This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer File: nPYI_632AAge6SIpjksq6Wr_SOg.cer (raw, json) Hash identifier: gbnXX3tS00jtFt/g4pnmldGBAlRHlSPS1wCYxbZnWmQ= Subject key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7C3FE4E88805553A909ECD99AF1A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208526 IP: 45.131.124.0/22 IP: 2a0e:6040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c3:fe:4e:88:80:55:53:a9:09:ec:d9:9a:f1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:00:6b:26:c7:41:f2:31:18:cc:43:4d:5c: d2:af:22:bf:38:9a:fa:ba:55:c2:09:d4:eb:3b:38: 0c:bd:72:8e:fa:39:85:05:b2:e1:c5:8b:b6:9d:01: 62:97:d5:ca:6b:0e:0f:8b:01:83:3d:29:5e:0e:db: 3d:4b:8b:5f:63:c4:26:36:14:06:36:31:59:b8:9d: 43:e6:11:fd:58:ae:d4:10:a5:f0:9a:8a:ca:fb:05: b1:a2:2c:60:ca:01:cd:e9:d0:a8:aa:3e:62:1b:8d: df:72:98:69:3e:fa:a2:36:9e:83:69:80:ac:79:ce: 7d:05:dc:29:81:bd:14:47:e9:0f:e6:19:b0:39:b7: 43:99:4c:22:68:5e:64:97:1c:c3:57:87:31:60:14: 31:08:68:9a:54:28:e2:b7:9b:6d:a4:78:ca:bc:2c: cc:ab:9d:35:a9:fc:74:2a:86:3b:d3:78:7d:f0:4e: 61:e6:1a:4c:a0:81:ee:6a:bf:e1:d9:8c:b6:94:b8: 68:58:de:83:1d:66:ee:86:26:b4:e8:d6:f4:09:1e: e2:25:23:29:ff:3b:8b:7b:e1:17:9a:47:25:0e:e7: 30:0a:f5:d0:41:4b:a0:98:fc:2b:b7:3e:06:a4:f4: 6e:01:45:34:2c:ef:0b:ef:f9:23:03:0b:db:7c:6c: d6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.124.0/22 IPv6: 2a0e:6040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208526 Signature Algorithm: sha256WithRSAEncryption 6d:31:00:6d:a0:5f:e3:bb:74:66:4b:29:30:58:f3:b3:e7:95: f4:20:15:8d:9d:61:cc:5f:c4:2f:10:32:33:82:e5:26:50:af: 92:92:cd:63:86:f1:2f:4a:5c:0f:ce:01:7e:ff:01:89:2d:10: 53:b4:63:19:b9:6d:57:73:9f:1b:c6:e7:44:51:eb:98:28:62: 1a:14:4f:34:24:73:43:b6:d9:e9:0b:7c:f8:97:9d:ec:99:62: d8:83:fa:2d:d0:10:cc:1d:98:0a:f2:a4:6e:8b:47:ae:61:c3: 13:00:10:8b:78:3a:60:aa:04:33:ca:26:c7:af:fa:cc:f9:0d: 86:ea:01:d0:20:d3:71:98:c5:6a:b2:fc:f8:ea:b7:7e:ed:1b: 3d:ce:e0:7d:cd:0f:35:c2:29:96:2c:5c:5f:ff:56:92:2a:68: fe:31:67:b6:b8:8c:14:9b:0b:e4:bc:51:92:fa:5f:c4:b5:7a: 06:3a:d3:3f:a2:98:02:a9:56:8b:30:c4:1d:a7:e4:3b:59:a2: 5d:45:08:d8:d5:72:a1:a7:cc:a8:8a:ad:ea:7f:2d:11:2e:aa: d6:27:fc:3b:6d:4b:cf:66:ab:a5:e8:94:9c:c4:cd:c2:a5:7d: 12:b3:aa:40:d3:67:b7:83:3a:b6:25:0c:c8:8d:45:c3:be:dd: a1:3a:61:54 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x8P+ToiAVVOpCezZmvGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2Y2MDhmZmFkZjYwMDA4MWVlOTIyMjk4ZTRiMmFlOTZhZmY0OGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qIAaybHQfIxGMxDTVzSryK/OJr6 ulXCCdTrOzgMvXKO+jmFBbLhxYu2nQFil9XKaw4PiwGDPSleDts9S4tfY8QmNhQG NjFZuJ1D5hH9WK7UEKXwmorK+wWxoixgygHN6dCoqj5iG43fcphpPvqiNp6DaYCs ec59Bdwpgb0UR+kP5hmwObdDmUwiaF5klxzDV4cxYBQxCGiaVCjit5ttpHjKvCzM q501qfx0KoY703h98E5h5hpMoIHuar/h2Yy2lLhoWN6DHWbuhia06Nb0CR7iJSMp /zuLe+EXmkclDucwCvXQQUugmPwrtz4GpPRuAUU0LO8L7/kjAwvbfGzWJQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJz2CP+t9gAIHukiKY5LKulq/0joMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2Q0NWYx MS02N2MyLTQ3YTUtOTk2Yy04OTFlYjU0OGI4OTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvZDQ1ZjEx LTY3YzItNDdhNS05OTZjLTg5MWViNTQ4Yjg5MS8xL25QWUlfNjMyQUFnZTZTSXBq a3NxNldyX1NPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYN8MA0EAgACMAcDBQMqDmBAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMujjANBgkqhkiG9w0BAQsFAAOCAQEAbTEAbaBf47t0 ZkspMFjzs+eV9CAVjZ1hzF/ELxAyM4LlJlCvkpLNY4bxL0pcD84Bfv8BiS0QU7Rj GbltV3OfG8bnRFHrmChiGhRPNCRzQ7bZ6Qt8+Jed7Jli2IP6LdAQzB2YCvKkbotH rmHDEwAQi3g6YKoEM8omx6/6zPkNhuoB0CDTcZjFarL8+Oq3fu0bPc7gfc0PNcIp lixcX/9Wkipo/jFntriMFJsL5LxRkvpfxLV6BjrTP6KYAqlWizDEHafkO1miXUUI 2NVyoafMqIqt6n8tES6q1if8O21Lz2arpeiUnMTNwqV9ErOqQNNnt4M6tiUMyI1F w77doTphVA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:29 2026 by rpki-client