMAP5lxhpw04rtWtZTfvhNLkCe+/5504Co6DO q5fI/pNA8wwokgfpDLmE6xeMt3SYUxbF1rAPzbpS7w56vU97ivUJYXJ2KDM4dvFI nI5ATa81YKYU3kCL2nsBAkFNBRP6dTa4wiMmy5QB9ZOA7gsN8pUUUmVydGZx7SOD XTQStxXFz5Rcw8fCtRSbmOTvhiB0CKEwGN9Afu4U3iWYlVMFR2aLAA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:39 2026 by rpki-client