This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer (raw, json) Hash identifier: Hf0s+9I58C8BJ33ucyoz+O6fqv1fiTnCGWq2Atflvng= Subject key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB3C7F8BA5CDB66E8ECE60B21B48F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59597 IP: 5.179.72.0/21 IP: 185.14.140.0/22 IP: 2a01:9540::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3c:7f:8b:a5:cd:b6:6e:8e:ce:60:b2:1b:48:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d5a17271d99cf15b73ecc658673143c28e207ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:ff:20:e1:e6:80:39:66:bd:a8:89:65:dd: c6:23:df:5a:ef:c4:01:01:91:2b:5b:ed:0e:14:b0: 6c:39:86:53:0b:62:5d:65:52:7e:20:ee:4a:29:4f: eb:8a:02:7a:19:29:8f:2a:b1:bd:8f:4b:fa:d7:e4: e2:fe:ab:af:56:8e:f5:79:22:ef:6e:5b:6c:e1:39: 15:73:1a:6f:a0:fb:fc:7f:c1:ef:6f:da:02:69:ab: 1d:24:84:63:d2:d6:dc:f4:0b:1a:a1:b3:66:47:61: c4:6b:de:68:9c:47:ad:0b:8d:d8:f9:4d:55:c4:cb: 7a:01:bd:21:b1:60:9f:d4:27:54:c8:b8:d8:fe:d5: 91:8d:b8:86:e1:cc:ef:4c:23:15:9f:f2:01:a1:92: 06:77:0d:25:77:c1:79:8e:cc:dc:df:ae:7c:2c:26: ec:c3:d7:6b:70:e7:5b:6c:3a:44:b8:d4:42:54:2d: b9:cc:e7:73:01:d4:1e:2d:69:4c:f3:3f:f7:49:ef: 67:a5:4d:46:bf:ea:2b:5a:22:2a:8f:dc:d7:3c:a2: 66:1d:80:75:df:dd:6c:2d:cd:36:7d:8b:aa:f8:1b: 56:58:b0:9d:66:c2:2d:35:88:58:8b:16:d9:05:a6: e7:1a:f8:74:7e:5a:96:02:7b:cf:4b:26:ad:92:44: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.179.72.0/21 185.14.140.0/22 IPv6: 2a01:9540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59597 Signature Algorithm: sha256WithRSAEncryption 7f:d3:90:a1:ee:d3:a0:54:fa:30:16:3d:fe:5a:d4:05:46:c0: 00:9b:43:56:48:52:9c:9e:ba:3f:ad:12:6a:76:1d:b7:43:a1: a3:05:54:eb:d9:3a:11:67:be:87:4a:66:8e:57:0c:de:fd:3f: f4:4b:e9:54:4c:22:96:b5:43:07:89:7a:78:43:98:95:8b:b6: f7:2c:2b:cf:b8:7a:b9:9d:bf:45:5a:fe:fc:a1:44:82:43:0a: fa:f7:3a:f3:0d:04:fd:56:cf:99:20:2d:86:1d:73:7c:43:56: 93:67:f6:02:ac:98:cc:8b:f4:32:5a:8e:4c:d8:f2:1d:70:1e: 93:72:b5:64:5b:11:24:4f:a0:d0:b3:65:39:28:cd:44:8d:03: 49:da:24:2e:5f:e8:33:14:87:bf:ff:b4:5a:07:c0:c7:55:80: 4f:72:b3:cf:9e:fb:6d:25:5d:c7:d5:c5:26:f8:f3:33:da:ef: 5b:94:1c:24:30:f4:98:9f:e8:7e:30:67:fb:d9:34:2a:14:65: ad:a4:6b:ae:f8:46:70:78:38:7b:b4:ce:6f:7c:8b:fe:18:63: 03:47:eb:f3:01:ea:ab:bc:8f:3f:37:31:77:1d:0d:44:74:2a: 50:c6:d8:a7:0d:ce:15:a5:b2:31:fe:51:6b:94:c7:9d:bd:ba: 52:9d:6d:f8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yzx/i6XNtm6OzmCyG0jyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDVhMTcyNzFkOTljZjE1YjczZWNjNjU4NjczMTQzYzI4ZTIwN2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCD/IOHmgDlmvaiJZd3GI99a78QB AZErW+0OFLBsOYZTC2JdZVJ+IO5KKU/rigJ6GSmPKrG9j0v61+Ti/quvVo71eSLv blts4TkVcxpvoPv8f8Hvb9oCaasdJIRj0tbc9AsaobNmR2HEa95onEetC43Y+U1V xMt6Ab0hsWCf1CdUyLjY/tWRjbiG4czvTCMVn/IBoZIGdw0ld8F5jszc3658LCbs w9drcOdbbDpEuNRCVC25zOdzAdQeLWlM8z/3Se9npU1Gv+orWiIqj9zXPKJmHYB1 391sLc02fYuq+BtWWLCdZsItNYhYixbZBabnGvh0flqWAnvPSyatkkSR4wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJ1aFycdmc8Vtz7MZYZzFDwo4gftMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzkwODk1 Ni1jNWU2LTRhM2UtOWYxNy1hMTRjYTBlYzFjMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvOTA4OTU2 LWM1ZTYtNGEzZS05ZjE3LWExNGNhMGVjMWMxYS8xL25Wb1hKeDJaenhXM1BzeGxo bk1VUENqaUItMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDBbNIAwQCuQ6MMA0EAgACMAcDBQAqAZVAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDozTANBgkqhkiG9w0BAQsFAAOCAQEAf9OQ oe7ToFT6MBY9/lrUBUbAAJtDVkhSnJ66P60SanYdt0OhowVU69k6EWe+h0pmjlcM 3v0/9EvpVEwilrVDB4l6eEOYlYu29ywrz7h6uZ2/RVr+/KFEgkMK+vc68w0E/VbP mSAthh1zfENWk2f2AqyYzIv0MlqOTNjyHXAek3K1ZFsRJE+g0LNlOSjNRI0DSdok Ll/oMxSHv/+0WgfAx1WAT3Kzz577bSVdx9XFJvjzM9rvW5QcJDD0mJ/ofjBn+9k0 KhRlraRrrvhGcHg4e7TOb3yL/hhjA0fr8wHqq7yPPzcxdx0NRHQqUMbYpw3OFaWy Mf5Ra5THnb26Up1t+A== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:41 2026 by rpki-client