This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer File: ngoRprHRiWV8f7luwUWLr8oYZPQ.cer (raw, json) Hash identifier: 0Cbk0EGvrP0R+PVSsbEfzpp+6OGrGadbLFULmgh5nbs= Subject key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC78FC76FB208A41C1A1CAA87E61C65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211992 IP: 2001:67c:aec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8f:c7:6f:b2:08:a4:1c:1a:1c:aa:87:e6:1c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:bf:e4:74:90:6d:0e:d0:ea:8c:25:be:f7: 8d:a5:5e:7e:8d:24:a9:d4:be:26:dd:a3:f0:4f:42: 92:99:b1:5e:d1:59:73:e0:bb:a7:f6:93:82:dd:b4: 7a:ab:c7:16:e0:cd:be:10:14:5c:48:32:de:cc:2d: d1:5f:af:e4:4a:ab:9f:2e:12:2e:d0:0e:45:cd:10: d1:fd:59:c7:42:90:95:9c:03:81:8a:23:5d:ba:b3: 22:4a:4e:46:f7:fe:ae:da:3e:02:26:ad:7e:52:30: 0c:87:dd:af:db:9b:a3:36:e5:0b:ff:56:ac:29:34: cc:d0:58:65:f7:25:16:d0:a2:6f:d7:36:1b:f8:9f: 8d:d5:c4:41:d4:1c:3c:e4:75:3e:5c:5f:82:15:9e: 5a:76:57:d6:82:df:45:b3:39:b0:a6:51:a4:d3:87: 1d:51:14:f7:b8:4c:09:a1:0d:df:68:19:1f:d0:44: ff:ea:8d:73:51:4c:94:ef:a7:47:6f:57:b7:e9:94: 9d:f2:7d:34:51:6c:71:64:5c:36:a1:db:c1:5e:f9: c4:f2:3d:14:33:85:f5:45:96:b4:f5:77:5c:95:af: a4:72:7c:50:d5:e1:c7:e8:ac:3e:8a:d2:84:9f:06: 4c:09:3c:74:97:80:56:22:f4:ee:d7:7f:e6:4e:c6: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:aec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211992 Signature Algorithm: sha256WithRSAEncryption 6d:cd:e2:9f:5e:14:d2:94:42:84:f1:13:cb:65:51:89:73:b1: 64:d5:7c:5d:84:de:f8:54:c0:a2:fd:da:2f:3c:cd:81:0a:4c: 91:5b:fe:a5:ec:24:5c:52:6d:b9:1b:b9:c8:e4:44:f9:9c:c5: 4e:58:3e:37:bc:2f:12:47:9b:13:90:ba:44:ec:05:8d:b0:2a: f7:12:82:dc:99:d2:ee:2a:dc:c7:5e:62:c8:36:58:85:48:9f: f5:29:30:43:0f:b3:42:2b:bc:9a:83:7d:99:a0:55:a2:2f:2f: f7:2d:e1:1e:79:e1:a5:00:e8:a7:a7:cf:4a:e4:5a:ec:a0:cc: 5e:82:49:47:f4:ad:a7:29:09:a2:d8:34:0f:fd:1f:1c:fe:84: d4:e0:e3:8b:50:45:41:8f:1c:b9:94:54:ba:21:6e:9d:d7:5a: 46:ca:dc:9f:22:3d:30:6a:48:1d:20:22:0c:94:aa:2a:35:e6: f3:c0:e8:54:0d:9f:3f:c6:00:9e:2a:7f:05:66:31:38:38:7a: 38:8a:94:12:19:e5:dd:2a:af:20:6a:7b:82:84:14:da:ce:f0: d9:98:a5:1d:b8:85:3a:d6:bf:99:c7:6d:af:7e:cb:10:28:d9: 25:42:a4:d1:ec:a8:21:d9:69:78:23:41:07:09:71:31:f2:3b: df:61:a1:d2 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6x4/Hb7IIpBwaHKqH5hxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTBhMTFhNmIxZDE4OTY1N2M3ZmI5NmVjMTQ1OGJhZmNhMTg2NGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAK/5HSQbQ7Q6owlvveNpV5+jSSp 1L4m3aPwT0KSmbFe0Vlz4Lun9pOC3bR6q8cW4M2+EBRcSDLezC3RX6/kSqufLhIu 0A5FzRDR/VnHQpCVnAOBiiNdurMiSk5G9/6u2j4CJq1+UjAMh92v25ujNuUL/1as KTTM0Fhl9yUW0KJv1zYb+J+N1cRB1Bw85HU+XF+CFZ5adlfWgt9FszmwplGk04cd URT3uEwJoQ3faBkf0ET/6o1zUUyU76dHb1e36ZSd8n00UWxxZFw2odvBXvnE8j0U M4X1RZa09Xdcla+kcnxQ1eHH6Kw+itKEnwZMCTx0l4BWIvTu13/mTsZ0hwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJ4KEaax0YllfH+5bsFFi6/KGGT0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzFjZGFj ZS00ZTAwLTQ2OWEtOGM1MC01OGNiODMwODc1ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvMWNkYWNl LTRlMDAtNDY5YS04YzUwLTU4Y2I4MzA4NzVmNS8xL25nb1JwckhSaVdWOGY3bHV3 VVdMcjhvWVpQUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfArsMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM8GDANBgkqhkiG9w0BAQsFAAOCAQEAbc3in14U0pRChPETy2VRiXOxZNV8 XYTe+FTAov3aLzzNgQpMkVv+pewkXFJtuRu5yORE+ZzFTlg+N7wvEkebE5C6ROwF jbAq9xKC3JnS7ircx15iyDZYhUif9SkwQw+zQiu8moN9maBVoi8v9y3hHnnhpQDo p6fPSuRa7KDMXoJJR/StpykJotg0D/0fHP6E1ODji1BFQY8cuZRUuiFunddaRsrc nyI9MGpIHSAiDJSqKjXm88DoVA2fP8YAnip/BWYxODh6OIqUEhnl3SqvIGp7goQU 2s7w2ZilHbiFOta/mcdtr37LECjZJUKk0eyoIdlpeCNBBwlxMfI732Gh0g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:14 2026 by rpki-client