This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer File: nj3BkwnmeMFIJfxyCDyh3seEP00.cer (raw, json) Hash identifier: lDvSbykRjTtQH3A8eofAMt1cvRe9JlZQdkEkR1l2h44= Subject key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A20F37D669F0A714023AC3E621F792 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50894 IP: 178.22.240.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:0f:37:d6:69:f0:a7:14:02:3a:c3:e6:21:f7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:fd:4b:e9:12:c8:44:5f:90:aa:18:02:aa: fc:50:a1:1e:a4:cb:19:83:7b:fb:2f:e3:a6:b2:94: 5e:59:a7:80:05:78:7d:f0:ab:b3:cd:66:f2:c4:58: 1e:43:5b:1a:01:50:21:02:df:18:b0:d1:eb:d7:88: 4e:3e:69:1b:7b:e3:2d:70:b7:27:e7:7d:d6:09:a7: 52:dd:d6:e3:a8:f1:41:f3:04:49:59:b4:1d:2f:57: dd:9c:a9:b2:5e:ec:09:ca:bc:8f:a1:ff:2c:59:c8: 9d:fe:63:6b:b7:fe:f0:d5:43:09:3b:ef:2d:ad:1d: 15:ed:8d:66:0c:3b:8e:0b:52:28:6f:4e:7a:0e:5f: bd:d0:9b:3f:14:83:8e:32:09:21:93:19:db:a7:87: 26:6a:8b:c3:c7:f9:9a:1c:ca:4f:44:07:5a:a1:b0: b1:04:1e:2c:e3:f9:da:c1:e2:8c:bd:0d:7a:1c:56: d3:03:c5:87:e6:83:e0:32:77:d3:34:fe:e7:58:aa: aa:17:69:1b:52:86:15:89:37:8c:46:35:f7:81:18: 1c:11:3f:b7:26:58:9a:f0:b0:ee:e8:e4:b4:0a:c1: 50:60:be:dc:e6:42:b0:03:ba:43:1e:f2:e0:40:38: 4c:40:76:09:f5:77:21:ab:9f:f2:47:be:64:05:76: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.22.240.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50894 Signature Algorithm: sha256WithRSAEncryption 26:a4:5b:b5:86:12:2d:0d:9e:29:59:59:68:2d:e1:f5:b3:f3: 24:e5:6e:3e:a2:6e:bf:f2:9c:68:97:cc:35:af:7a:aa:a2:c9: fe:e1:3c:64:ba:98:bc:32:88:c6:11:26:37:39:ef:1b:de:a8: f9:e9:e2:e0:0d:25:fd:c2:9d:58:95:cd:57:f7:e3:ba:08:25: cb:83:42:54:f6:3f:58:55:75:04:79:7e:31:b9:ec:a3:b4:87: cc:4d:40:f9:31:81:90:f1:b9:8e:c8:12:a1:3a:ca:b5:57:5a: 78:70:fd:d2:22:a3:cb:10:ea:54:f0:cd:71:e5:62:3f:93:5c: 0f:1a:5a:bd:62:8f:e2:bd:d0:08:c8:e9:e2:d8:8c:46:a1:f4: f9:b5:a1:40:54:15:c3:06:7d:bd:de:a1:da:3b:b5:5a:da:d9: 5f:8c:25:25:02:5b:6c:c5:51:7f:5f:db:58:e8:fd:40:78:51: 4b:df:ba:ab:20:b5:da:99:cf:8e:43:c2:23:ed:45:32:10:d0: 5e:e5:cf:a1:0b:2a:d0:52:9d:5b:25:36:86:5e:52:2b:fe:0a: f3:71:ca:a9:0e:ed:ad:5e:dc:0d:c4:d3:21:be:8e:0e:49:f5: 5b:ab:1d:c1:64:7f:3d:f7:78:37:39:7f:2e:53:72:f8:5a:84: 7b:90:bc:f1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4og831mnwpxQCOsPmIfeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTNkYzE5MzA5ZTY3OGMxNDgyNWZjNzIwODNjYTFkZWM3ODQzZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTT9S+kSyERfkKoYAqr8UKEepMsZ g3v7L+OmspReWaeABXh98KuzzWbyxFgeQ1saAVAhAt8YsNHr14hOPmkbe+MtcLcn 533WCadS3dbjqPFB8wRJWbQdL1fdnKmyXuwJyryPof8sWcid/mNrt/7w1UMJO+8t rR0V7Y1mDDuOC1Iob056Dl+90Js/FIOOMgkhkxnbp4cmaovDx/maHMpPRAdaobCx BB4s4/naweKMvQ16HFbTA8WH5oPgMnfTNP7nWKqqF2kbUoYViTeMRjX3gRgcET+3 Jlia8LDu6OS0CsFQYL7c5kKwA7pDHvLgQDhMQHYJ9Xchq5/yR75kBXb+cQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ49wZMJ5njBSCX8cgg8od7HhD9NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzgzMmVk ZC00ODhmLTQ0ZDgtODEwYi1mN2FkOTdjMGVjYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvODMyZWRk LTQ4OGYtNDRkOC04MTBiLWY3YWQ5N2MwZWNiZC8xL25qM0Jrd25tZU1GSUpmeHlD RHloM3NlRVAwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDshbwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDGzjANBgkqhkiG9w0BAQsFAAOCAQEAJqRbtYYSLQ2eKVlZaC3h9bPzJOVuPqJu v/KcaJfMNa96qqLJ/uE8ZLqYvDKIxhEmNznvG96o+eni4A0l/cKdWJXNV/fjuggl y4NCVPY/WFV1BHl+Mbnso7SHzE1A+TGBkPG5jsgSoTrKtVdaeHD90iKjyxDqVPDN ceViP5NcDxpavWKP4r3QCMjp4tiMRqH0+bWhQFQVwwZ9vd6h2ju1WtrZX4wlJQJb bMVRf1/bWOj9QHhRS9+6qyC12pnPjkPCI+1FMhDQXuXPoQsq0FKdWyU2hl5SK/4K 83HKqQ7trV7cDcTTIb6ODkn1W6sdwWR/Pfd4Nzl/LlNy+FqEe5C88Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:54 2026 by rpki-client