This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer File: nfbRY1k964rv8HL-yljm8_HE5-U.cer (raw, json) Hash identifier: stNg6zXYGrM4LIgMUP0iQgRIRB8F0naT23ogybKGix8= Subject key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37AC741E727A0DC51A643909F9AE8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207048 IP: 185.123.52.0/24 IP: 193.107.51.0/24 IP: 2a10:ec0::/29 IP: 2a12:60c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ac:74:1e:72:7a:0d:c5:1a:64:39:09:f9:ae:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:4e:40:cc:e5:02:b8:0e:28:92:0e:e4:27: 10:61:f6:78:ed:be:74:50:57:c2:40:12:7f:c2:63: 73:52:5c:55:9a:65:f8:6f:3f:b2:37:4f:ad:02:4b: 24:68:93:d3:11:fe:e7:83:be:1f:cc:e5:03:c6:18: 72:ce:3c:7b:f5:e9:e2:6e:6a:51:22:af:5b:fc:52: a0:70:24:39:b7:56:b5:ba:99:4f:c5:ee:79:67:cf: 37:29:ea:22:d7:23:5f:ba:75:af:68:ad:20:0a:43: 59:ed:ce:7f:bb:d4:a4:b2:08:08:e7:71:3b:d3:23: 24:99:0f:86:03:14:c6:f1:ff:cb:7d:43:7f:0a:1c: 30:ea:d8:3d:2f:d0:5a:be:1e:d4:06:a2:28:37:d0: 45:99:55:75:ba:5f:cb:42:8b:c3:38:9a:e7:24:ab: 3a:97:da:88:85:b4:5e:74:83:2a:a8:d3:1d:87:cd: 92:fa:0e:fe:13:96:35:75:7e:13:aa:51:8b:1d:89: 23:1f:44:b7:9c:69:a9:9c:e7:85:3f:12:f7:f5:45: f2:3e:00:d2:9d:e7:4e:03:89:03:dd:b4:a5:74:07: 6c:10:34:1f:2c:89:ec:da:9f:39:60:2f:b3:da:3d: d4:d6:c9:94:92:68:75:24:42:44:af:e0:24:c2:7f: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.52.0/24 193.107.51.0/24 IPv6: 2a10:ec0::/29 2a12:60c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207048 Signature Algorithm: sha256WithRSAEncryption 1b:f0:f3:a8:81:14:64:6f:8e:bf:2b:94:c9:77:d1:51:51:7c: 42:2f:c0:01:db:fd:f7:a9:f9:eb:56:0a:6a:13:d7:6d:65:07: 31:a6:70:59:38:40:fd:9e:03:00:0f:d4:9a:b3:10:53:ed:28: fc:e7:e8:84:4e:b1:20:0a:cd:69:5f:ac:b1:c7:50:47:c4:96: 92:6b:9d:2d:e1:a7:63:bf:e9:18:9c:3c:25:89:10:76:f4:30: a4:03:42:47:b8:ef:7d:4f:1a:c3:ea:91:d0:5a:b9:5d:41:da: b4:ce:cc:95:c8:23:07:91:bc:14:89:9c:a8:43:25:c8:be:56: 2e:72:62:69:6f:53:fb:80:8b:b8:f1:5e:e5:73:34:0a:34:3d: 21:0b:9d:83:fc:a8:ea:92:00:de:03:5e:5d:f0:be:4f:58:20: ca:b4:30:19:fc:de:7c:0a:27:b6:0c:e3:d5:8b:5e:96:e2:b0: 8a:10:75:7a:a0:87:8f:fa:b8:27:6b:99:e1:9b:15:a7:a0:7c: fe:31:87:99:da:c7:c9:f8:d2:62:b3:22:cc:fa:90:4b:41:10: e8:e0:e8:b0:af:03:d3:f0:ea:6e:d2:1a:15:fd:7e:06:da:2c: ed:da:b3:63:1a:41:1d:ff:0d:56:ce:23:f1:9b:0b:68:f3:2b: 8e:18:3b:7d -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt+N6x0HnJ6DcUaZDkJ+a6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGY2ZDE2MzU5M2RlYjhhZWZmMDcyZmVjYTU4ZTZmM2YxYzRlN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ZOQMzlArgOKJIO5CcQYfZ47b50 UFfCQBJ/wmNzUlxVmmX4bz+yN0+tAkskaJPTEf7ng74fzOUDxhhyzjx79enibmpR Iq9b/FKgcCQ5t1a1uplPxe55Z883Keoi1yNfunWvaK0gCkNZ7c5/u9SksggI53E7 0yMkmQ+GAxTG8f/LfUN/Chww6tg9L9Bavh7UBqIoN9BFmVV1ul/LQovDOJrnJKs6 l9qIhbRedIMqqNMdh82S+g7+E5Y1dX4TqlGLHYkjH0S3nGmpnOeFPxL39UXyPgDS nedOA4kD3bSldAdsEDQfLIns2p85YC+z2j3U1smUkmh1JEJEr+Akwn8ugQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFJ320WNZPeuK7/By/spY5vPxxOflMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2ZmMjVk Ny01ZmZhLTQ2ODYtODMyNi02OWQ3OWM5ZDA3MjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZmYyNWQ3 LTVmZmEtNDY4Ni04MzI2LTY5ZDc5YzlkMDcyMS8xL25mYlJZMWs5NjRydjhITC15 bGptOF9IRTUtVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAuXs0AwQAwWszMBQEAgACMA4DBQMqEA7AAwUD KhJgwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDKMgwDQYJKoZIhvcNAQELBQAD ggEBABvw86iBFGRvjr8rlMl30VFRfEIvwAHb/fep+etWCmoT121lBzGmcFk4QP2e AwAP1JqzEFPtKPzn6IROsSAKzWlfrLHHUEfElpJrnS3hp2O/6RicPCWJEHb0MKQD Qke4731PGsPqkdBauV1B2rTOzJXIIweRvBSJnKhDJci+Vi5yYmlvU/uAi7jxXuVz NAo0PSELnYP8qOqSAN4DXl3wvk9YIMq0MBn83nwKJ7YM49WLXpbisIoQdXqgh4/6 uCdrmeGbFaegfP4xh5nax8n40mKzIsz6kEtBEOjg6LCvA9Pw6m7SGhX9fgbaLO3a s2MaQR3/DVbOI/GbC2jzK44YO30= -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:07 2026 by rpki-client