This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer File: ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer (raw, json) Hash identifier: f6gt1cYad/72CWObj+D5uug7eWX262X1F+dcFtRDpMQ= Subject key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A226E8713098DCCC16EA54A41EDF5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216428 IP: 2001:67c:11e4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:26:e8:71:30:98:dc:cc:16:ea:54:a4:1e:df:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:a7:44:30:4b:85:f0:10:29:34:ba:c0:85: 15:a5:8d:b7:dd:05:a7:d5:27:31:1d:73:67:d1:a3: 81:a6:c7:12:d8:06:42:15:87:08:24:76:d0:22:4b: 44:f9:87:e9:7c:90:89:bc:f9:28:fb:d0:d3:08:68: 02:5c:71:c4:82:f4:d7:93:c8:9e:2d:77:87:96:54: 91:e3:c3:41:1b:bf:0c:90:0b:3f:c5:5e:19:7b:92: 8c:c8:8d:36:df:06:8f:db:4c:84:8f:c7:50:46:31: 31:ad:54:67:62:59:37:36:d7:c5:fb:3b:56:3f:18: 90:9f:f4:4b:24:dd:17:02:3c:e7:8e:24:ca:c0:0d: b8:03:c2:28:d6:d7:b2:0e:05:88:dd:cf:cc:99:f9: 3e:fc:3d:81:e7:2f:3a:73:9e:fe:d3:c0:52:9c:f0: 2b:19:c2:8f:9d:4e:0e:89:60:62:ca:78:8a:86:02: 08:40:00:30:7b:c7:5a:81:7d:e3:5f:a7:88:a5:8c: c3:1e:73:e6:33:81:a6:0b:86:e0:fb:43:d5:bf:89: 51:65:80:1d:15:46:9d:96:8f:af:8d:25:2e:e6:12: 90:2a:5e:dc:09:2d:8e:fb:03:63:14:98:40:06:73: 75:d6:11:4a:3d:c5:c9:62:f2:d8:5b:8d:f7:4e:06: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:11e4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216428 Signature Algorithm: sha256WithRSAEncryption 72:23:00:eb:0f:ef:92:59:20:de:8b:59:c4:d2:c9:8d:ff:af: 94:fc:71:e5:cf:22:54:10:5a:52:7d:37:67:b3:31:a5:51:c1: 1d:fc:5d:dd:a0:b4:b7:93:38:9b:6a:cd:32:57:df:27:4d:c5: b3:87:4c:c2:70:6d:48:17:57:c9:f1:8a:e8:a3:b4:b8:ee:4d: 80:98:f3:e4:c1:be:ba:02:a4:23:f9:9b:11:41:de:f0:57:51: 04:68:04:0a:9b:7b:e9:6a:82:76:c5:32:c3:b7:18:db:c0:e9: a9:c1:b8:1e:ce:4b:4c:d4:97:5b:6f:87:90:7f:16:c4:7a:93: 00:58:36:99:80:b9:7b:35:3f:93:4e:d1:0d:da:3c:7d:2e:0f: e6:d5:8d:30:ce:2e:57:01:fd:33:de:91:8c:4f:49:cf:e1:ac: f2:a5:5d:44:13:66:df:81:eb:32:f1:f1:86:f1:21:3f:0b:05: 43:4e:d7:dc:39:9d:f2:4e:f2:ff:97:ff:40:aa:c1:a1:b5:92: 21:00:7d:b8:7a:2c:89:e7:0c:f4:2a:48:2f:c3:ce:bf:ff:98: 2b:3d:69:e6:b6:cd:f9:02:96:a5:a2:09:61:d8:bf:52:f6:d7: 32:b2:3c:48:9e:f8:bf:ee:da:b7:93:36:e9:18:1b:70:16:25: f4:aa:d3:88 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4oibocTCY3MwW6lSkHt9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTBkZTRmMjYyNzVlYTVmYzJmMjNjOGI0ZDdlMDZkNzJiM2I3M2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu6nRDBLhfAQKTS6wIUVpY233QWn 1ScxHXNn0aOBpscS2AZCFYcIJHbQIktE+YfpfJCJvPko+9DTCGgCXHHEgvTXk8ie LXeHllSR48NBG78MkAs/xV4Ze5KMyI023waP20yEj8dQRjExrVRnYlk3NtfF+ztW PxiQn/RLJN0XAjznjiTKwA24A8Io1teyDgWI3c/Mmfk+/D2B5y86c57+08BSnPAr GcKPnU4OiWBiyniKhgIIQAAwe8dagX3jX6eIpYzDHnPmM4GmC4bg+0PVv4lRZYAd FUadlo+vjSUu5hKQKl7cCS2O+wNjFJhABnN11hFKPcXJYvLYW433TgZhTQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJ4N5PJidepfwvI8i01+BtcrO3PHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxL2VhYzk5 Ny1jZTFlLTQ1OWItOTQzNi1lZDcwNjdmOTg3ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvZWFjOTk3 LWNlMWUtNDU5Yi05NDM2LWVkNzA2N2Y5ODdkOS8xL25nM2s4bUoxNmxfQzhqeUxU WDRHMXlzN2M4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBHkMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNNbDANBgkqhkiG9w0BAQsFAAOCAQEAciMA6w/vklkg3otZxNLJjf+vlPxx 5c8iVBBaUn03Z7MxpVHBHfxd3aC0t5M4m2rNMlffJ03Fs4dMwnBtSBdXyfGK6KO0 uO5NgJjz5MG+ugKkI/mbEUHe8FdRBGgECpt76WqCdsUyw7cY28DpqcG4Hs5LTNSX W2+HkH8WxHqTAFg2mYC5ezU/k07RDdo8fS4P5tWNMM4uVwH9M96RjE9Jz+Gs8qVd RBNm34HrMvHxhvEhPwsFQ07X3Dmd8k7y/5f/QKrBobWSIQB9uHosiecM9CpIL8PO v/+YKz1p5rbN+QKWpaIJYdi/UvbXMrI8SJ74v+7at5M26RgbcBYl9KrTiA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:36 2026 by rpki-client