This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer File: nFK2oFFHG-xR23TXJW56MKVezxo.cer (raw, json) Hash identifier: qpWF2vlHGKo0uGnfmJdrDqrHUNNE7E5x1XBHdFx+GTU= Subject key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12E81DCADD06D71A60D8E38C650B2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204386 IP: 185.250.156.0/22 IP: 185.251.26.0/24 IP: 2a0c:ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e8:1d:ca:dd:06:d7:1a:60:d8:e3:8c:65:0b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:7f:27:d1:50:7e:9b:1f:88:0a:59:7e:83: 63:95:ae:6a:6f:81:71:b3:de:23:f8:10:c9:ca:cc: a5:3b:87:cd:49:d4:17:80:ec:ed:8d:f9:da:b5:bc: 39:f9:48:2d:63:0c:e8:ad:96:f0:db:c8:07:d1:87: 70:7f:3d:c2:7a:8b:b0:86:49:f9:bd:1a:0d:6e:5d: 8a:27:e9:92:96:cb:04:8d:d1:9f:1f:1a:25:db:2c: cf:d0:ce:d4:a6:6d:6e:26:cf:87:ef:65:20:d9:c0: 3f:2b:d6:98:c7:e5:50:f8:df:e9:1d:6f:16:5f:b5: ef:f6:39:23:5b:ce:7f:b9:cc:83:4b:9b:f5:eb:3c: 9a:f0:d0:31:ed:5b:a4:5d:16:8c:9a:0a:1f:09:4a: a7:48:18:61:3a:a8:71:4e:b4:67:f6:0a:fa:6a:d7: 7c:ef:02:a1:8c:23:76:65:0a:24:64:76:03:cb:1b: 33:91:14:5a:bc:db:38:8c:e0:76:66:06:dc:4d:df: 16:9b:3e:fb:f9:ca:ed:5f:28:a4:46:60:97:4e:ef: 6d:07:63:d3:b8:75:4d:54:ed:a6:5d:19:1c:a7:5c: 00:f3:de:86:a8:78:9b:69:2b:29:a1:9d:45:e8:9c: 90:11:24:db:f5:66:57:ef:95:d9:46:c6:05:cd:c9: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.156.0/22 185.251.26.0/24 IPv6: 2a0c:ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204386 Signature Algorithm: sha256WithRSAEncryption 67:5c:a9:db:c8:a7:5c:f6:0d:8a:55:c7:af:38:f2:06:90:7d: d7:52:44:c5:68:8c:7f:5e:5a:c0:7e:e1:68:8f:56:25:23:38: 9b:df:54:f1:89:c5:9f:a7:66:0f:30:96:b3:ed:42:00:26:be: 1a:0d:f7:1f:5a:c8:0e:06:fa:03:52:52:10:68:ab:ed:73:78: 9d:3e:dc:71:94:b0:e6:ec:9d:97:c5:62:4f:1b:a6:24:e5:3c: 06:ca:d1:0d:05:0e:75:76:d2:9e:df:e3:46:ed:67:78:86:34: e3:8d:e7:1f:e5:dd:7c:af:f8:ea:a9:e6:72:18:4b:bb:0b:5c: 8e:e8:08:26:ca:bb:3f:3a:73:f3:a0:29:02:1a:19:f8:b6:11: e8:9e:e8:30:c5:84:66:e1:0e:15:bb:f7:71:9d:10:99:9d:59: 9b:ce:2e:4a:0c:63:f3:97:56:7d:54:ea:b8:23:b1:e4:d9:64: 6b:81:fb:1a:96:62:08:b9:64:71:3c:f1:84:98:1f:62:bf:7f: 42:a7:11:72:2b:76:9f:c8:6e:00:d7:a4:6a:6a:31:b8:6b:3b: e2:45:88:0f:24:db:e1:c1:c4:8e:eb:2c:39:6b:aa:3c:2d:e1: 07:b8:57:ba:81:43:f2:c5:42:df:a5:d4:9f:a9:cc:17:b4:95: da:eb:9a:2d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8Eugdyt0G1xpg2OOMZQsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzUyYjZhMDUxNDcxYmVjNTFkYjc0ZDcyNTZlN2EzMGE1NWVjZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9t/J9FQfpsfiApZfoNjla5qb4Fx s94j+BDJysylO4fNSdQXgOztjfnatbw5+UgtYwzorZbw28gH0Ydwfz3Ceouwhkn5 vRoNbl2KJ+mSlssEjdGfHxol2yzP0M7Upm1uJs+H72Ug2cA/K9aYx+VQ+N/pHW8W X7Xv9jkjW85/ucyDS5v16zya8NAx7VukXRaMmgofCUqnSBhhOqhxTrRn9gr6atd8 7wKhjCN2ZQokZHYDyxszkRRavNs4jOB2ZgbcTd8Wmz77+crtXyikRmCXTu9tB2PT uHVNVO2mXRkcp1wA896GqHibaSspoZ1F6JyQESTb9WZX75XZRsYFzclyAQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJxStqBRRxvsUdt01yVuejClXs8aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2Y4NDM0 Yy0wMjMwLTRhZGYtYmQwMC0yODI5YWEzZGYyNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvZjg0MzRj LTAyMzAtNGFkZi1iZDAwLTI4MjlhYTNkZjI1OC8xL25GSzJvRkZIRy14UjIzVFhK VzU2TUtWZXp4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCufqcAwQAufsaMA0EAgACMAcDBQMqDA7AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMeYjANBgkqhkiG9w0BAQsFAAOCAQEAZ1yp 28inXPYNilXHrzjyBpB911JExWiMf15awH7haI9WJSM4m99U8YnFn6dmDzCWs+1C ACa+Gg33H1rIDgb6A1JSEGir7XN4nT7ccZSw5uydl8ViTxumJOU8BsrRDQUOdXbS nt/jRu1neIY0443nH+XdfK/46qnmchhLuwtcjugIJsq7Pzpz86ApAhoZ+LYR6J7o MMWEZuEOFbv3cZ0QmZ1Zm84uSgxj85dWfVTquCOx5Nlka4H7GpZiCLlkcTzxhJgf Yr9/QqcRcit2n8huANekamoxuGs74kWIDyTb4cHEjussOWuqPC3hB7hXuoFD8sVC 36XUn6nMF7SV2uuaLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:59 2026 by rpki-client