This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer File: nRFf6cnpz97xfpJBZVksAj77KxY.cer (raw, json) Hash identifier: JEm7hglj85KEM8n9zn22TAM6+bam4QCXJZLXWfy4Vhg= Subject key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC94251DED0DC655CB044BD18C14FF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43354 IP: 91.197.28.0/22 IP: 194.45.94.0/24 IP: 2001:67c:4d0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:42:51:de:d0:dc:65:5c:b0:44:bd:18:c1:4f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:7d:1b:c4:52:5c:fe:cc:07:5f:2c:38:56: 60:a8:ac:bc:3b:e5:58:81:37:82:43:3d:d2:8c:73: c6:28:4d:65:c5:3d:b9:4f:79:56:ab:94:f1:ea:b5: 91:af:ad:29:d9:dd:2b:35:cf:b7:af:39:af:6a:13: 41:be:69:6b:1c:26:b5:c4:3d:d4:5c:a7:e5:ef:65: da:fb:a8:91:e8:fc:e5:d0:18:f9:52:61:38:d6:25: 5a:ca:ba:6d:69:17:88:e7:bd:04:df:cf:09:aa:36: 9d:78:0c:c0:9b:ff:33:6c:a1:d1:93:f7:ab:41:92: 43:cc:2c:3a:f7:f8:26:29:e1:82:d4:40:e3:04:52: db:7f:cf:e6:b1:6e:c1:d9:03:4a:f9:a6:4d:d0:d4: a1:a4:2d:23:8b:d7:fd:38:e1:11:c1:e6:88:92:bc: 75:a5:35:0d:ab:52:96:73:a1:37:f3:e3:34:ad:e8: dc:51:c1:96:05:df:9e:9a:78:70:ad:e5:60:45:ca: c1:00:ee:07:4b:66:2d:b2:eb:af:98:94:22:26:1c: e5:8d:65:32:02:10:6b:d9:6e:0e:c3:3f:3c:01:00: dd:82:0f:27:61:a8:e5:20:5c:57:f7:fb:ff:e8:49: 2b:9e:cd:5d:90:c1:c5:9f:4c:03:55:b7:76:03:30: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.28.0/22 194.45.94.0/24 IPv6: 2001:67c:4d0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43354 Signature Algorithm: sha256WithRSAEncryption 5d:fc:e7:e1:e9:1f:ab:ce:01:55:46:e4:4d:a6:9c:47:ff:6e: d9:03:15:ac:2c:4b:8a:cd:9d:53:a6:d1:64:6f:0e:35:34:27: 76:1d:41:f5:c3:f4:f4:39:6b:65:3e:eb:b0:bb:1b:b9:32:4d: e6:97:22:d6:38:e0:59:d8:5e:2d:0f:21:bb:35:46:0a:24:57: b2:41:c6:47:a7:5c:72:ec:b2:17:45:e2:a9:00:35:0a:f6:8a: df:b7:f9:63:6b:8f:da:39:94:6f:0f:ee:30:f7:03:54:0f:d4: a2:35:2a:13:42:b4:5c:20:c6:fd:fa:f3:24:8b:23:9a:d9:4b: f5:39:34:2a:2e:f6:36:1c:73:9a:28:bf:c1:9a:49:b4:b9:81: 82:93:b0:77:e0:a4:bb:5b:9c:5d:c7:dc:ec:79:7b:16:e1:ca: cd:d6:8f:4c:86:3a:43:7d:b2:c5:84:43:78:ea:61:12:09:c4: bc:be:db:f6:d6:52:8c:13:21:ac:43:e9:81:c3:70:53:33:20: 9e:85:2f:5c:7e:73:65:af:17:39:85:77:6c:e0:c3:a8:35:ba: 50:29:d8:d0:d7:b4:50:f2:17:02:b8:46:70:c2:da:29:a9:0a: 5b:3f:1b:30:65:30:24:98:ee:7b:f6:f8:13:e5:5e:0c:81:f9: f4:e1:7c:e0 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt6yUJR3tDcZVywRL0YwU/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDExNWZlOWM5ZTljZmRlZjE3ZTkyNDE2NTU5MmMwMjNlZmIyYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDZ9G8RSXP7MB18sOFZgqKy8O+VY gTeCQz3SjHPGKE1lxT25T3lWq5Tx6rWRr60p2d0rNc+3rzmvahNBvmlrHCa1xD3U XKfl72Xa+6iR6Pzl0Bj5UmE41iVayrptaReI570E388JqjadeAzAm/8zbKHRk/er QZJDzCw69/gmKeGC1EDjBFLbf8/msW7B2QNK+aZN0NShpC0ji9f9OOERweaIkrx1 pTUNq1KWc6E38+M0rejcUcGWBd+emnhwreVgRcrBAO4HS2YtsuuvmJQiJhzljWUy AhBr2W4Owz88AQDdgg8nYajlIFxX9/v/6Ekrns1dkMHFn0wDVbd2AzAEPwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFJ0RX+nJ6c/e8X6SQWVZLAI++ysWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1L2I0MTdm OC0wNzMyLTQ4YWYtYjAwYy1iYjc5N2NlN2UxMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvYjQxN2Y4 LTA3MzItNDhhZi1iMDBjLWJiNzk3Y2U3ZTEwOC8xL25SRmY2Y25wejk3eGZwSkJa VmtzQWo3N0t4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQCW8UcAwQAwi1eMA8EAgACMAkDBwAgAQZ8BNAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKlaMA0GCSqGSIb3DQEBCwUAA4IBAQBd /Ofh6R+rzgFVRuRNppxH/27ZAxWsLEuKzZ1TptFkbw41NCd2HUH1w/T0OWtlPuuw uxu5Mk3mlyLWOOBZ2F4tDyG7NUYKJFeyQcZHp1xy7LIXReKpADUK9orft/lja4/a OZRvD+4w9wNUD9SiNSoTQrRcIMb9+vMkiyOa2Uv1OTQqLvY2HHOaKL/Bmkm0uYGC k7B34KS7W5xdx9zseXsW4crN1o9MhjpDfbLFhEN46mESCcS8vtv21lKMEyGsQ+mB w3BTMyCehS9cfnNlrxc5hXds4MOoNbpQKdjQ17RQ8hcCuEZwwtopqQpbPxswZTAk mO579vgT5V4Mgfn04Xzg -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:15 2026 by rpki-client