This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer File: nSBC44DWR2UTrMCPtU-8xzYm7D0.cer (raw, json) Hash identifier: NTW1OVp7fyiBbld5piaRbjoXUd3VmpfZQwBLqvZjpbA= Subject key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7FDE495929C0290E72A9469F04A55 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.196.45.0/24 IP: 2a14:1980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:fd:e4:95:92:9c:02:90:e7:2a:94:69:f0:4a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:e8:53:74:e4:9d:62:51:75:eb:1d:a7:18: 52:cb:58:dd:84:a9:67:ab:ef:1e:c4:89:ca:d3:4d: a3:7b:7e:b3:b2:a3:28:0c:ec:f1:f5:61:1b:28:00: f0:6e:f2:dc:bb:63:34:78:4c:a0:b9:e8:70:94:a1: be:b1:84:f8:77:68:9a:51:34:21:ce:ff:6d:a6:86: 3b:b8:59:f2:1f:3e:c3:c9:b6:48:53:f7:28:b4:3d: 43:44:25:e7:89:4d:3b:f7:9f:08:30:63:1e:b5:70: 69:ad:5b:97:58:11:6a:ca:8c:e6:1e:56:1b:d2:3d: 27:a3:f4:29:2b:26:e4:a8:50:67:20:cb:69:ed:5e: 1f:c2:96:28:7f:76:f0:1a:40:54:9c:6b:67:e7:6f: 03:9a:c0:31:0b:94:08:1e:87:5c:d6:ca:c0:1d:fd: 94:2c:07:f6:79:ab:c6:45:cd:9c:7f:93:79:17:ad: 34:e4:10:68:11:36:fd:14:6c:1d:f7:0a:78:04:c0: 39:4f:e6:e9:2c:27:09:44:7e:e4:b6:65:53:e6:7f: 58:3a:88:20:c7:2a:e6:f5:a3:c9:d5:43:27:87:ce: 0a:d1:92:9f:2e:30:45:dd:b0:a5:96:60:27:29:e2: 94:da:92:76:34:79:d3:2f:eb:46:74:ca:05:91:b0: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.45.0/24 IPv6: 2a14:1980::/29 Signature Algorithm: sha256WithRSAEncryption 70:ce:59:82:df:33:10:8f:f2:df:f6:77:2e:89:a7:0e:66:3d: 5f:f6:4b:19:5c:d1:9e:15:bc:1a:b8:f6:33:a8:f8:73:91:39: 21:59:c5:bb:58:53:49:70:5c:d9:09:98:10:f5:d0:64:e1:5f: 0d:cb:b9:67:4e:8e:61:7c:e3:87:53:c0:bd:a0:52:d1:6c:aa: e4:c5:0a:08:43:98:c9:6f:ca:7d:6b:a9:b2:90:26:e7:a0:12: 7d:ef:ea:c4:ba:0b:e7:ff:8f:17:be:ea:61:87:b3:47:33:c1: 0b:16:54:72:1c:cb:70:9d:56:79:fb:ee:7f:f1:26:ee:5d:4d: 77:a0:5a:90:eb:43:ad:02:c0:98:5a:fa:3b:2e:7e:af:26:d0: 60:aa:03:d4:30:1f:75:99:16:3e:1a:6d:37:0c:47:8c:bf:30: 8e:fe:08:b4:a1:ec:49:af:21:35:11:d0:c8:dc:97:4a:46:2e: 07:39:90:ed:41:9a:39:11:96:7c:68:f6:f0:79:6e:52:28:e2: bc:5a:c5:bf:bb:a8:49:03:ec:a7:74:b8:b7:55:b8:85:01:69: 28:04:7c:ab:86:32:a2:d8:43:ef:d6:5f:c9:20:ed:14:87:bf: ea:93:eb:1c:39:34:1a:7f:81:b7:e8:71:b7:bd:62:1e:57:26: ea:88:b0:ae -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6x/3klZKcApDnKpRp8EpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDIwNDJlMzgwZDY0NzY1MTNhY2MwOGZiNTRmYmNjNzM2MjZlYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV/oU3TknWJRdesdpxhSy1jdhKln q+8exInK002je36zsqMoDOzx9WEbKADwbvLcu2M0eEyguehwlKG+sYT4d2iaUTQh zv9tpoY7uFnyHz7DybZIU/cotD1DRCXniU07958IMGMetXBprVuXWBFqyozmHlYb 0j0no/QpKybkqFBnIMtp7V4fwpYof3bwGkBUnGtn528DmsAxC5QIHodc1srAHf2U LAf2eavGRc2cf5N5F6005BBoETb9FGwd9wp4BMA5T+bpLCcJRH7ktmVT5n9YOogg xyrm9aPJ1UMnh84K0ZKfLjBF3bCllmAnKeKU2pJ2NHnTL+tGdMoFkbAhqwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJ0gQuOA1kdlE6zAj7VPvMc2Juw9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzAwMjcx Ni1hMjU3LTQ1NjgtYmYwNy1kZWQzODYyYjc2MzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMDAyNzE2 LWEyNTctNDU2OC1iZjA3LWRlZDM4NjJiNzYzMS8xL25TQkM0NERXUjJVVHJNQ1B0 VS04eHpZbTdEMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAucQtMA0EAgACMAcDBQMqFBmAMA0GCSqGSIb3 DQEBCwUAA4IBAQBwzlmC3zMQj/Lf9ncuiacOZj1f9ksZXNGeFbwauPYzqPhzkTkh WcW7WFNJcFzZCZgQ9dBk4V8Ny7lnTo5hfOOHU8C9oFLRbKrkxQoIQ5jJb8p9a6my kCbnoBJ97+rEugvn/48Xvuphh7NHM8ELFlRyHMtwnVZ5++5/8SbuXU13oFqQ60Ot AsCYWvo7Ln6vJtBgqgPUMB91mRY+Gm03DEeMvzCO/gi0oexJryE1EdDI3JdKRi4H OZDtQZo5EZZ8aPbweW5SKOK8WsW/u6hJA+yndLi3VbiFAWkoBHyrhjKi2EPv1l/J IO0Uh7/qk+scOTQaf4G36HG3vWIeVybqiLCu -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:41 2026 by rpki-client