This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer File: nR_TKOt-elrN5RmPDX6b4mhHbXE.cer (raw, json) Hash identifier: PAhpkYb1yxfvvJqZ+63xOJEefXlI4rGulMsntKXStTA= Subject key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7D685C42C4A29DE71819E624B6AD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211218 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d6:85:c4:2c:4a:29:de:71:81:9e:62:4b:6a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:62:a7:cc:79:04:1e:53:46:35:28:fd:d5: af:37:01:ef:77:1f:a2:e5:c2:e1:ac:6d:1d:c8:53: cd:4a:7d:79:22:6e:dd:87:d8:54:fa:2c:f5:76:0c: 82:16:c0:64:0f:d2:58:b2:f7:a2:71:3d:a2:55:e7: d9:9d:1d:b7:14:1f:73:bc:b3:42:33:20:d3:29:c1: bc:00:68:4c:50:06:fc:f5:19:5c:0f:3c:17:c6:93: 3e:22:87:db:30:db:2a:44:cb:d7:cd:8c:af:44:66: 08:e6:4a:aa:fa:18:e7:06:b3:96:9b:3b:0c:ab:67: 74:35:e3:1e:1c:17:ef:4c:84:65:7f:40:e7:12:68: a6:9d:15:d1:a9:e5:7a:52:68:ae:8d:90:cc:32:67: 8a:2c:2e:2c:bf:56:f3:38:0e:30:8a:54:2c:e8:2e: d0:10:5d:d2:a6:9c:a1:c3:8a:da:98:b8:b8:48:2a: 44:c2:ad:d0:c2:10:1a:ba:a7:69:6d:77:d7:71:6a: 52:fb:79:56:6e:97:ba:ad:61:cd:9a:91:b9:02:ed: 87:ac:36:c5:36:21:ef:dd:ca:d0:2a:11:ac:c6:74: cc:d6:a5:a4:d9:d6:0b:57:12:9a:07:8d:14:85:18: 91:bf:96:b1:26:6d:59:ca:02:02:5a:71:e2:eb:5b: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211218 Signature Algorithm: sha256WithRSAEncryption 83:da:24:7c:cc:8c:1c:b1:44:9c:b0:98:27:b1:86:78:2f:0c: 51:87:1e:45:30:6d:35:39:c4:da:a8:1b:fa:f0:e6:84:29:8e: 0e:46:80:4e:0e:1a:ec:62:7a:9a:48:19:10:9c:2f:79:97:e9: 32:48:4f:8a:8b:57:51:03:b7:7f:3e:1d:e7:fa:fa:db:60:7d: 4e:1f:80:12:ee:ee:40:55:da:0c:4b:a4:03:b9:9e:fe:27:96: e1:86:c7:7a:bd:35:64:3c:2c:50:ef:74:c3:5a:94:11:8a:de: 6f:25:15:67:7b:79:5f:4c:13:71:a7:95:79:38:bc:5a:e3:70: f3:e7:e0:00:0f:2b:3b:9f:fe:81:b7:31:3c:05:13:31:9e:57: bd:8c:9f:83:89:84:53:d1:9e:ba:d9:a5:ec:b2:d2:2f:89:ec: 97:51:66:80:fb:15:d3:35:32:68:22:bc:7d:30:b4:0c:c5:df: 8f:28:f0:3a:58:23:c2:0e:7f:79:89:23:48:00:6f:82:91:d4: 26:55:51:93:a3:10:e0:b0:d9:c6:14:00:bb:a6:51:28:2e:65: dc:df:a5:f4:c2:2e:6f:5c:c4:b9:25:e9:93:20:5f:b8:19:de: 38:cf:51:bb:11:e5:4c:6f:64:7f:0c:c3:9f:cf:12:14:8b:d2: d2:17:18:9b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6x9aFxCxKKd5xgZ5iS2rQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDFmZDMyOGViN2U3YTVhY2RlNTE5OGYwZDdlOWJlMjY4NDc2ZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqutip8x5BB5TRjUo/dWvNwHvdx+i 5cLhrG0dyFPNSn15Im7dh9hU+iz1dgyCFsBkD9JYsveicT2iVefZnR23FB9zvLNC MyDTKcG8AGhMUAb89RlcDzwXxpM+IofbMNsqRMvXzYyvRGYI5kqq+hjnBrOWmzsM q2d0NeMeHBfvTIRlf0DnEmimnRXRqeV6UmiujZDMMmeKLC4sv1bzOA4wilQs6C7Q EF3Sppyhw4ramLi4SCpEwq3QwhAauqdpbXfXcWpS+3lWbpe6rWHNmpG5Au2HrDbF NiHv3crQKhGsxnTM1qWk2dYLVxKaB40UhRiRv5axJm1ZygICWnHi61uluwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJ0f0yjrfnpazeUZjw1+m+JoR21xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzBjM2Qx Yi1mYzIzLTQxZmItYWY5Yy1hMTYzZjU3M2I2ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMGMzZDFi LWZjMjMtNDFmYi1hZjljLWExNjNmNTczYjZkOS8xL25SX1RLT3QtZWxyTjVSbVBE WDZiNG1oSGJYRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM5EjANBgkqhkiG9w0BAQsFAAOCAQEAg9okfMyMHLFE nLCYJ7GGeC8MUYceRTBtNTnE2qgb+vDmhCmODkaATg4a7GJ6mkgZEJwveZfpMkhP iotXUQO3fz4d5/r622B9Th+AEu7uQFXaDEukA7me/ieW4YbHer01ZDwsUO90w1qU EYrebyUVZ3t5X0wTcaeVeTi8WuNw8+fgAA8rO5/+gbcxPAUTMZ5XvYyfg4mEU9Ge utml7LLSL4nsl1FmgPsV0zUyaCK8fTC0DMXfjyjwOlgjwg5/eYkjSABvgpHUJlVR k6MQ4LDZxhQAu6ZRKC5l3N+l9MIub1zEuSXpkyBfuBneOM9RuxHlTG9kfwzDn88S FIvS0hcYmw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:37 2026 by rpki-client