This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer (raw, json) Hash identifier: KKCPj4uEcLhRlQfy1mQRALYRbom8njBVal3ZBf1POvg= Subject key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2AA8403997D2956808B74185351BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41582 IP: 195.138.201.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:aa:84:03:99:7d:29:56:80:8b:74:18:53:51:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:c5:48:80:08:46:0d:91:18:4e:c5:da:a2: a7:32:57:a7:8a:4e:07:8d:db:06:15:f3:fc:cc:8e: f9:d7:72:8f:f3:66:4f:00:fb:d5:93:c9:57:86:19: 20:32:a6:98:d2:f5:29:26:e6:c6:c0:74:4e:bc:bc: 0c:bb:f3:e8:39:37:db:06:5a:c6:0a:97:e1:f5:24: 2d:81:1c:e7:31:d6:47:f4:9f:59:ae:c1:a1:c3:74: 3d:5a:3b:d7:b1:30:fd:e5:1c:33:b1:90:cb:28:21: 7c:ca:d3:37:a5:3a:6a:c1:10:c3:42:2c:22:55:15: 26:f2:c4:a2:fe:a8:14:c1:1d:5c:19:76:85:b0:66: 34:78:7e:4d:73:6b:41:0e:b5:39:36:75:70:68:ac: 8d:02:01:c9:0a:50:16:3e:e0:03:36:08:31:77:cb: a3:0d:91:9a:c3:3a:96:8d:15:2b:56:86:00:40:54: 21:c1:88:bc:69:a9:bc:ad:2b:f7:92:34:05:7f:af: 51:b9:ca:d6:79:71:65:7b:6e:f1:e3:94:df:91:6c: b6:7c:4f:c9:76:68:0b:eb:64:2d:8a:11:29:2b:8c: fd:1f:23:c4:09:69:aa:6f:ab:69:ae:d0:20:c7:15: e3:12:69:b6:8e:ee:d1:4d:56:04:fe:de:83:da:f8: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.201.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41582 Signature Algorithm: sha256WithRSAEncryption 00:1d:53:54:ee:9d:1c:a9:29:14:56:7d:f9:30:12:b8:a5:12: 02:22:15:1f:5a:f2:ce:0a:6a:b5:0d:d0:c3:c8:4f:9e:6f:3f: 99:9b:f7:f3:90:72:f8:14:7c:ca:dc:b2:22:8f:7f:6c:9b:7c: 00:3e:27:a1:c1:2f:77:c9:4b:ec:13:76:ac:c7:07:55:de:27: fe:a3:3c:60:bb:74:e3:21:69:a3:ca:8e:d5:5d:14:09:f6:46: e7:d7:c3:6e:f7:d1:a4:6e:8f:39:82:5e:93:ed:e7:e2:2a:71: 65:06:84:e5:6d:7a:2f:89:87:79:6a:03:7f:f0:3b:b5:d3:54: b4:d0:b3:c3:e0:5a:4b:5a:37:71:7a:c5:3b:f0:d7:0a:04:15: 3f:ca:fd:d5:35:8d:40:e7:b5:d0:ca:fe:46:25:c6:df:1e:a8: b4:15:e1:f5:7d:d3:14:4c:7c:78:3b:de:da:14:bd:18:a7:72: e4:ab:43:5c:20:1e:76:be:94:75:bc:ff:c9:a4:7c:bf:9d:9d: e4:8f:5c:13:16:c1:f7:06:d9:02:f4:29:e5:3d:a9:53:53:d3: 90:39:58:fc:8b:f5:a4:5f:5d:6b:56:ec:22:cf:f0:d0:86:fa: c2:fc:67:81:9e:fb:64:8a:da:80:1e:93:6d:f3:a4:bc:15:1e: 7a:ab:f6:ca -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4oqqEA5l9KVaAi3QYU1G/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2ZjNjJlY2RjOTFkMTE5NzljYzFkMjFhNDdjNmVjMzc4ZGZhNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOrFSIAIRg2RGE7F2qKnMlenik4H jdsGFfP8zI7513KP82ZPAPvVk8lXhhkgMqaY0vUpJubGwHROvLwMu/PoOTfbBlrG Cpfh9SQtgRznMdZH9J9ZrsGhw3Q9WjvXsTD95RwzsZDLKCF8ytM3pTpqwRDDQiwi VRUm8sSi/qgUwR1cGXaFsGY0eH5Nc2tBDrU5NnVwaKyNAgHJClAWPuADNggxd8uj DZGawzqWjRUrVoYAQFQhwYi8aam8rSv3kjQFf69RucrWeXFle27x45TfkWy2fE/J dmgL62QtihEpK4z9HyPECWmqb6tprtAgxxXjEmm2ju7RTVYE/t6D2vgrLQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJz8YuzckdEZecwdIaR8bsN436Q2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0L2EzM2Iy OS1iZWYzLTQ2MWQtODg3OC0yMTU1MTI2YjE2NDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvYTMzYjI5 LWJlZjMtNDYxZC04ODc4LTIxNTUxMjZiMTY0My8xL25QeGk3TnlSMFJsNXpCMGhw SHh1dzNqZnBEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw4rJMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCibjANBgkqhkiG9w0BAQsFAAOCAQEAAB1TVO6dHKkpFFZ9+TASuKUSAiIVH1ry zgpqtQ3Qw8hPnm8/mZv385By+BR8ytyyIo9/bJt8AD4nocEvd8lL7BN2rMcHVd4n /qM8YLt04yFpo8qO1V0UCfZG59fDbvfRpG6POYJek+3n4ipxZQaE5W16L4mHeWoD f/A7tdNUtNCzw+BaS1o3cXrFO/DXCgQVP8r91TWNQOe10Mr+RiXG3x6otBXh9X3T FEx8eDve2hS9GKdy5KtDXCAedr6Udbz/yaR8v52d5I9cExbB9wbZAvQp5T2pU1PT kDlY/Iv1pF9da1bsIs/w0Ib6wvxngZ77ZIragB6TbfOkvBUeeqv2yg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:32 2026 by rpki-client