This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer (raw, json) Hash identifier: aT7gtQ3jShaLxfAg36wazePdQ6c5mtC0DLsJAyG7gWU= Subject key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36F653654BED7AD17B34E85CF44C23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.200.110.0/23 IP: 194.0.255.0/24 IP: 2001:67c:25a8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f6:53:65:4b:ed:7a:d1:7b:34:e8:5c:f4:4c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:f3:34:0d:24:f7:49:01:28:c0:ff:f7:10: 06:9d:bf:7f:89:97:23:d4:f4:ad:62:b4:9a:42:31: bf:4b:4c:88:b9:ac:67:98:c1:fe:59:ea:67:46:88: 9c:db:0c:ca:a7:3e:a0:99:55:7b:8d:0d:f4:32:ed: 4d:33:91:eb:07:e3:ed:d1:7c:3e:3b:52:21:0d:5e: e3:42:5b:e8:a1:41:b1:65:e8:54:b5:3c:24:05:7b: 79:12:f3:f4:6e:50:46:0a:cd:c2:24:eb:5f:b2:c2: 65:c2:c9:11:3a:c4:68:45:e6:4c:ba:e6:59:b2:d3: 86:f7:84:52:96:36:75:95:7d:e8:f2:d2:30:8e:75: 2f:8f:2f:49:f6:42:51:37:02:01:ef:be:bc:96:26: 05:8c:63:3a:ad:e8:5f:4b:89:d0:bc:71:ac:73:ec: bc:1f:26:a0:36:aa:ee:57:6e:95:99:c3:31:2a:cf: e9:80:37:78:6b:7a:dc:d8:96:9a:3c:7c:60:31:79: 36:37:90:34:21:62:29:59:39:08:95:f1:12:26:3d: 4e:c7:42:41:3e:48:d4:f1:fe:96:bf:2e:c3:14:36: ee:a0:99:d9:e4:d2:4f:f2:49:88:4e:f9:76:a0:e4: 42:5f:87:9d:6e:fd:bc:fa:f6:ce:b6:9d:3c:a7:83: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.110.0/23 194.0.255.0/24 IPv6: 2001:67c:25a8::/48 Signature Algorithm: sha256WithRSAEncryption 9e:4c:38:91:d3:e9:15:99:ce:cf:a0:ca:89:4f:1f:60:89:7d: 0c:72:02:3b:f7:d1:64:9b:8e:ce:10:ba:4a:6d:02:d7:cb:b6: 2d:a8:86:3d:57:70:68:f7:8b:38:9e:cd:e1:0e:c2:6c:fe:86: 81:b1:0e:4e:dc:63:aa:61:5e:07:c6:af:d0:6c:b5:4c:ee:ee: fe:b7:e6:fc:b0:80:45:a3:29:c9:53:49:a3:ae:80:8b:0e:8a: 00:7c:dc:43:97:69:cf:fb:41:cc:4b:24:6f:49:51:90:d0:5c: f1:35:cd:bc:f2:60:05:02:74:07:fb:d1:93:8b:5c:8d:51:4a: 92:d0:4e:d9:8b:c5:c2:cd:fb:8d:05:93:24:b8:0c:3c:96:23: 22:25:61:59:9e:94:79:ff:1c:ce:0d:00:1d:b1:b6:78:a9:15: b6:84:01:d0:9c:69:b7:64:f2:55:46:76:e7:fe:7a:e0:ad:67: 1a:12:e5:3f:b8:26:e4:59:33:2d:9d:d3:b9:c7:a7:18:95:a7: 48:3f:18:5f:a7:83:26:fe:93:87:54:b8:3a:45:aa:2b:f8:88: cc:80:2b:ef:e1:4e:db:0a:33:48:83:4b:5f:fb:3e:ab:cd:d6: 28:c3:f7:26:60:4c:8e:c3:3b:5d:fd:91:73:39:38:cf:80:86: 7e:7b:68:e4 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt7NvZTZUvtetF7NOhc9EwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTJjNTNhYjYxMmRkODNjZDExNmJiMTNjNzUwZDdlMmIwZDY4OTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sXzNA0k90kBKMD/9xAGnb9/iZcj 1PStYrSaQjG/S0yIuaxnmMH+WepnRoic2wzKpz6gmVV7jQ30Mu1NM5HrB+Pt0Xw+ O1IhDV7jQlvooUGxZehUtTwkBXt5EvP0blBGCs3CJOtfssJlwskROsRoReZMuuZZ stOG94RSljZ1lX3o8tIwjnUvjy9J9kJRNwIB7768liYFjGM6rehfS4nQvHGsc+y8 HyagNqruV26VmcMxKs/pgDd4a3rc2JaaPHxgMXk2N5A0IWIpWTkIlfESJj1Ox0JB PkjU8f6Wvy7DFDbuoJnZ5NJP8kmITvl2oORCX4edbv28+vbOtp08p4OnCwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFJ4sU6thLdg80Ra7E8dQ1+Kw1okEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzVlNWY0 Ny1mNjE3LTQ1OTMtOTdjZi05YTgwMjk1OWEyNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvNWU1ZjQ3 LWY2MTctNDU5My05N2NmLTlhODAyOTU5YTI0OC8xL25peFRxMkV0MkR6UkZyc1R4 MURYNHJEV2lRUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQBwchuAwQAwgD/MA8EAgACMAkDBwAgAQZ8Jagw DQYJKoZIhvcNAQELBQADggEBAJ5MOJHT6RWZzs+gyolPH2CJfQxyAjv30WSbjs4Q ukptAtfLti2ohj1XcGj3iziezeEOwmz+hoGxDk7cY6phXgfGr9BstUzu7v635vyw gEWjKclTSaOugIsOigB83EOXac/7QcxLJG9JUZDQXPE1zbzyYAUCdAf70ZOLXI1R SpLQTtmLxcLN+40FkyS4DDyWIyIlYVmelHn/HM4NAB2xtnipFbaEAdCcabdk8lVG duf+euCtZxoS5T+4JuRZMy2d07nHpxiVp0g/GF+ngyb+k4dUuDpFqiv4iMyAK+/h TtsKM0iDS1/7PqvN1ijD9yZgTI7DO139kXM5OM+Ahn57aOQ= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:20 2026 by rpki-client