This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer File: nT67qfosrShqyRJ2V1dF9hXo-nE.cer (raw, json) Hash identifier: ME781P6ib7DAJ8mqvXVdXMBNzsyuMPlN60aM7uwif10= Subject key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE221A77882CB6FAE5B6694F76ED17 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199996 IP: 81.30.100.0/24 IP: 185.35.176.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:22:1a:77:88:2c:b6:fa:e5:b6:69:4f:76:ed:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:5f:d0:93:12:1e:3f:af:e5:87:69:21:47: c6:2b:4c:ea:f9:f5:4f:8f:20:40:79:0c:9a:4f:24: 5b:a0:ea:56:6c:32:6f:e6:7f:d8:1f:1a:8c:e7:e9: 04:3c:75:7b:1d:c0:16:94:5b:4d:1e:18:87:a3:e7: 34:ff:f5:d2:ea:e1:cc:6c:ab:50:72:9a:28:45:13: a7:d2:62:a5:d0:43:5f:64:aa:cc:f9:aa:d4:c3:c1: 5e:f7:db:b4:b4:7b:91:43:10:f0:ef:48:89:bb:75: 3c:b6:98:e8:01:77:3b:c7:67:a1:38:21:06:11:21: 5a:c7:9d:01:19:a6:8f:74:af:41:0d:2d:0d:b1:4a: b0:93:f3:23:b7:ad:8a:1e:b6:e0:9c:dc:b9:62:3d: d0:41:dd:c8:96:64:f1:3e:6d:92:b7:eb:73:da:09: 92:04:88:eb:56:24:51:b4:7a:12:e2:80:e6:54:0c: 2c:47:ab:ae:d4:40:66:df:ee:87:64:48:eb:71:3a: 18:a4:b6:cf:ed:0f:4b:90:9b:94:e2:33:97:ba:c4: 6d:5a:d8:c0:02:9c:eb:4d:d2:cc:20:28:dc:54:d7: de:64:ca:5e:c4:d9:ed:2b:9b:82:51:46:2d:dc:2e: 6a:57:9e:cf:f3:62:3d:42:03:2d:6d:13:b3:4f:61: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.100.0/24 185.35.176.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199996 Signature Algorithm: sha256WithRSAEncryption 1b:bf:19:5b:21:e8:38:ba:f0:77:8b:4b:a2:45:bf:ee:f8:59: 9d:5b:0d:aa:c5:fe:0f:3e:85:92:e1:a8:d5:6e:6a:72:14:c1: c9:da:78:5a:84:de:8a:41:03:e9:c5:87:8c:b2:31:ce:e6:df: 26:66:46:d7:09:e4:32:c7:3f:5e:69:24:4c:8e:c6:0b:90:36: c0:48:4c:3b:dd:82:da:a3:a9:bd:a9:53:a5:c8:bc:2b:62:66: f4:bb:7f:30:83:6c:c1:c1:81:d3:48:4e:24:dd:ef:1d:7c:c6: 93:16:9a:b4:ab:0d:4c:03:95:19:2a:7a:a2:00:31:9e:d4:4b: e2:d6:b8:0a:c4:52:a7:08:32:e3:41:88:73:a0:d2:11:ef:d1: 83:56:e6:ee:b0:4b:d7:3e:ec:cb:0d:0e:cb:44:8f:82:db:88: 01:e6:4d:04:8e:d4:83:b8:d5:9d:58:ce:dd:3c:f0:f1:ad:b7: 27:02:48:a3:97:5b:ca:f4:63:a9:a4:8d:ab:9d:2d:4f:41:28: 6c:46:3c:4b:f3:68:e7:f4:d5:17:f3:9d:31:8b:32:50:ce:b5: 9b:b3:f8:95:2d:bc:4f:d1:e1:54:a8:1b:6b:71:5f:43:d7:7d: 58:f6:ac:ac:84:5a:85:58:50:46:53:6d:5d:44:83:d8:9c:8a: a7:da:b4:17 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt87iIad4gstvrltmlPdu0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDNlYmJhOWZhMmNhZDI4NmFjOTEyNzY1NzU3NDVmNjE1ZThmYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu45f0JMSHj+v5YdpIUfGK0zq+fVP jyBAeQyaTyRboOpWbDJv5n/YHxqM5+kEPHV7HcAWlFtNHhiHo+c0//XS6uHMbKtQ cpooRROn0mKl0ENfZKrM+arUw8Fe99u0tHuRQxDw70iJu3U8tpjoAXc7x2ehOCEG ESFax50BGaaPdK9BDS0NsUqwk/Mjt62KHrbgnNy5Yj3QQd3IlmTxPm2St+tz2gmS BIjrViRRtHoS4oDmVAwsR6uu1EBm3+6HZEjrcToYpLbP7Q9LkJuU4jOXusRtWtjA ApzrTdLMICjcVNfeZMpexNntK5uCUUYt3C5qV57P82I9QgMtbROzT2GMjwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFJ0+u6n6LK0oaskSdldXRfYV6PpxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzlmZjlj Ny1kMzI5LTQ1YTYtODk4YS05ZDk1OWFiY2U1MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvOWZmOWM3 LWQzMjktNDVhNi04OThhLTlkOTU5YWJjZTUyNi8xL25UNjdxZm9zclNocXlSSjJW MWRGOWhYby1uRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAUR5kAwQCuSOwMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMNPDANBgkqhkiG9w0BAQsFAAOCAQEAG78ZWyHoOLrwd4tLokW/7vhZ nVsNqsX+Dz6FkuGo1W5qchTBydp4WoTeikED6cWHjLIxzubfJmZG1wnkMsc/Xmkk TI7GC5A2wEhMO92C2qOpvalTpci8K2Jm9Lt/MINswcGB00hOJN3vHXzGkxaatKsN TAOVGSp6ogAxntRL4ta4CsRSpwgy40GIc6DSEe/Rg1bm7rBL1z7syw0Oy0SPgtuI AeZNBI7Ug7jVnVjO3Tzw8a23JwJIo5dbyvRjqaSNq50tT0EobEY8S/No5/TVF/Od MYsyUM61m7P4lS28T9HhVKgba3FfQ9d9WPasrIRahVhQRlNtXUSD2JyKp9q0Fw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:32 2026 by rpki-client