This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer File: navGJqwmQGaxxccJpIR383iDYd4.cer (raw, json) Hash identifier: 5LyqaB1asta3gC10/VdnHNXSzU4hhd3r9wi9LGJTPgc= Subject key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA580B6A7A18C0DEB1D3F509B135A5D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212746 IP: 2001:678:c2c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:80:b6:a7:a1:8c:0d:eb:1d:3f:50:9b:13:5a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dabc626ac264066b1c5c709a48477f3788361de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:2c:d8:56:7b:9c:1d:de:86:17:8b:22:e7: 78:3d:98:9b:5c:b6:9e:6d:7a:29:2c:16:a2:8c:0d: 8d:1b:fe:62:65:c4:9c:42:07:44:a1:9a:c5:04:29: d1:01:57:7d:db:5f:6b:82:30:3e:4c:a1:d0:ce:33: 9e:93:bc:44:7a:77:0a:74:c9:fa:7f:4e:18:09:16: 65:97:fa:aa:a2:fa:1b:f5:0d:60:63:95:12:52:26: 1a:01:a1:97:e9:d3:5f:f9:b3:91:27:f0:df:5c:fb: 03:ee:f5:ce:c2:a3:c4:6b:d3:5b:38:4c:91:5c:97: dc:70:1c:95:54:9e:78:ec:a3:22:ff:db:82:92:69: 60:a5:31:e3:15:97:f3:72:4e:d6:e9:d8:1a:31:8f: bd:b9:75:c5:77:49:9a:1e:56:ac:30:a2:62:eb:ee: e7:90:08:91:e7:b5:4c:0e:f9:53:da:8e:6c:c4:4d: 13:bd:25:85:89:c8:c6:c1:e4:9f:5b:4a:cd:04:bb: d3:c6:7d:08:03:07:6f:78:92:87:ce:a2:8a:5c:ec: cc:0a:07:8d:da:14:86:4d:e7:0e:81:10:6b:b0:52: 95:91:ce:a0:cb:73:bf:1f:c5:e1:8b:25:b7:79:2f: 3a:99:93:8f:07:0a:65:9c:6f:07:85:44:e6:09:f5: 57:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c2c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212746 Signature Algorithm: sha256WithRSAEncryption 0d:0c:b9:20:9e:c7:f8:64:37:6b:f7:3c:a8:be:35:e3:25:b8: 79:9a:20:9e:f6:6b:fc:5a:ec:77:10:41:92:4c:8b:01:f8:76: 9d:f6:d6:69:ed:ca:7c:cc:b9:5b:76:cd:fd:4c:7b:2f:f4:08: e2:ad:d6:a6:ec:d4:d1:cf:07:cc:d4:b0:d5:50:85:68:8b:fc: ce:11:a1:d0:c4:76:64:4e:6c:76:63:34:15:48:52:28:0e:34: 0e:bb:1f:a0:f9:ad:c2:4c:60:2b:3a:25:18:1c:32:9f:bf:2c: 90:42:af:39:bb:84:03:46:e4:59:ef:87:f7:cf:41:c1:54:13: 8d:10:a5:92:a4:25:53:83:15:d8:65:39:e2:04:97:b2:87:a7: 21:2d:f1:ec:e0:82:1d:87:3e:30:8d:8c:bc:79:48:2d:ea:0a: e7:3a:27:fd:d6:a4:72:17:a1:8d:6c:3a:a2:52:23:1f:a5:9b: b8:c8:e9:07:4e:3a:02:de:b0:9b:9a:81:1c:c4:87:42:42:db: 45:5e:4c:d1:7e:77:54:e7:bb:9f:be:e5:51:4e:64:a4:d1:d8: 10:ca:7e:f8:da:a0:68:98:e5:95:66:d8:fd:64:f2:97:16:00: 8b:b8:7d:e6:48:39:c4:8f:b7:9d:24:5c:0e:47:1f:b9:ab:c8: 42:58:c4:98 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt+pYC2p6GMDesdP1CbE1pdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGFiYzYyNmFjMjY0MDY2YjFjNWM3MDlhNDg0NzdmMzc4ODM2MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZos2FZ7nB3ehheLIud4PZibXLae bXopLBaijA2NG/5iZcScQgdEoZrFBCnRAVd9219rgjA+TKHQzjOek7xEencKdMn6 f04YCRZll/qqovob9Q1gY5USUiYaAaGX6dNf+bORJ/DfXPsD7vXOwqPEa9NbOEyR XJfccByVVJ547KMi/9uCkmlgpTHjFZfzck7W6dgaMY+9uXXFd0maHlasMKJi6+7n kAiR57VMDvlT2o5sxE0TvSWFicjGweSfW0rNBLvTxn0IAwdveJKHzqKKXOzMCgeN 2hSGTecOgRBrsFKVkc6gy3O/H8XhiyW3eS86mZOPBwplnG8HhUTmCfVXfQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJ2rxiasJkBmscXHCaSEd/N4g2HeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzE5YjAw OC1iNmY5LTQyNzEtYjEzMC0wYjdlMzhhMTIyZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMTliMDA4 LWI2ZjktNDI3MS1iMTMwLTBiN2UzOGExMjJmZS8xL25hdkdKcXdtUUdheHhjY0pw SVIzODNpRFlkNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAwsMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM/CjANBgkqhkiG9w0BAQsFAAOCAQEADQy5IJ7H+GQ3a/c8qL414yW4eZog nvZr/FrsdxBBkkyLAfh2nfbWae3KfMy5W3bN/Ux7L/QI4q3WpuzU0c8HzNSw1VCF aIv8zhGh0MR2ZE5sdmM0FUhSKA40DrsfoPmtwkxgKzolGBwyn78skEKvObuEA0bk We+H989BwVQTjRClkqQlU4MV2GU54gSXsoenIS3x7OCCHYc+MI2MvHlILeoK5zon /dakchehjWw6olIjH6WbuMjpB046At6wm5qBHMSHQkLbRV5M0X53VOe7n77lUU5k pNHYEMp++NqgaJjllWbY/WTylxYAi7h95kg5xI+3nSRcDkcfuavIQljEmA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:09 2026 by rpki-client