This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer File: ngN01xvFfbltw5PpH-u56dWf75o.cer (raw, json) Hash identifier: sZwZLYs9D4v5o18do4vxfZ51Thk9kPvRhCRgBa2kLU8= Subject key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB15B8112FD8C0BBA502FD2C2D3F0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200571 IP: 185.97.8.0/22 IP: 2a06:380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:15:b8:11:2f:d8:c0:bb:a5:02:fd:2c:2d:3f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:35:0c:5d:f0:8e:d6:d7:91:8d:1e:ba:0e: c0:52:d1:a7:47:47:0f:31:76:4b:3f:df:6c:5c:67: 8a:36:be:a5:c8:11:28:a9:54:5c:34:97:00:04:6d: cd:b8:ae:a4:74:b3:62:0f:7a:3f:2a:e3:bc:4b:d0: 19:3b:a0:af:24:79:29:86:c4:02:3f:a7:a1:76:c3: 4c:75:8a:0e:bb:f1:9a:2c:44:f5:b3:e1:ec:2a:e7: 30:4d:9d:e8:c6:7b:3f:cd:69:10:10:0e:16:ba:5f: a0:51:cf:b8:f9:77:7a:57:00:00:fb:b7:7b:45:9c: d3:1d:75:21:03:0b:9b:11:ed:8f:3f:51:d4:7f:d7: 3c:9e:29:5c:a8:58:81:fd:1d:35:fc:f6:f5:ae:c1: 9e:98:21:32:61:b6:5d:7b:e2:e4:07:84:d9:84:c4: 26:cd:be:a0:21:ec:54:20:dd:17:60:6a:ef:15:ae: b5:dd:3b:d1:07:8e:44:e4:ed:49:00:5f:3a:3f:2e: d9:6e:25:da:ef:28:6c:29:3e:62:97:f1:c8:85:a4: 7e:ba:af:e1:57:52:d1:2a:96:e9:fe:91:35:27:40: 68:d7:17:bc:af:7b:b4:62:3d:6f:ec:51:44:ed:a2: 53:e6:8b:31:f4:a8:c6:63:8b:72:db:00:ec:a7:90: 4a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.8.0/22 IPv6: 2a06:380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200571 Signature Algorithm: sha256WithRSAEncryption 5d:7d:76:08:00:c7:ee:45:43:f9:8a:f3:12:ec:ea:2b:1b:b3: 43:21:77:33:0b:ee:0c:fa:7a:36:2c:ff:45:7a:3a:88:d7:39: a7:df:42:78:17:30:1e:35:d3:0a:c4:a0:3b:ec:30:26:85:11: fa:c2:8c:6e:d3:ee:ed:1e:31:9a:1a:97:f1:fc:71:27:7d:33: fb:5d:32:0a:95:98:97:8d:a6:bf:89:2d:12:65:3c:4a:0e:52: b9:c1:15:24:83:e1:53:7b:6d:4f:4e:d6:cd:11:b7:7c:f1:1f: 11:aa:ee:4e:f2:75:dd:81:27:e0:b5:1e:cd:71:ee:14:d1:ae: 1c:c3:86:bc:ec:da:d7:1f:38:41:ec:f0:a9:8e:af:29:6e:e1: 36:cd:d0:c0:b8:de:93:4b:e3:e0:4e:22:00:3f:51:6d:a0:c2: dc:0c:2d:ba:d7:7d:ed:cf:e8:66:2a:b5:b6:f5:ab:2e:d4:a0: 36:4b:d3:8e:14:3a:c2:22:2d:c1:cb:ce:7d:a7:23:f7:1e:bd: d2:34:73:aa:09:01:3d:40:8b:d4:13:4e:78:81:91:9b:c4:f6: 1f:ce:9d:e1:ba:bb:a4:f1:5f:2b:fb:55:ce:03:70:3e:d9:f5: 16:0f:85:da:77:ef:9a:ec:74:00:ea:4f:b2:91:a4:bb:df:d8: 23:35:02:d8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26xW4ES/YwLulAv0sLT8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTAzNzRkNzFiYzU3ZGI5NmRjMzkzZTkxZmViYjllOWQ1OWZlZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLE1DF3wjtbXkY0eug7AUtGnR0cP MXZLP99sXGeKNr6lyBEoqVRcNJcABG3NuK6kdLNiD3o/KuO8S9AZO6CvJHkphsQC P6ehdsNMdYoOu/GaLET1s+HsKucwTZ3oxns/zWkQEA4Wul+gUc+4+Xd6VwAA+7d7 RZzTHXUhAwubEe2PP1HUf9c8nilcqFiB/R01/Pb1rsGemCEyYbZde+LkB4TZhMQm zb6gIexUIN0XYGrvFa613TvRB45E5O1JAF86Py7ZbiXa7yhsKT5il/HIhaR+uq/h V1LRKpbp/pE1J0Bo1xe8r3u0Yj1v7FFE7aJT5osx9KjGY4ty2wDsp5BKmQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJ4DdNcbxX25bcOT6R/ruenVn++aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2M0M2E3 NS1hMzI2LTRjNmQtODdjYS04MTdkODRlNTNkNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQzYTc1 LWEzMjYtNGM2ZC04N2NhLTgxN2Q4NGU1M2Q1My8xL25nTjAxeHZGZmJsdHc1UHBI LXU1NmRXZjc1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWEIMA0EAgACMAcDBQMqBgOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMPezANBgkqhkiG9w0BAQsFAAOCAQEAXX12CADH7kVD +YrzEuzqKxuzQyF3MwvuDPp6Niz/RXo6iNc5p99CeBcwHjXTCsSgO+wwJoUR+sKM btPu7R4xmhqX8fxxJ30z+10yCpWYl42mv4ktEmU8Sg5SucEVJIPhU3ttT07WzRG3 fPEfEaruTvJ13YEn4LUezXHuFNGuHMOGvOza1x84QezwqY6vKW7hNs3QwLjek0vj 4E4iAD9RbaDC3Awtutd97c/oZiq1tvWrLtSgNkvTjhQ6wiItwcvOfacj9x690jRz qgkBPUCL1BNOeIGRm8T2H86d4bq7pPFfK/tVzgNwPtn1Fg+F2nfvmux0AOpPspGk u9/YIzUC2A== -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:59 2026 by rpki-client