This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer (raw, json) Hash identifier: FZJQODUy/wWz6FWLp3KwAHZTvTOt0lRzKC1hW4Ebr0I= Subject key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B91CB077BF4BC224C51228A871B5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.180.164.0/22 IP: 2a0a:bc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:91:cb:07:7b:f4:bc:22:4c:51:22:8a:87:1b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:56:ed:50:79:98:a5:fd:01:a4:4b:4d:22: e1:8a:5c:71:ba:ae:f3:4d:ae:a0:7a:65:e2:a8:94: 2b:1b:e8:23:97:dc:95:83:19:e9:dc:4e:f7:12:1d: 08:bc:ef:59:9c:77:17:69:6a:d7:93:c4:28:d5:1a: c9:42:5d:7d:e2:ba:73:92:e7:aa:86:a8:6d:ab:2c: 1b:f5:bb:e5:cc:1d:60:cb:63:a6:e0:6c:f0:70:9a: 67:95:3a:31:7d:48:1e:9d:e3:c8:0f:ee:c9:22:b5: 4f:f8:03:e1:fa:b9:8a:75:59:14:60:e2:7b:a7:58: cb:32:7a:f2:36:05:4b:a4:f1:22:d3:03:26:28:c8: f6:3b:c3:31:cd:5d:72:9c:a9:70:8d:66:7d:fb:24: 3d:b9:e7:81:6d:cf:3d:d9:0b:e8:2c:09:83:39:27: 3a:64:50:0e:7f:0b:d2:11:ae:72:b3:53:e2:6e:af: 01:80:a3:30:f3:bf:3a:fa:f5:59:f3:3b:35:0f:36: ab:fd:10:a9:56:4f:0b:17:4c:23:74:ae:1a:92:31: 28:af:d9:45:26:d2:0f:37:91:c4:66:aa:17:ae:f5: b6:f5:09:9d:dd:9b:72:d7:11:16:41:bf:bf:32:1b: db:ba:fe:91:d0:eb:6b:2d:35:79:59:db:6a:d1:51: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.164.0/22 IPv6: 2a0a:bc00::/29 Signature Algorithm: sha256WithRSAEncryption 5a:6a:93:62:91:b7:d7:51:3e:65:8b:fa:f7:b6:f1:49:c5:a2: d6:e8:c4:0d:5e:dc:08:21:e3:72:e3:da:66:8a:04:1e:f5:9a: 4b:1a:52:d8:1d:41:00:e4:f8:8a:51:d6:66:48:ec:fb:50:6f: 9d:f7:97:12:65:63:c2:41:33:ef:7e:ed:9f:09:ce:53:15:36: 8e:03:52:45:c1:52:40:19:b1:78:89:16:61:72:93:72:a0:00: 19:fc:8f:8f:83:58:d1:3f:70:cb:d3:cb:e4:d8:49:c0:db:d8: da:8b:76:d5:e7:ca:01:97:62:96:35:8c:6d:52:8a:5a:69:c6: ad:40:56:b6:76:5e:44:7e:8d:1d:84:9f:be:a3:48:08:85:6c: 37:3b:4e:38:40:bf:41:52:ab:11:ea:1f:87:2b:bc:54:a7:f4: c1:32:83:4a:95:d3:db:a2:bb:71:db:66:41:e2:bd:37:36:1f: 13:2a:df:9a:1c:3e:45:13:a4:9c:1f:91:c2:0b:f7:03:47:bb: 11:35:f7:11:16:ad:e5:9b:e6:58:04:83:3e:4b:95:93:4d:d2: f5:41:4e:22:48:b4:28:c9:29:3d:52:3b:a7:05:50:87:fd:55: 6f:60:56:5c:9d:45:00:e6:07:4a:c5:c5:db:5e:85:be:86:8a: 34:b3:d2:f5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9W5HLB3v0vCJMUSKKhxtbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2E5MGU3ZGFmMTVjMTdjMWI5YWJjNTcyMTU3YmM3ZDkxN2IzOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEJW7VB5mKX9AaRLTSLhilxxuq7z Ta6gemXiqJQrG+gjl9yVgxnp3E73Eh0IvO9ZnHcXaWrXk8Qo1RrJQl194rpzkueq hqhtqywb9bvlzB1gy2Om4GzwcJpnlToxfUgenePID+7JIrVP+APh+rmKdVkUYOJ7 p1jLMnryNgVLpPEi0wMmKMj2O8MxzV1ynKlwjWZ9+yQ9ueeBbc892QvoLAmDOSc6 ZFAOfwvSEa5ys1Pibq8BgKMw8786+vVZ8zs1Dzar/RCpVk8LF0wjdK4akjEor9lF JtIPN5HEZqoXrvW29Qmd3Zty1xEWQb+/Mhvbuv6R0OtrLTV5Wdtq0VF/jQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJypDn2vFcF8G5q8VyFXvH2RezmRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzI1ZjM3 NS0xNDBmLTQ2ZTktOTY3ZS02ZTQ1OWE1OGUxZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvMjVmMzc1 LTE0MGYtNDZlOS05NjdlLTZlNDU5YTU4ZTFkNi8xL25La09mYThWd1h3Ym1yeFhJ VmU4ZlpGN09aRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbSkMA0EAgACMAcDBQMqCrwAMA0GCSqGSIb3 DQEBCwUAA4IBAQBaapNikbfXUT5li/r3tvFJxaLW6MQNXtwIIeNy49pmigQe9ZpL GlLYHUEA5PiKUdZmSOz7UG+d95cSZWPCQTPvfu2fCc5TFTaOA1JFwVJAGbF4iRZh cpNyoAAZ/I+Pg1jRP3DL08vk2EnA29jai3bV58oBl2KWNYxtUopaacatQFa2dl5E fo0dhJ++o0gIhWw3O044QL9BUqsR6h+HK7xUp/TBMoNKldPbortx22ZB4r03Nh8T Kt+aHD5FE6ScH5HCC/cDR7sRNfcRFq3lm+ZYBIM+S5WTTdL1QU4iSLQoySk9Ujun BVCH/VVvYFZcnUUA5gdKxcXbXoW+hoo0s9L1 -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:10 2026 by rpki-client