This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer File: ncAOnjBGWR-LpVJEgN33xvxMYOA.cer (raw, json) Hash identifier: n7u2zNjXcrcLqVbG1braOhi0D5f2hjoaV2PQmyoM6RU= Subject key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C640FBB755FA5BBED4CBD27BB569D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16298 IP: 185.190.232.0/22 IP: 217.119.0.0/20 IP: 2a02:29b0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:64:0f:bb:75:5f:a5:bb:ed:4c:bd:27:bb:56:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:fb:43:be:61:1c:47:53:b6:bb:94:09:0c: 39:04:8d:f6:ac:a5:60:19:d4:52:f0:b3:34:89:f7: ee:b8:14:47:ca:56:26:6c:3b:d2:f6:84:68:5d:2b: 29:ff:14:f2:c1:83:e2:ec:7f:7b:f1:24:3d:c9:e2: 80:4f:a8:75:5f:10:67:40:73:d8:e3:1c:97:94:7b: 3d:87:e3:de:bf:19:79:76:c1:ba:b4:d9:c0:f1:55: 98:8f:0e:16:44:55:7b:2d:48:b4:3d:01:11:99:12: df:f2:81:04:b2:d4:57:db:fd:d8:e4:6b:eb:a7:a6: dc:97:6f:ff:f7:9b:69:8b:3b:7c:55:36:c7:f7:1e: 86:77:54:f5:38:cb:eb:da:2b:2c:c2:e6:a7:63:5f: 84:2d:16:86:b2:36:e0:0e:d2:0a:90:35:ed:1f:07: eb:bd:92:90:6e:b3:aa:da:e4:d0:a9:4c:38:f7:f7: a6:0a:4d:a2:5c:c6:87:fe:5d:4b:a8:9e:91:e4:30: a0:6b:9a:00:2a:53:26:1c:b1:f0:a0:03:f7:2e:b3: fb:8f:71:43:da:c0:ee:fe:ba:6e:d2:2f:8c:d0:1a: 4a:31:a8:a6:2a:12:29:76:83:1d:50:e6:eb:07:96: 72:70:b5:5b:43:8b:87:51:ba:23:e4:3d:71:75:9c: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.232.0/22 217.119.0.0/20 IPv6: 2a02:29b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16298 Signature Algorithm: sha256WithRSAEncryption 80:1b:4b:90:65:1f:08:97:ba:1c:8d:11:4f:73:9d:25:d0:b6: f9:8e:c0:c4:d6:e5:ba:02:3e:91:a6:10:96:7a:dc:7c:1c:0b: 67:f5:8b:da:8f:33:7d:63:cf:7d:00:6e:d9:95:a0:f3:14:92: 8e:fd:b1:9d:cf:56:45:8e:a8:a3:5b:f6:cc:21:bb:c1:a6:3e: 5b:ed:48:56:8d:d4:8e:88:88:0b:de:c6:d2:74:b7:fc:fc:4d: 4e:f7:34:69:8b:6b:08:da:70:db:77:c8:54:7f:24:bb:56:70: bb:93:cd:8f:42:21:36:ab:00:53:6b:5d:81:91:99:f6:19:b5: 6a:96:8b:1d:30:ff:dc:ee:b2:18:c4:5c:f2:5a:9d:77:fe:ee: 37:2d:f9:46:e7:fd:84:e3:a1:94:26:b4:73:4e:36:d3:23:e2: a0:5c:be:8a:1d:dc:c9:9c:ab:7f:2e:67:20:30:04:7f:66:73: 70:72:a5:73:5b:c9:cb:0b:ea:17:92:74:63:b6:d3:81:45:df: 6e:b8:be:1e:fa:96:56:a3:90:5b:11:f4:eb:97:db:c8:48:7e: 6a:4f:83:6f:13:a1:9b:c5:94:1f:aa:19:d5:ed:05:fe:88:1b: b3:af:54:10:ac:71:9f:9b:31:93:6d:74:1c:38:4b:13:b0:14: 14:f6:11:5a -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9XGQPu3VfpbvtTL0nu1adMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGMwMGU5ZTMwNDY1OTFmOGJhNTUyNDQ4MGRkZjdjNmZjNGM2MGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoH7Q75hHEdTtruUCQw5BI32rKVg GdRS8LM0iffuuBRHylYmbDvS9oRoXSsp/xTywYPi7H978SQ9yeKAT6h1XxBnQHPY 4xyXlHs9h+Pevxl5dsG6tNnA8VWYjw4WRFV7LUi0PQERmRLf8oEEstRX2/3Y5Gvr p6bcl2//95tpizt8VTbH9x6Gd1T1OMvr2isswuanY1+ELRaGsjbgDtIKkDXtHwfr vZKQbrOq2uTQqUw49/emCk2iXMaH/l1LqJ6R5DCga5oAKlMmHLHwoAP3LrP7j3FD 2sDu/rpu0i+M0BpKMaimKhIpdoMdUObrB5ZycLVbQ4uHUboj5D1xdZwhiQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFJ3ADp4wRlkfi6VSRIDd98b8TGDgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzhhZDU3 My01OTc3LTRkNzYtODNlYi1iYjAzMTkyMTNhMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvOGFkNTcz LTU5NzctNGQ3Ni04M2ViLWJiMDMxOTIxM2EyOS8xL25jQU9uakJHV1ItTHBWSkVn TjMzeHZ4TVlPQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCub7oAwQE2XcAMA0EAgACMAcDBQAqAimwMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj+qMA0GCSqGSIb3DQEBCwUAA4IBAQCAG0uQ ZR8Il7ocjRFPc50l0Lb5jsDE1uW6Aj6RphCWetx8HAtn9YvajzN9Y899AG7ZlaDz FJKO/bGdz1ZFjqijW/bMIbvBpj5b7UhWjdSOiIgL3sbSdLf8/E1O9zRpi2sI2nDb d8hUfyS7VnC7k82PQiE2qwBTa12BkZn2GbVqlosdMP/c7rIYxFzyWp13/u43LflG 5/2E46GUJrRzTjbTI+KgXL6KHdzJnKt/LmcgMAR/ZnNwcqVzW8nLC+oXknRjttOB Rd9uuL4e+pZWo5BbEfTrl9vISH5qT4NvE6GbxZQfqhnV7QX+iBuzr1QQrHGfmzGT bXQcOEsTsBQU9hFa -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:21 2026 by rpki-client