This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer (raw, json) Hash identifier: fpPgC+J5XmaCVB/egYIGYff+Ht6or3RwMhRKr6TFEVA= Subject key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3564FBCF6FA9C6C0C3D8C63EFB390A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.146.88.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:64:fb:cf:6f:a9:c6:c0:c3:d8:c6:3e:fb:39:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d8ada352982a319b54d5e483d34426346733ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:29:43:26:63:3d:2c:9d:e4:87:88:bc:74: d1:d8:c3:60:87:4c:ff:15:9c:22:e6:0c:f4:77:d0: ac:b6:4f:4f:b8:20:16:90:2f:5e:8c:e1:86:a1:1e: ce:a9:9b:3c:2d:01:d4:af:9e:0f:19:bb:bb:3e:b1: 9c:d1:c0:f9:71:b7:ee:c0:03:32:da:01:00:da:85: ea:a8:99:65:6b:a4:2e:6c:a5:f6:1b:b1:cf:07:a2: 85:aa:dd:f3:34:79:90:15:db:9b:64:dd:6c:7f:7c: 50:d3:44:97:88:a6:30:fd:da:29:76:a9:9d:bc:6d: cf:2f:59:96:41:8b:52:47:d3:df:5f:cd:b7:fe:5e: 7e:da:38:db:43:de:39:f9:32:fd:bc:1a:f0:8e:84: f9:d5:72:0f:25:ab:49:87:06:34:4d:e9:18:65:52: 3a:c3:b3:06:c9:7f:da:c0:c0:9d:8f:28:72:df:dc: c1:79:65:87:64:7e:f8:bc:ea:fa:00:25:08:53:9b: 01:b6:62:8d:20:30:df:05:99:14:d0:88:74:f1:ad: 24:e9:1c:47:c3:73:56:0e:e2:46:65:b7:46:d8:da: b9:72:dc:10:7c:0d:c0:a5:14:a5:84:45:c1:d7:73: 0c:12:af:64:d3:03:8b:8a:0c:b9:d2:1b:1f:79:25: 89:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.88.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:3b:ce:b6:9b:04:64:93:49:0e:7e:a7:71:d0:0d:75:8f:01: e7:c9:f9:7e:5e:7e:64:84:c8:07:d0:bb:72:a4:c7:28:a0:65: 21:9c:ee:1d:a1:63:06:4a:be:d8:5c:78:74:f4:0d:b2:28:cb: e4:83:c5:10:73:4f:46:68:f5:b3:c8:f7:64:6e:e0:1b:a2:4c: 1a:df:17:54:30:a7:f4:a7:e7:37:cb:fb:4b:35:c0:b3:f1:e7: a1:4b:d3:58:7e:4a:25:e4:6a:a5:d2:fd:bf:fd:72:85:76:ba: c7:3c:e1:9e:f5:29:1f:7d:5e:da:b5:67:ff:32:40:a4:05:90: 42:28:9b:e5:b3:8f:77:20:c4:09:49:b2:76:5a:2a:ba:86:20: 36:81:20:00:13:1c:cc:9e:c6:42:38:7d:f3:96:54:79:85:b0: 4a:8b:c9:5b:14:9a:ca:ba:5b:29:80:03:ee:6b:25:58:53:c9: c7:37:01:80:b5:dc:d9:b1:6a:7a:68:3a:c9:aa:80:9d:ca:28: bb:4f:06:e1:3b:e1:28:d4:16:6e:bd:02:ea:33:ed:15:58:b7: 4d:11:cc:90:93:d2:53:7c:ca:c0:3f:e6:5c:83:6c:8d:c4:a3: 76:72:ce:54:80:23:a5:3c:24:a9:09:a5:ee:0d:38:c4:ed:4d: de:18:3a:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NWT7z2+pxsDD2MY++zkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDhhZGEzNTI5ODJhMzE5YjU0ZDVlNDgzZDM0NDI2MzQ2NzMzZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxspQyZjPSyd5IeIvHTR2MNgh0z/ FZwi5gz0d9Cstk9PuCAWkC9ejOGGoR7OqZs8LQHUr54PGbu7PrGc0cD5cbfuwAMy 2gEA2oXqqJlla6QubKX2G7HPB6KFqt3zNHmQFdubZN1sf3xQ00SXiKYw/dopdqmd vG3PL1mWQYtSR9PfX823/l5+2jjbQ945+TL9vBrwjoT51XIPJatJhwY0TekYZVI6 w7MGyX/awMCdjyhy39zBeWWHZH74vOr6ACUIU5sBtmKNIDDfBZkU0Ih08a0k6RxH w3NWDuJGZbdG2Nq5ctwQfA3ApRSlhEXB13MMEq9k0wOLigy50hsfeSWJmwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ2K2jUpgqMZtU1eSD00QmNGcz6kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2Y0ODYz YS1hZWFlLTQyZjctYmExNC1lZDRhMTM4YzQxMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjQ4NjNh LWFlYWUtNDJmNy1iYTE0LWVkNGExMzhjNDExMy8xL25ZcmFOU21Db3htMVRWNUlQ VFJDWTBaelBxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwpJYMA0GCSqGSIb3DQEBCwUAA4IBAQB/O862 mwRkk0kOfqdx0A11jwHnyfl+Xn5khMgH0LtypMcooGUhnO4doWMGSr7YXHh09A2y KMvkg8UQc09GaPWzyPdkbuAbokwa3xdUMKf0p+c3y/tLNcCz8eehS9NYfkol5Gql 0v2//XKFdrrHPOGe9SkffV7atWf/MkCkBZBCKJvls493IMQJSbJ2Wiq6hiA2gSAA ExzMnsZCOH3zllR5hbBKi8lbFJrKulspgAPuayVYU8nHNwGAtdzZsWp6aDrJqoCd yii7TwbhO+Eo1BZuvQLqM+0VWLdNEcyQk9JTfMrAP+Zcg2yNxKN2cs5UgCOlPCSp CaXuDTjE7U3eGDp/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:58 2026 by rpki-client