This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer File: nRfZOI52MabRmvsrJkJ5WiTIQIE.cer (raw, json) Hash identifier: xVRLDW4TRrJ6JcpfO42xx8GTzx26/eC7EsDO2/0wzYM= Subject key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A733FAF14A86F43C65BA4B070D201 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203927 IP: 185.119.204.0/22 IP: 2a06:8c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:73:3f:af:14:a8:6f:43:c6:5b:a4:b0:70:d2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d17d9388e7631a6d19afb2b2642795a24c84081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:3f:f9:1f:dd:07:e7:d2:75:81:23:38:7e: 57:20:05:30:53:2b:d5:27:99:76:db:c6:40:f8:17: da:35:bc:a7:2c:06:5f:7b:1d:6f:92:b0:86:a7:e8: d3:b3:62:0a:25:9b:60:4e:9a:a7:ec:e9:6d:8f:1d: ae:73:8f:0d:05:a7:ba:7d:ca:f5:99:6a:9b:f8:c9: da:23:5c:f5:13:4b:73:23:c7:ad:7d:b6:7c:2c:ae: f1:60:3f:59:e2:24:e4:0f:57:ab:2f:af:0d:9c:7d: 82:1d:5f:ac:07:84:12:6a:3a:09:ea:dd:66:70:9b: f1:7a:84:89:4d:28:84:5b:27:48:ab:63:41:eb:8b: 80:19:9c:dd:3d:bc:07:b3:16:a1:ae:0f:ad:33:23: 33:4a:5d:21:d1:7c:b7:e6:c2:a3:07:b9:f2:09:d0: 23:e8:39:79:d5:d7:3a:c0:e2:df:e3:45:1e:71:d7: 9b:26:6d:d2:6f:6c:cc:fa:88:fe:48:94:69:c3:bb: 61:a0:40:9a:09:5a:5f:b9:2f:3c:04:93:c9:72:3c: db:82:7d:07:a7:5e:bb:17:40:8e:10:9b:a5:97:a4: cc:c2:a3:61:0d:ab:a2:ae:d6:e4:08:f2:c8:2a:66: bb:47:ce:aa:ef:22:69:86:8b:06:3f:c8:ac:dd:1d: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.204.0/22 IPv6: 2a06:8c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203927 Signature Algorithm: sha256WithRSAEncryption 4a:66:db:f9:fd:63:87:a6:37:0e:d9:a4:6a:18:35:81:52:32: d0:8f:96:2b:2d:74:58:05:2d:df:1a:b0:2f:19:a3:82:cf:a6: 6c:dd:c6:50:03:e1:eb:8a:77:f1:a1:79:76:85:17:18:81:52: ee:c7:98:bc:45:08:6d:f2:fb:2a:da:7c:56:20:3c:38:7d:e8: ed:bd:6b:df:26:0b:c9:d8:f9:c1:e7:b5:fb:d2:c6:23:07:df: c5:71:a2:04:7e:13:77:06:9f:63:50:4d:cf:b8:0b:14:35:33: 43:f4:06:89:c5:f7:57:a8:c3:7a:58:78:14:71:6c:af:21:5f: 73:89:95:42:0f:33:6a:5c:91:f2:a2:5d:1f:18:fc:14:ad:b5: fa:43:bf:6a:b3:cc:75:15:92:19:31:d5:aa:7f:4c:73:10:2a: 3f:b2:d2:e2:b7:fa:77:55:cb:25:1f:4b:8c:b3:d2:c8:e7:ec: 61:a7:8a:6e:3c:19:60:20:e8:ca:98:13:e7:a0:5c:9e:06:85: bc:fa:12:e5:df:9b:76:4e:66:83:8c:58:6b:38:6b:da:c9:99: 97:6b:a0:14:18:f5:35:d5:55:0c:62:bc:f6:35:b3:1a:b4:6c: ee:5f:e8:38:a7:7c:67:c0:71:20:d5:ca:4c:3d:da:5b:d3:9c: ee:52:de:00 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WnM/rxSob0PGW6SwcNIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDE3ZDkzODhlNzYzMWE2ZDE5YWZiMmIyNjQyNzk1YTI0Yzg0MDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob0/+R/dB+fSdYEjOH5XIAUwUyvV J5l228ZA+BfaNbynLAZfex1vkrCGp+jTs2IKJZtgTpqn7Oltjx2uc48NBae6fcr1 mWqb+MnaI1z1E0tzI8etfbZ8LK7xYD9Z4iTkD1erL68NnH2CHV+sB4QSajoJ6t1m cJvxeoSJTSiEWydIq2NB64uAGZzdPbwHsxahrg+tMyMzSl0h0Xy35sKjB7nyCdAj 6Dl51dc6wOLf40UecdebJm3Sb2zM+oj+SJRpw7thoECaCVpfuS88BJPJcjzbgn0H p167F0COEJull6TMwqNhDauirtbkCPLIKma7R86q7yJphosGP8is3R2RjQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJ0X2TiOdjGm0Zr7KyZCeVokyECBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzZlODQ0 NC04ZGE1LTQ2NmItODQwMC03YmQ5NmQ5YzYyODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNmU4NDQ0 LThkYTUtNDY2Yi04NDAwLTdiZDk2ZDljNjI4Ni8xL25SZlpPSTUyTWFiUm12c3JK a0o1V2lUSVFJRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXfMMA0EAgACMAcDBQMqBowAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMclzANBgkqhkiG9w0BAQsFAAOCAQEASmbb+f1jh6Y3 Dtmkahg1gVIy0I+WKy10WAUt3xqwLxmjgs+mbN3GUAPh64p38aF5doUXGIFS7seY vEUIbfL7Ktp8ViA8OH3o7b1r3yYLydj5wee1+9LGIwffxXGiBH4TdwafY1BNz7gL FDUzQ/QGicX3V6jDelh4FHFsryFfc4mVQg8zalyR8qJdHxj8FK21+kO/arPMdRWS GTHVqn9McxAqP7LS4rf6d1XLJR9LjLPSyOfsYaeKbjwZYCDoypgT56BcngaFvPoS 5d+bdk5mg4xYazhr2smZl2ugFBj1NdVVDGK89jWzGrRs7l/oOKd8Z8BxINXKTD3a W9Oc7lLeAA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:55 2026 by rpki-client