This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer (raw, json) Hash identifier: eU1NhgEN1ZkAy9Ak49VR+9rugEd5flNvQrfnKgLJsGY= Subject key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ECE0688ECD8455CD947A809D71C02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30736 IP: 82.103.128.0/18 IP: 2a00:9080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ce:06:88:ec:d8:45:5c:d9:47:a8:09:d7:1c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:23:f8:b2:cf:97:61:3b:1a:50:77:56:84: 6d:df:c8:cc:99:f0:2e:d6:fe:b9:12:3c:0e:4a:c3: c9:e9:e7:ec:9a:ac:02:43:8c:22:8a:d9:16:46:8c: 3a:c3:c7:ec:a9:60:11:aa:29:ef:05:58:e1:2c:c1: cb:ad:7b:75:63:64:45:85:d5:ba:98:3b:5d:5d:15: 92:5f:63:39:1a:23:ab:c4:58:22:83:72:14:74:29: 83:e2:03:cd:60:dd:d4:4c:95:b7:25:57:b0:c2:d0: 4c:fe:4e:f0:ed:59:4c:67:04:e2:1e:80:18:39:01: f7:28:cc:67:94:b0:7e:d6:e7:8a:db:1e:1e:fc:97: 03:55:07:38:6c:7f:b0:86:8e:51:f4:83:f2:f4:c4: 4d:6f:e1:66:f7:ff:01:20:af:5e:b7:d8:34:c9:a8: bb:8f:dc:27:7b:d5:24:c3:a0:71:5e:5e:36:23:7d: e1:fe:da:cd:32:15:7b:59:fe:3e:78:1d:89:91:e1: f0:da:39:37:5b:90:a5:36:6c:1f:33:68:33:12:6f: bc:95:17:a1:65:16:f3:73:67:0e:aa:46:7e:3e:ec: 96:0f:11:47:01:e3:a7:64:75:0c:4e:b9:64:d2:94: 34:cf:68:ec:ec:5f:67:0d:a9:6e:98:4c:23:d3:b2: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.103.128.0/18 IPv6: 2a00:9080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30736 Signature Algorithm: sha256WithRSAEncryption 53:4e:e2:2b:30:e6:92:ab:e3:bc:ee:ef:82:68:ee:99:0e:be: 4e:76:e2:46:85:85:64:d5:1b:cd:e0:73:dd:12:e8:07:17:ae: 1f:29:0c:b0:39:e2:7b:ad:12:bd:d6:19:c5:0e:6a:60:6e:0f: f5:b0:5c:09:9d:14:9a:e1:bd:4f:b6:fa:86:91:d0:6a:f3:38: 39:68:d0:50:14:6c:7e:1d:94:3f:e2:3d:a7:99:5d:a2:f6:84: 2b:cc:5b:2f:27:de:36:dd:e0:d6:51:4d:db:d8:ce:3a:be:fe: b3:2f:fb:cd:e9:0f:31:70:f7:6c:76:d1:ab:4b:42:7a:fd:05: 91:79:4c:d6:21:d5:22:50:37:28:e3:32:79:16:92:38:36:aa: 4d:38:56:e6:dc:02:94:c4:1b:78:1f:3b:35:59:c0:ee:d6:57: 55:03:3e:89:b2:a9:6f:d9:7a:13:33:d2:df:b1:87:e4:2e:40: 02:f4:3b:3d:a5:b2:27:97:36:1e:b3:cd:18:9c:17:f6:a2:cc: d4:62:f9:83:f0:4b:7f:33:1a:1b:ee:c6:a2:0b:f3:89:55:8d: 6d:47:55:3e:5f:b2:76:5c:01:21:7c:d2:c3:ad:81:31:39:c2: 95:40:0c:cd:fa:9f:a5:ee:e5:f8:e9:1a:6c:88:2e:c7:0a:1a: b9:bc:25:39 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt5fs4GiOzYRVzZR6gJ1xwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGYyNGFmYmZlY2RmNmE5OWMyODJiZjUzYjMwNGYzYzFlOGY0NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhEj+LLPl2E7GlB3VoRt38jMmfAu 1v65EjwOSsPJ6efsmqwCQ4wiitkWRow6w8fsqWARqinvBVjhLMHLrXt1Y2RFhdW6 mDtdXRWSX2M5GiOrxFgig3IUdCmD4gPNYN3UTJW3JVewwtBM/k7w7VlMZwTiHoAY OQH3KMxnlLB+1ueK2x4e/JcDVQc4bH+who5R9IPy9MRNb+Fm9/8BIK9et9g0yai7 j9wne9Ukw6BxXl42I33h/trNMhV7Wf4+eB2JkeHw2jk3W5ClNmwfM2gzEm+8lReh ZRbzc2cOqkZ+PuyWDxFHAeOnZHUMTrlk0pQ0z2js7F9nDalumEwj07KmGQIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFJ3ySvv+zfapnCgr9TswTzwej0cPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2VhOWM1 OS05ZTE0LTRmMjUtODZiZC03ZWVkZjRkZDZjMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZWE5YzU5 LTllMTQtNGYyNS04NmJkLTdlZWRmNGRkNmMxMy8xL25mSkstXzdOOXFtY0tDdjFP ekJQUEI2UFJ3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQGUmeAMA0EAgACMAcDBQAqAJCAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAngQMA0GCSqGSIb3DQEBCwUAA4IBAQBTTuIrMOaSq+O8 7u+CaO6ZDr5OduJGhYVk1RvN4HPdEugHF64fKQywOeJ7rRK91hnFDmpgbg/1sFwJ nRSa4b1PtvqGkdBq8zg5aNBQFGx+HZQ/4j2nmV2i9oQrzFsvJ9423eDWUU3b2M46 vv6zL/vN6Q8xcPdsdtGrS0J6/QWReUzWIdUiUDco4zJ5FpI4NqpNOFbm3AKUxBt4 Hzs1WcDu1ldVAz6Jsqlv2XoTM9LfsYfkLkAC9Ds9pbInlzYes80YnBf2oszUYvmD 8Et/Mxob7saiC/OJVY1tR1U+X7J2XAEhfNLDrYExOcKVQAzN+p+l7uX46RpsiC7H Chq5vCU5 -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:26 2026 by rpki-client