This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer File: nOTmWuzJXURqDLZAuXZvoPgVDjw.cer (raw, json) Hash identifier: df1H0HkXJp3HjAOHjjCyL8DN8p/26T1tYznMeHhClho= Subject key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8DFAE2B8162047924B3722F80F4B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30882 IP: 79.171.240.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:df:ae:2b:81:62:04:79:24:b3:72:2f:80:f4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:cb:83:4e:fa:df:5d:e0:fe:36:b9:2b:84: 13:bb:2b:5f:80:b1:a1:a5:ea:cb:63:57:8e:a6:23: bb:04:31:5e:06:ac:11:d7:de:e8:21:8a:fa:20:62: 96:bc:88:7d:c6:6d:ae:d6:bb:b7:b3:6b:41:be:4e: 45:b0:ce:4e:ba:7b:f0:b0:d4:d9:e0:f9:d8:ab:b7: 59:ef:0f:d7:8a:6d:44:40:11:42:04:12:ce:e8:69: 10:33:eb:6b:b4:5e:1f:49:db:aa:88:f7:03:d2:50: c7:24:ab:4d:1d:60:d2:1b:4e:13:1a:3e:80:87:11: ec:c7:58:50:14:e4:81:74:1d:b1:9f:e0:85:d9:92: d3:fc:cd:6e:0b:c2:8f:f3:fe:72:cb:bf:c6:d1:39: fd:cb:d0:3b:d0:46:45:e8:06:69:5e:ed:2f:d1:03: 2b:9c:23:14:e7:a2:e2:95:99:9f:a0:85:36:17:eb: ff:ef:ed:c8:9b:ed:1b:2e:16:26:3b:6f:c2:28:e1: 7e:f4:8b:16:7b:5f:99:e3:c1:27:a2:18:75:cf:26: 63:9d:07:44:19:1e:11:22:07:86:f6:f6:15:59:78: 93:41:bc:7d:6c:73:79:78:aa:64:9e:12:2a:4e:12: e0:93:68:94:72:bc:9e:75:49:fa:cc:00:8a:5b:c2: 5e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.240.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30882 Signature Algorithm: sha256WithRSAEncryption 79:47:52:f7:db:51:f6:61:f8:2b:15:64:7e:f9:cb:28:a1:15: 75:fb:69:9d:7b:e0:10:ee:dc:0d:f1:69:5c:69:19:16:04:e9: 59:d7:f4:ec:61:59:78:1e:d0:94:04:37:91:3c:c3:9e:f1:14: 74:6a:a5:86:b6:70:5f:d0:57:d2:d9:b8:8b:c8:90:20:4b:e0: e3:af:c0:d6:37:c7:dd:9f:0c:b2:4e:c5:31:5c:a5:bb:02:f9: 37:1e:f1:52:b1:2f:49:03:69:34:a2:fd:08:b3:ab:50:1e:9c: fc:3a:06:f2:d0:f4:b1:c3:fa:c5:d9:ee:e2:30:0d:de:e4:fe: 81:b3:03:9d:d8:9d:ba:29:48:9f:8c:c0:90:d0:ba:b5:75:f4: 3c:06:08:d4:af:b5:a8:69:c2:23:2d:cb:c6:f5:9a:10:d1:74: 24:20:30:49:04:89:b4:60:0a:36:c1:e5:e7:a1:f0:c8:7b:8b: c0:36:4e:b0:83:27:89:d3:33:cd:ac:14:6c:d4:8c:94:ce:5c: 8f:20:af:a9:55:e1:a3:ab:ff:c1:32:b9:5c:d6:5c:fe:7a:72: ff:e3:9b:12:b3:b9:71:cd:e1:78:2c:ec:00:09:5a:45:4e:20: e1:a5:15:cd:18:44:2b:8c:19:b0:8d:f1:40:06:dd:15:91:e3: 01:c7:cd:09 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6yN+uK4FiBHkks3IvgPS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2U0ZTY1YWVjYzk1ZDQ0NmEwY2I2NDBiOTc2NmZhMGY4MTUwZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pPLg076313g/ja5K4QTuytfgLGh perLY1eOpiO7BDFeBqwR197oIYr6IGKWvIh9xm2u1ru3s2tBvk5FsM5OunvwsNTZ 4PnYq7dZ7w/Xim1EQBFCBBLO6GkQM+trtF4fSduqiPcD0lDHJKtNHWDSG04TGj6A hxHsx1hQFOSBdB2xn+CF2ZLT/M1uC8KP8/5yy7/G0Tn9y9A70EZF6AZpXu0v0QMr nCMU56LilZmfoIU2F+v/7+3Im+0bLhYmO2/CKOF+9IsWe1+Z48Enohh1zyZjnQdE GR4RIgeG9vYVWXiTQbx9bHN5eKpknhIqThLgk2iUcryedUn6zACKW8JevQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFJzk5lrsyV1Eagy2QLl2b6D4FQ48MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2VkNGUy Yy1lNWFkLTQxN2EtODc4OC0xMTgyNDQwNmJkNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZWQ0ZTJj LWU1YWQtNDE3YS04Nzg4LTExODI0NDA2YmQ1ZC8xL25PVG1XdXpKWFVScURMWkF1 WFp2b1BnVkRqdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDT6vwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AniiMA0GCSqGSIb3DQEBCwUAA4IBAQB5R1L321H2YfgrFWR++csooRV1+2mde+AQ 7twN8WlcaRkWBOlZ1/TsYVl4HtCUBDeRPMOe8RR0aqWGtnBf0FfS2biLyJAgS+Dj r8DWN8fdnwyyTsUxXKW7Avk3HvFSsS9JA2k0ov0Is6tQHpz8Ogby0PSxw/rF2e7i MA3e5P6BswOd2J26KUifjMCQ0Lq1dfQ8BgjUr7WoacIjLcvG9ZoQ0XQkIDBJBIm0 YAo2weXnofDIe4vANk6wgyeJ0zPNrBRs1IyUzlyPIK+pVeGjq//BMrlc1lz+enL/ 45sSs7lxzeF4LOwACVpFTiDhpRXNGEQrjBmwjfFABt0VkeMBx80J -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:23 2026 by rpki-client