This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer File: nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer (raw, json) Hash identifier: AVbBV32Trc3q3lnCd3LZCnMjENZIamZtobdw4FbwWXQ= Subject key identifier: 9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA52AC8B9147B55E247BDE743CA7BCA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205883 IP: 212.46.45.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2a:c8:b9:14:7b:55:e2:47:bd:e7:43:ca:7b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:0c:17:4a:4d:ca:fe:c5:82:82:1e:b1:64: 4c:8b:00:6e:dc:74:f9:0b:25:1f:66:33:56:3f:20: 37:98:a6:49:4a:ed:26:89:59:55:a1:c7:32:4d:9e: 0d:f1:73:35:ad:30:f1:ea:f4:a1:ae:f7:9f:0f:6d: 63:64:53:88:da:62:64:2e:3a:5f:97:0d:14:99:b0: 47:f2:e9:9f:33:f3:dd:9a:71:08:a7:f8:de:1a:fe: 6d:9c:58:2c:43:71:a0:98:c0:85:28:8a:5c:05:8a: 4c:9c:d8:b1:1c:24:e9:90:e6:41:5b:62:84:e3:76: b5:59:d4:df:0d:76:de:9d:cc:34:36:e3:23:e8:a5: 8d:8a:09:38:ed:c3:a3:7b:69:59:40:2c:5d:27:20: d6:c8:19:72:9b:b6:5b:29:33:b4:0b:54:c6:d0:2b: 33:56:b3:63:90:ea:62:51:58:7a:1f:d4:16:1b:96: ec:68:6b:cb:a6:22:14:fe:c7:8b:c0:47:90:10:c3: 11:01:53:d0:c1:9c:3f:f3:06:f7:17:5d:bf:db:0e: 54:f8:13:50:28:17:85:38:3e:a7:29:83:15:31:61: bc:e4:c1:9a:8c:d2:09:3f:25:41:18:d5:f6:53:4f: 39:72:a4:85:c2:d4:f9:da:cf:3b:cf:e6:b9:2e:49: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.45.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205883 Signature Algorithm: sha256WithRSAEncryption 86:aa:10:e8:83:0d:bd:b4:2e:7f:f4:3e:2c:30:b2:de:b4:b4: c5:3b:3d:9b:da:a1:32:e2:69:bf:2a:49:95:5b:5a:8f:10:a3: fd:b5:f5:fa:5f:d0:86:ec:fe:b3:5f:ae:65:da:3e:d5:ef:59: bf:49:14:3a:00:02:ba:f8:06:5d:a8:50:b4:2d:73:37:4a:3b: af:63:9b:64:f8:2d:97:e2:02:3f:79:b0:2d:2e:f1:01:1f:d8: 6d:7d:b7:70:9e:6d:be:74:db:52:f0:7d:a9:f3:b5:3a:31:69: 8d:85:2b:d3:15:da:21:29:34:c1:39:c2:f2:00:7c:62:79:29: 6e:ca:07:fb:af:f4:75:77:2d:89:7e:82:11:ac:e7:0e:75:e5: 9c:4a:6f:61:fc:16:c2:97:6d:b2:54:a4:e5:6d:46:1e:b6:0a: e1:71:b1:56:ae:b6:36:0c:0c:21:06:9b:0d:ed:28:62:e8:56: 9c:17:b1:06:09:33:d3:e7:7b:47:e9:ad:e8:9a:5c:a7:93:c4: 02:2f:6c:28:95:4d:c0:e0:1a:15:9c:4f:2a:f7:ea:47:6a:78: 0b:99:cf:59:fe:80:94:dd:27:9b:0a:20:88:da:bc:60:aa:87: 68:47:69:38:bb:14:c2:c5:5d:0e:a3:f2:81:ba:43:82:80:b3: 25:e4:00:a6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pSrIuRR7VeJHvedDynvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzllY2U0ZTZkMDY1OTMwMDViNzczZjg1ZmFmZTBlNTEzM2MzYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwcMF0pNyv7FgoIesWRMiwBu3HT5 CyUfZjNWPyA3mKZJSu0miVlVoccyTZ4N8XM1rTDx6vShrvefD21jZFOI2mJkLjpf lw0UmbBH8umfM/PdmnEIp/jeGv5tnFgsQ3GgmMCFKIpcBYpMnNixHCTpkOZBW2KE 43a1WdTfDXbencw0NuMj6KWNigk47cOje2lZQCxdJyDWyBlym7ZbKTO0C1TG0Csz VrNjkOpiUVh6H9QWG5bsaGvLpiIU/seLwEeQEMMRAVPQwZw/8wb3F12/2w5U+BNQ KBeFOD6nKYMVMWG85MGajNIJPyVBGNX2U085cqSFwtT52s87z+a5LknOiwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJyezk5tBlkwBbdz+F+v4OUTPDrnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzZjZGE3 NC01NTE0LTQ5MGEtYmUyNi1iMWQzYmNlZTJjN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvNmNkYTc0 LTU1MTQtNDkwYS1iZTI2LWIxZDNiY2VlMmM3ZS8xL25KN09UbTBHV1RBRnQzUDRY Nl9nNVJNOE91Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA1C4tMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMkOzANBgkqhkiG9w0BAQsFAAOCAQEAhqoQ6IMNvbQuf/Q+LDCy3rS0xTs9m9qh MuJpvypJlVtajxCj/bX1+l/Qhuz+s1+uZdo+1e9Zv0kUOgACuvgGXahQtC1zN0o7 r2ObZPgtl+ICP3mwLS7xAR/YbX23cJ5tvnTbUvB9qfO1OjFpjYUr0xXaISk0wTnC 8gB8YnkpbsoH+6/0dXctiX6CEaznDnXlnEpvYfwWwpdtslSk5W1GHrYK4XGxVq62 NgwMIQabDe0oYuhWnBexBgkz0+d7R+mt6Jpcp5PEAi9sKJVNwOAaFZxPKvfqR2p4 C5nPWf6AlN0nmwogiNq8YKqHaEdpOLsUwsVdDqPygbpDgoCzJeQApg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:22 2026 by rpki-client