This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer File: nG_8tbXi3kVRrPm0WvJC25RYTlo.cer (raw, json) Hash identifier: wlwC3EJ84Z0HMZ2cMzoXEmNVlujHSI4a6efQIIm3NrY= Subject key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA53681E1231C0F09322FA66C72F3FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42648 IP: 195.248.224.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:36:81:e1:23:1c:0f:09:32:2f:a6:6c:72:f3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:3c:ca:91:26:3b:8a:5b:0d:0a:ba:6d:42: ba:ca:97:46:01:87:8b:b2:0f:2d:39:10:31:1b:5e: 0f:63:18:e2:28:e5:84:cc:9b:71:e4:30:0e:45:68: 95:40:d3:87:76:ea:23:81:25:2f:7e:d1:0b:5e:c2: 55:a5:2c:a7:c0:aa:8d:7e:11:37:de:ba:68:49:b7: fa:c3:20:0f:28:54:a9:45:f0:4b:06:bb:64:58:2a: 8f:06:2a:0d:40:54:66:d9:ce:14:7c:f4:c4:4e:d2: d5:a2:5a:f9:f7:4f:fe:dd:b1:b0:01:02:0d:b9:3d: 08:6f:07:fc:90:00:68:5e:44:3a:0a:18:61:47:e7: 96:ab:16:db:b4:1b:dd:d0:d1:90:2a:7b:d9:56:7e: a7:3a:0e:2b:9d:1e:8b:2c:1b:3a:d4:b0:c3:87:3c: e2:9b:05:a4:03:9a:0c:0c:25:a0:a9:78:25:af:90: 68:2c:aa:ba:16:d3:d5:a0:4c:48:1b:ac:05:42:2b: 2f:6b:56:ae:c3:50:b3:92:c5:2a:bf:6d:a9:4f:96: 27:ab:60:3b:28:65:ef:75:89:42:0b:bd:3b:1c:06: e3:dd:b4:86:8a:de:1d:73:76:f5:17:0d:90:ed:6d: 53:aa:2b:b9:23:ab:bd:2c:1b:c0:2d:18:18:e6:78: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.224.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42648 Signature Algorithm: sha256WithRSAEncryption 56:22:31:e6:95:66:9c:1f:a5:c9:37:4c:da:e5:a5:04:af:86: 5e:36:ef:d1:99:d0:a0:6e:bf:c6:3c:0b:26:d1:13:ad:37:87: 86:10:f1:a6:9b:17:16:d0:bd:af:02:38:ac:94:f4:99:d8:00: ac:de:ff:40:b7:44:45:e7:c6:26:d0:87:da:29:3f:ab:a5:d6: 4a:ad:d6:d7:c9:24:77:34:93:01:ac:65:96:4e:84:6a:3b:30: 67:a2:58:ad:f4:05:9b:19:50:e7:5d:6a:41:1a:eb:2f:21:3d: ed:60:1e:23:69:e5:dd:29:49:79:e4:93:75:65:a0:8a:04:a6: 71:68:a2:ae:9b:dd:71:cb:39:2b:d8:51:e9:79:c8:c8:31:d3: f8:4f:46:88:c8:24:58:6c:65:68:8e:26:35:e6:16:4a:16:17: 79:38:03:5e:f3:ad:fd:7b:e9:c8:67:47:02:a8:c7:d1:fb:03: fc:1c:c3:cb:79:fd:66:0e:05:04:69:02:fd:fe:45:ff:bb:c3: 80:3b:53:1c:47:f6:73:89:13:b9:ed:f2:34:a8:34:b8:c6:ec: 99:da:47:17:30:5b:4f:ad:77:b8:4b:a9:fc:a4:8a:21:2c:66: 26:1c:d2:d4:96:51:06:0f:aa:a1:b2:c7:09:79:8d:e9:88:00: c5:a1:86:31 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pTaB4SMcDwkyL6ZscvP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzZmZmNiNWI1ZTJkZTQ1NTFhY2Y5YjQ1YWYyNDJkYjk0NTg0ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJU8ypEmO4pbDQq6bUK6ypdGAYeL sg8tORAxG14PYxjiKOWEzJtx5DAORWiVQNOHduojgSUvftELXsJVpSynwKqNfhE3 3rpoSbf6wyAPKFSpRfBLBrtkWCqPBioNQFRm2c4UfPTETtLVolr590/+3bGwAQIN uT0Ibwf8kABoXkQ6ChhhR+eWqxbbtBvd0NGQKnvZVn6nOg4rnR6LLBs61LDDhzzi mwWkA5oMDCWgqXglr5BoLKq6FtPVoExIG6wFQisva1auw1CzksUqv22pT5Ynq2A7 KGXvdYlCC707HAbj3bSGit4dc3b1Fw2Q7W1Tqiu5I6u9LBvALRgY5nijpwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJxv/LW14t5FUaz5tFryQtuUWE5aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzk4NDFm Zi1jODg2LTRkYTAtOTU3YS1mMmYwOTU1ZGExYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvOTg0MWZm LWM4ODYtNGRhMC05NTdhLWYyZjA5NTVkYTFhZC8xL25HXzh0YlhpM2tWUnJQbTBX dkpDMjVSWVRsby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw/jgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCmmDANBgkqhkiG9w0BAQsFAAOCAQEAViIx5pVmnB+lyTdM2uWlBK+GXjbv0ZnQ oG6/xjwLJtETrTeHhhDxppsXFtC9rwI4rJT0mdgArN7/QLdERefGJtCH2ik/q6XW Sq3W18kkdzSTAaxllk6EajswZ6JYrfQFmxlQ511qQRrrLyE97WAeI2nl3SlJeeST dWWgigSmcWiirpvdccs5K9hR6XnIyDHT+E9GiMgkWGxlaI4mNeYWShYXeTgDXvOt /XvpyGdHAqjH0fsD/BzDy3n9Zg4FBGkC/f5F/7vDgDtTHEf2c4kTue3yNKg0uMbs mdpHFzBbT613uEup/KSKISxmJhzS1JZRBg+qobLHCXmN6YgAxaGGMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:40 2026 by rpki-client