This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer File: nOlHV6w_cLQPNpMH02XryWV7q2k.cer (raw, json) Hash identifier: 5mDsJEAmKMdYjnNJomAIkW3yS0elvJZkttaOTMChAuM= Subject key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77590D44A3B4E914711B2CC9FB189916 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34542 IP: 156.28.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0d:44:a3:b4:e9:14:71:1b:2c:c9:fb:18:99:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e1:5c:e7:a6:95:1e:b7:1d:c2:c9:5a:cb:7b: a4:c4:2d:7f:a3:6e:8c:98:6c:c5:d6:93:b6:54:89: cb:21:11:ab:65:b5:55:89:a4:70:22:25:be:c2:ea: 1f:67:9b:cf:fa:be:d9:22:10:76:50:14:63:25:1e: bd:fb:a5:49:97:c7:22:b0:ca:9d:97:14:19:39:ce: d0:4f:40:26:85:b9:38:aa:1b:7b:2a:69:3e:c5:12: d1:4a:86:ca:f0:ac:f6:be:5a:7c:d1:b4:1e:87:2b: 67:6a:47:e6:e6:94:33:19:ca:9c:25:7c:72:d1:d7: 7f:47:35:a8:9e:ec:db:48:d5:71:7d:7c:9a:64:5c: 6d:ed:65:ab:3d:08:49:1a:4b:ab:5a:ca:57:66:ee: 77:d8:02:3f:2e:97:d1:c8:d5:ce:45:4b:2a:a2:b4: e1:13:e3:d4:54:1b:34:76:bd:69:be:83:07:89:07: 7d:ce:ad:f5:88:3e:62:32:62:4c:94:40:10:45:92: cf:53:6c:33:47:3f:98:b2:98:50:3a:71:fd:67:ff: 5b:0c:a5:01:c1:df:8c:a3:8a:f2:9c:8a:78:1e:9a: 89:a7:74:3d:60:64:88:b1:61:ea:7d:a7:72:44:01: 0f:c5:15:3d:e3:fd:25:92:df:5e:eb:cd:14:a7:e0: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.28.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34542 Signature Algorithm: sha256WithRSAEncryption 2e:3c:99:4b:fb:0c:5d:ca:e1:28:12:af:f5:e9:2e:52:ec:1c: 9c:f8:bd:6c:18:06:11:3b:c5:6b:8d:c2:4f:1e:c4:76:92:d4: f1:4d:7c:70:ad:49:d4:cd:f0:81:e9:b5:71:65:ff:98:1e:65: ec:4e:0a:a5:f2:dc:60:53:27:2a:d6:61:57:5a:ec:a7:88:4a: e9:bc:8f:80:76:56:ec:92:3d:4f:85:1d:f7:ed:96:6b:f4:59: 74:88:4a:fa:40:f0:b9:a4:3c:6a:a9:92:8a:a5:67:70:65:e2: 46:21:5a:fe:1a:87:f7:3d:a9:6f:50:cc:5d:64:91:69:ec:7c: 46:8f:ce:b1:8a:e2:ae:94:8d:42:bd:8a:56:f5:93:14:fb:a0: 1d:62:60:1a:2d:4a:ee:c2:7a:9c:d8:3d:e9:22:0d:0d:95:b4: 77:03:24:f9:40:17:b1:96:b3:33:4c:af:e0:f1:16:51:9e:4d: ac:04:e5:01:90:d0:ca:83:10:c1:3c:78:ad:ac:e9:80:78:fe: 9f:a7:6f:c0:9e:4a:ad:71:14:2c:d9:1b:9b:ac:fc:9c:ff:5d: ca:5b:bb:4c:51:93:d2:aa:01:b1:21:11:05:13:31:c4:5f:52: 8f:10:fc:b8:a2:2c:a4:07:97:22:8d:f2:45:fc:35:a6:dd:c9: fd:eb:39:67 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3WQ1Eo7TpFHEbLMn7GJkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2U5NDc1N2FjM2Y3MGI0MGYzNjkzMDdkMzY1ZWJjOTY1N2JhYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+Fc56aVHrcdwslay3ukxC1/o26M mGzF1pO2VInLIRGrZbVViaRwIiW+wuofZ5vP+r7ZIhB2UBRjJR69+6VJl8cisMqd lxQZOc7QT0Amhbk4qht7Kmk+xRLRSobK8Kz2vlp80bQehytnakfm5pQzGcqcJXxy 0dd/RzWonuzbSNVxfXyaZFxt7WWrPQhJGkurWspXZu532AI/LpfRyNXORUsqorTh E+PUVBs0dr1pvoMHiQd9zq31iD5iMmJMlEAQRZLPU2wzRz+YsphQOnH9Z/9bDKUB wd+Mo4rynIp4HpqJp3Q9YGSIsWHqfadyRAEPxRU94/0lkt9e680Up+C9uQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFJzpR1esP3C0DzaTB9Nl68lle6tpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzQ4MTI2 OS1kYmRiLTQyNWUtOTY0Mi1lMWVhNDFjOWEyZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNDgxMjY5 LWRiZGItNDI1ZS05NjQyLWUxZWE0MWM5YTJlNi8xL25PbEhWNndfY0xRUE5wTUgw MlhyeVdWN3Eyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAnBwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIbuMA0GCSqGSIb3DQEBCwUAA4IBAQAuPJlL+wxdyuEoEq/16S5S7Byc+L1sGAYR O8VrjcJPHsR2ktTxTXxwrUnUzfCB6bVxZf+YHmXsTgql8txgUycq1mFXWuyniErp vI+Adlbskj1PhR337ZZr9Fl0iEr6QPC5pDxqqZKKpWdwZeJGIVr+Gof3PalvUMxd ZJFp7HxGj86xiuKulI1CvYpW9ZMU+6AdYmAaLUruwnqc2D3pIg0NlbR3AyT5QBex lrMzTK/g8RZRnk2sBOUBkNDKgxDBPHitrOmAeP6fp2/AnkqtcRQs2RubrPyc/13K W7tMUZPSqgGxIREFEzHEX1KPEPy4oiykB5cijfJF/DWm3cn96zln -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:13 2026 by rpki-client