This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer File: ndZC_U41WVtf1FikOjrKyLkTlc4.cer (raw, json) Hash identifier: 1jArgmqhhxXCV8ozdwpKOVFvev0IYnGh4g7xV2YnRio= Subject key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A34F15F741CCD774908A336991DF33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203496 IP: 2001:67c:1948::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4f:15:f7:41:cc:d7:74:90:8a:33:69:91:df:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:6c:79:4d:96:4c:e8:b3:2e:3d:50:8c:7d: d9:2a:92:37:6d:85:3c:8d:ab:d5:18:05:aa:a3:52: 5f:a8:0b:99:f5:aa:ec:78:73:20:a7:c0:fd:e0:e9: 3f:e6:8b:5f:84:d4:53:db:50:3e:a2:1e:87:fa:b4: 48:e4:d3:06:fc:21:26:9a:ad:24:8b:60:81:e5:c1: eb:14:47:c3:d6:50:0d:2c:c6:b4:05:f7:68:47:09: b3:4f:7d:0c:80:ee:c6:c4:b6:52:f0:a6:a3:00:73: c1:f4:8a:18:19:ff:43:42:a7:8e:5a:d6:1e:2c:58: e7:b8:8e:c7:90:e9:03:b4:14:0d:85:d0:bc:e5:b8: d3:df:74:c2:1c:d3:2a:40:cd:13:c2:77:e1:75:64: 7a:f9:aa:d1:0a:42:7e:da:17:ae:86:ed:56:24:8d: 2a:d0:5f:de:b4:f5:cd:4c:68:89:83:6b:2e:47:9a: b9:eb:8f:ec:b3:d1:ec:58:12:3a:c6:fb:b9:9a:e7: e0:10:53:99:95:d2:79:ed:13:9a:47:2f:90:a9:fa: 98:7c:15:f5:45:22:c0:45:8c:31:3c:6e:34:8a:bc: 14:1b:8e:6b:35:dd:3e:dd:85:32:45:7e:6f:81:fe: de:d4:21:a5:9d:a1:97:ee:82:49:92:af:27:c9:26: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1948::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203496 Signature Algorithm: sha256WithRSAEncryption 46:ce:ea:b5:f7:83:2c:19:42:86:4c:b4:f1:6b:f2:61:60:5e: 2a:17:77:a7:05:71:87:86:32:a4:0f:0a:16:c1:fe:e2:ee:76: 84:a7:40:97:f8:b9:c5:71:11:7b:ae:5f:41:d3:3e:b1:47:eb: b0:e3:8a:0b:5d:dd:7a:97:38:71:17:4f:e9:ad:8e:ff:91:7c: 32:ec:2a:ee:5b:85:78:c6:e5:71:92:0a:2a:ba:c0:31:87:ed: 8a:47:ff:55:7b:35:70:0e:b0:3e:d3:1b:85:4c:28:1e:23:b5: da:8b:40:a1:1e:ce:c9:dd:b4:a9:34:41:49:93:87:3d:ea:de: 49:ee:bf:cb:c0:c6:23:a8:12:44:67:ab:f2:91:c5:a1:d4:14: 40:9b:4e:0e:57:94:81:31:74:ab:c2:16:af:db:49:4c:ee:7f: af:38:3b:92:47:b5:ad:ee:4a:ea:48:ee:aa:4a:02:7b:b7:11: 37:fb:4a:0c:2f:8f:3a:3c:c8:8f:ac:76:f5:b9:19:14:5b:b6: 2d:f9:28:34:e3:d8:41:ac:31:c6:94:b0:5b:9f:3d:09:ad:47: 31:c7:f9:fc:67:92:2a:3f:5a:98:a2:91:1b:64:6d:82:e4:94: 95:36:8c:e6:79:c4:94:5f:5e:80:05:23:d5:6f:42:4e:50:36: 1a:d3:13:b3 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4o08V90HM13SQijNpkd8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGQ2NDJmZDRlMzU1OTViNWZkNDU4YTQzYTNhY2FjOGI5MTM5NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvxseU2WTOizLj1QjH3ZKpI3bYU8 javVGAWqo1JfqAuZ9arseHMgp8D94Ok/5otfhNRT21A+oh6H+rRI5NMG/CEmmq0k i2CB5cHrFEfD1lANLMa0BfdoRwmzT30MgO7GxLZS8KajAHPB9IoYGf9DQqeOWtYe LFjnuI7HkOkDtBQNhdC85bjT33TCHNMqQM0TwnfhdWR6+arRCkJ+2heuhu1WJI0q 0F/etPXNTGiJg2suR5q564/ss9HsWBI6xvu5mufgEFOZldJ57ROaRy+QqfqYfBX1 RSLARYwxPG40irwUG45rNd0+3YUyRX5vgf7e1CGlnaGX7oJJkq8nySbN1wIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJ3WQv1ONVlbX9RYpDo6ysi5E5XOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzgyNWNj ZS0wNjQzLTRiMGItOTRiOC1iNzI3M2M4ZTMwMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvODI1Y2Nl LTA2NDMtNGIwYi05NGI4LWI3MjczYzhlMzAyMy8xL25kWkNfVTQxV1Z0ZjFGaWtP anJLeUxrVGxjNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBlIMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMa6DANBgkqhkiG9w0BAQsFAAOCAQEARs7qtfeDLBlChky08WvyYWBeKhd3 pwVxh4YypA8KFsH+4u52hKdAl/i5xXERe65fQdM+sUfrsOOKC13depc4cRdP6a2O /5F8Muwq7luFeMblcZIKKrrAMYftikf/VXs1cA6wPtMbhUwoHiO12otAoR7Oyd20 qTRBSZOHPereSe6/y8DGI6gSRGer8pHFodQUQJtODleUgTF0q8IWr9tJTO5/rzg7 kke1re5K6kjuqkoCe7cRN/tKDC+POjzIj6x29bkZFFu2LfkoNOPYQawxxpSwW589 Ca1HMcf5/GeSKj9amKKRG2RtguSUlTaM5nnElF9egAUj1W9CTlA2GtMTsw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:13 2026 by rpki-client