This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer (raw, json) Hash identifier: DvtP/J/Lnn9fpGQj6LwYJRnwSoLlY4OtRNMzqwa+APM= Subject key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDFB3EF55313C7EE0F36882633821B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208940 IP: 2a00:7d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fb:3e:f5:53:13:c7:ee:0f:36:88:26:33:82:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e07e7c372a9db09332c479c7291b8629721afe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f8:ce:59:cc:23:ef:93:c3:a9:30:84:89:27: 95:e4:5a:30:1a:fd:e7:55:26:3c:bb:2e:14:29:6b: 87:3c:08:c9:b7:21:a0:2b:13:8f:7b:b5:15:de:87: 8d:1b:0a:9f:01:79:e4:fd:2a:a4:3d:19:9a:84:48: f3:c1:da:7b:1e:53:e3:39:8e:50:56:1f:da:1f:7e: c7:2e:1d:8e:de:1c:6c:f5:19:a4:c3:10:55:4a:f8: e6:0f:cd:c4:25:18:e3:87:67:66:ba:a2:7c:89:d2: fb:c5:d4:d4:88:7b:3b:c8:6d:e1:42:49:1f:19:53: 72:44:89:55:e2:aa:b8:c0:5c:58:ee:5e:3b:7f:df: 64:94:fd:b8:60:74:40:5d:2e:f8:96:bd:f5:cd:86: 97:ac:94:d2:d9:f9:c6:1b:25:1d:0f:1b:b3:5c:4d: 5a:93:42:2f:49:1b:b4:99:e6:d2:c8:ba:b1:b3:5b: 1c:01:80:e2:37:8f:ea:9a:7f:b7:2b:1d:5c:71:f4: c9:94:1e:fb:d2:70:b3:c7:dc:73:d4:52:93:1e:62: da:b5:d8:ea:b8:29:92:86:73:2a:57:1e:49:df:5d: 6b:b3:ce:79:21:bd:05:0b:fb:82:6d:21:c9:2f:7a: 31:4d:70:5e:d5:c2:d2:e1:6f:a1:b3:1a:f8:e0:24: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:7d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208940 Signature Algorithm: sha256WithRSAEncryption 22:98:f3:4f:b2:df:f2:fa:98:16:82:70:61:78:a0:34:f2:d2: eb:c4:d5:e2:23:71:cd:50:23:59:4e:48:50:e3:88:ea:0f:22: 01:da:19:70:fe:5e:82:a9:2a:8f:06:20:3f:2e:b1:69:f1:5e: 29:1b:27:82:0d:00:1d:88:13:02:fe:eb:e3:6e:fb:0a:cf:36: d2:0c:54:d4:bb:d5:87:1a:4c:b8:4c:35:87:ba:e5:0d:ae:0f: 2c:d2:18:f7:17:3e:5f:78:d5:9d:be:24:5d:a3:62:28:1d:dc: 09:d2:e1:27:50:e9:04:85:a2:a4:66:ab:63:27:01:91:72:17: 1f:9e:31:a5:1f:1b:61:27:80:05:80:ad:b2:cf:9e:7a:ea:6d: 67:46:64:60:82:13:53:b8:56:10:03:43:a8:4c:4c:44:c1:68: 5c:4d:c8:fd:f5:76:ff:ee:96:c2:5f:7c:5d:ec:b7:1b:f2:46: 76:63:9e:2e:47:ff:22:a7:43:f2:e4:7e:55:f6:93:2d:ad:9b: 57:c3:89:b1:0d:30:27:d1:09:2b:3c:0b:a8:06:44:c4:75:7b: 8c:54:51:ff:bf:5b:ee:ed:18:fe:74:7f:a2:6f:0b:50:43:7b: a8:bf:ed:9a:19:85:2d:2f:83:c4:a4:a2:cf:70:ce:31:f7:93: 63:c5:10:aa -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt87fs+9VMTx+4PNogmM4IbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTA3ZTdjMzcyYTlkYjA5MzMyYzQ3OWM3MjkxYjg2Mjk3MjFhZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPjOWcwj75PDqTCEiSeV5FowGv3n VSY8uy4UKWuHPAjJtyGgKxOPe7UV3oeNGwqfAXnk/SqkPRmahEjzwdp7HlPjOY5Q Vh/aH37HLh2O3hxs9RmkwxBVSvjmD83EJRjjh2dmuqJ8idL7xdTUiHs7yG3hQkkf GVNyRIlV4qq4wFxY7l47f99klP24YHRAXS74lr31zYaXrJTS2fnGGyUdDxuzXE1a k0IvSRu0mebSyLqxs1scAYDiN4/qmn+3Kx1ccfTJlB770nCzx9xz1FKTHmLatdjq uCmShnMqVx5J311rs855Ib0FC/uCbSHJL3oxTXBe1cLS4W+hsxr44CQU0wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFJ4H58NyqdsJMyxHnHKRuGKXIa/jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2ExNTZl Ni0xZTQxLTQwNGEtOTY4OC01N2I0MGZjZWQ4MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYTE1NmU2 LTFlNDEtNDA0YS05Njg4LTU3YjQwZmNlZDgyOS8xL25nZm53M0twMndrekxFZWNj cEc0WXBjaHItTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgB9QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDMCwwDQYJKoZIhvcNAQELBQADggEBACKY80+y3/L6mBaCcGF4oDTy0uvE1eIj cc1QI1lOSFDjiOoPIgHaGXD+XoKpKo8GID8usWnxXikbJ4INAB2IEwL+6+Nu+wrP NtIMVNS71YcaTLhMNYe65Q2uDyzSGPcXPl941Z2+JF2jYigd3AnS4SdQ6QSFoqRm q2MnAZFyFx+eMaUfG2EngAWArbLPnnrqbWdGZGCCE1O4VhADQ6hMTETBaFxNyP31 dv/ulsJffF3stxvyRnZjni5H/yKnQ/LkflX2ky2tm1fDibENMCfRCSs8C6gGRMR1 e4xUUf+/W+7tGP50f6JvC1BDe6i/7ZoZhS0vg8Skos9wzjH3k2PFEKo= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:02 2026 by rpki-client