This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer File: nJB6oEaogfuAUFGVIBYwYCYNfzE.cer (raw, json) Hash identifier: jvE+jJMeKgDvzZqAOgMI0UTfQFh9Jk4Cz+eqBcF/nzE= Subject key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B2823D2FC164E46CB90374ED8EB7F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208196 IP: 185.128.168.0/22 IP: 2a06:d080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:28:23:d2:fc:16:4e:46:cb:90:37:4e:d8:eb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c907aa046a881fb8050519520163060260d7f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:2b:57:81:52:06:2f:9b:af:d6:aa:24:81: fd:42:8b:d1:b5:dd:12:d2:a4:13:ea:7b:0a:09:47: 66:11:e0:bc:75:04:d9:24:91:b2:63:3d:41:e6:89: 1f:3a:7f:43:9b:7d:d6:d4:c0:e3:c9:bb:36:c2:93: 8d:5b:11:91:8f:de:10:61:b6:6a:c3:22:c2:33:82: f0:06:34:25:c4:77:ae:04:2f:ce:5e:d5:f5:cb:79: b5:45:0d:99:3c:e5:a4:21:1f:a8:24:a1:47:44:2c: 71:6e:31:06:17:1a:2a:3d:04:96:36:19:3f:9d:ab: 54:f1:00:cc:06:c8:5c:ef:00:bd:b2:46:71:5c:4d: 48:d9:b1:1b:fc:3d:48:2c:af:ea:e1:8c:1f:92:79: f8:db:2a:90:82:e2:49:24:ad:e6:16:08:3a:49:66: fc:9d:5e:af:da:89:76:a7:07:9d:c9:f9:79:9a:6b: 7b:98:6b:5a:69:36:fd:87:ad:62:6c:76:02:00:f6: 9a:0c:e1:d6:23:3b:fd:81:78:4e:30:69:b5:bd:22: f4:1a:12:af:e3:d1:1a:36:67:88:36:06:de:44:b9: 8e:44:a9:f3:61:f3:a0:cb:84:af:1e:cd:0c:ac:2c: b0:26:e9:8a:d6:70:d4:f6:e2:94:c7:e9:4e:3e:3e: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.168.0/22 IPv6: 2a06:d080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208196 Signature Algorithm: sha256WithRSAEncryption 1c:5b:6a:6d:d9:67:16:e8:b4:a8:87:45:66:73:1e:c3:a2:8d: 2a:1b:45:d8:22:2e:e0:68:d1:8d:54:0d:70:40:08:c4:8e:4d: ba:5d:ae:14:5f:90:18:b3:e1:ed:d7:9c:aa:99:f1:1e:88:f8: c2:43:62:e6:30:a5:c3:8b:48:fc:ed:6d:ef:53:b3:e8:41:c3: c4:2a:94:90:25:a3:4d:2a:a5:d2:f8:4c:7f:a5:f2:d5:81:86: bc:bc:66:0f:6c:8a:c9:5e:73:b6:12:91:a9:9c:85:71:e3:45: 6c:cb:fd:47:2b:96:31:e5:02:17:1c:03:c3:c3:df:d2:37:c0: 8a:8d:e1:ec:fb:17:f4:80:9c:ff:39:ca:1c:1c:3a:1d:18:cb: 59:80:cb:59:bf:4d:ab:8c:01:64:8d:99:65:23:32:8f:75:a4: f8:38:29:08:57:e4:a3:7d:b7:73:25:ea:5f:4d:35:83:11:7f: b1:bc:c2:f0:d1:9b:26:bb:1a:6c:35:f1:2e:c9:b4:b3:21:c6: 4f:35:ae:ba:f0:c4:cb:45:17:f3:f8:7d:c3:7a:77:d5:e7:b9: 2e:08:30:b0:61:e9:d1:b3:bc:3f:76:e7:21:af:39:d7:29:56: fa:42:1c:b2:01:03:ba:25:28:13:1c:42:b0:2c:5e:c1:43:f0: b6:42:ab:17 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6Wygj0vwWTkbLkDdO2Ot/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzkwN2FhMDQ2YTg4MWZiODA1MDUxOTUyMDE2MzA2MDI2MGQ3ZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycMrV4FSBi+br9aqJIH9QovRtd0S 0qQT6nsKCUdmEeC8dQTZJJGyYz1B5okfOn9Dm33W1MDjybs2wpONWxGRj94QYbZq wyLCM4LwBjQlxHeuBC/OXtX1y3m1RQ2ZPOWkIR+oJKFHRCxxbjEGFxoqPQSWNhk/ natU8QDMBshc7wC9skZxXE1I2bEb/D1ILK/q4Ywfknn42yqQguJJJK3mFgg6SWb8 nV6v2ol2pwedyfl5mmt7mGtaaTb9h61ibHYCAPaaDOHWIzv9gXhOMGm1vSL0GhKv 49EaNmeINgbeRLmORKnzYfOgy4SvHs0MrCywJumK1nDU9uKUx+lOPj7wewIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJyQeqBGqIH7gFBRlSAWMGAmDX8xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2RjYjYx My05M2ViLTRlODYtODk1Yi1iMWU2OTg3MDhmNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvZGNiNjEz LTkzZWItNGU4Ni04OTViLWIxZTY5ODcwOGY1OS8xL25KQjZvRWFvZ2Z1QVVGR1ZJ Qll3WUNZTmZ6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYCoMA0EAgACMAcDBQMqBtCAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtRDANBgkqhkiG9w0BAQsFAAOCAQEAHFtqbdlnFui0 qIdFZnMew6KNKhtF2CIu4GjRjVQNcEAIxI5Nul2uFF+QGLPh7decqpnxHoj4wkNi 5jClw4tI/O1t71Oz6EHDxCqUkCWjTSql0vhMf6Xy1YGGvLxmD2yKyV5zthKRqZyF ceNFbMv9RyuWMeUCFxwDw8Pf0jfAio3h7PsX9ICc/znKHBw6HRjLWYDLWb9Nq4wB ZI2ZZSMyj3Wk+DgpCFfko323cyXqX001gxF/sbzC8NGbJrsabDXxLsm0syHGTzWu uvDEy0UX8/h9w3p31ee5LggwsGHp0bO8P3bnIa851ylW+kIcsgEDuiUoExxCsCxe wUPwtkKrFw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:49 2026 by rpki-client