This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer (raw, json) Hash identifier: fifgAtz6RizP41QUMNIU4Mk7kbBpWd0dGxcf7zgL7us= Subject key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4E676A82E087009020DECF4B153D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49126 IP: 94.102.90.0/23 IP: 94.138.192.0/19 IP: 185.48.180.0/22 IP: 2a01:a3a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e6:76:a8:2e:08:70:09:02:0d:ec:f4:b1:53:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e4372f63932ba7fe8f161b564b93860614a80ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:e5:68:6a:9b:9c:26:2e:49:34:2f:89:8d: b2:ce:e4:6f:6c:6c:74:75:1e:5e:3d:f6:eb:c0:14: 24:2c:60:29:d3:b1:8c:73:57:f0:ee:d8:33:1f:d2: f9:d6:28:27:9c:4a:38:43:05:5a:90:b4:5e:4e:ef: 18:47:60:f5:67:cf:10:6e:86:81:27:39:6f:f2:72: 14:64:9b:62:13:8a:6c:59:ba:1b:60:16:9f:39:98: b3:e0:83:4c:9c:9a:97:66:9e:31:3e:89:a7:d6:d5: ed:21:43:15:21:f0:83:73:29:a3:3c:b8:b1:2c:0c: 26:ce:0b:25:5f:96:47:25:72:4a:4c:ce:61:a1:ba: 5f:98:3d:d8:70:19:b0:36:36:7b:2e:c9:66:d7:3a: 59:08:7a:87:c7:a1:99:c4:5c:05:95:26:16:a8:f3: 07:ee:9f:02:b5:a1:09:50:dd:fc:63:b2:f2:59:ed: 2b:99:b1:36:4d:f0:b7:20:cb:fc:ca:8a:d4:0d:c7: cd:08:54:ff:bf:92:2e:63:c5:d7:65:17:f0:ca:35: cd:7f:35:f2:ce:40:ca:6d:4c:50:8d:02:61:06:a7: 97:97:1f:8a:34:3c:db:7d:88:98:5b:4c:5e:2e:ac: c9:f8:7d:cf:26:df:ab:12:a7:2f:ec:77:10:af:af: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.102.90.0/23 94.138.192.0/19 185.48.180.0/22 IPv6: 2a01:a3a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49126 Signature Algorithm: sha256WithRSAEncryption 9d:ad:15:f0:ad:b1:c5:d8:9d:22:b7:5c:0a:2f:1a:7e:00:82: e1:9c:00:db:91:4f:0b:58:b9:ed:f5:05:06:fe:7f:21:a3:96: 65:6b:39:6a:74:4e:e7:bc:31:d5:cc:5e:23:6d:73:eb:ab:f8: a7:03:90:e9:23:0a:14:38:c7:0a:3b:a1:30:4b:a5:b4:28:7c: fc:e7:85:7e:17:aa:76:f4:46:03:16:6a:f1:9a:a0:ce:06:1f: 31:6c:a1:9d:a2:42:9d:c2:5f:ca:af:ad:f0:34:cc:15:b7:e2: c5:35:3c:42:81:a1:f7:12:d0:ef:2c:2f:b1:8f:b2:b2:ae:64: 5c:f4:36:fa:59:e6:ea:a1:4a:20:c0:68:b6:81:fd:7a:02:36: d0:0b:a3:96:9d:13:0d:07:bf:7f:29:2c:ca:71:7e:aa:73:05: d4:30:c5:10:8b:ea:9a:7d:fe:cc:58:53:65:d0:c1:22:cf:21: f6:59:e8:cc:87:38:69:59:dc:e4:0d:7f:64:a1:1d:69:51:9d: 6e:03:97:6d:82:6c:84:be:8d:1b:be:ae:1a:89:e4:db:fa:fe: ea:da:b9:40:fe:2f:81:51:de:d4:06:c0:d9:1e:73:bf:01:92: f9:7a:a7:a3:3a:4e:aa:eb:56:41:cc:23:a1:6f:ba:78:00:ef: 4b:24:da:64 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7pOZ2qC4IcAkCDez0sVPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQzNzJmNjM5MzJiYTdmZThmMTYxYjU2NGI5Mzg2MDYxNGE4MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRnlaGqbnCYuSTQviY2yzuRvbGx0 dR5ePfbrwBQkLGAp07GMc1fw7tgzH9L51ignnEo4QwVakLReTu8YR2D1Z88QboaB Jzlv8nIUZJtiE4psWbobYBafOZiz4INMnJqXZp4xPomn1tXtIUMVIfCDcymjPLix LAwmzgslX5ZHJXJKTM5hobpfmD3YcBmwNjZ7Lslm1zpZCHqHx6GZxFwFlSYWqPMH 7p8CtaEJUN38Y7LyWe0rmbE2TfC3IMv8yorUDcfNCFT/v5IuY8XXZRfwyjXNfzXy zkDKbUxQjQJhBqeXlx+KNDzbfYiYW0xeLqzJ+H3PJt+rEqcv7HcQr6/+VQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzM5Njdh Ni03OWYzLTRhZmYtYjM0Yi1hZTBlYTY2NDNiYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMzk2N2E2 LTc5ZjMtNGFmZi1iMzRiLWFlMGVhNjY0M2JiZC8xL25rTnk5amt5dW5fbzhXRzFa TGs0WUdGS2dMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBXmZaAwQFXorAAwQCuTC0MA0EAgACMAcDBQAq AaOgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC/5jANBgkqhkiG9w0BAQsFAAOC AQEAna0V8K2xxdidIrdcCi8afgCC4ZwA25FPC1i57fUFBv5/IaOWZWs5anRO57wx 1cxeI21z66v4pwOQ6SMKFDjHCjuhMEultCh8/OeFfheqdvRGAxZq8ZqgzgYfMWyh naJCncJfyq+t8DTMFbfixTU8QoGh9xLQ7ywvsY+ysq5kXPQ2+lnm6qFKIMBotoH9 egI20Aujlp0TDQe/fyksynF+qnMF1DDFEIvqmn3+zFhTZdDBIs8h9lnozIc4aVnc 5A1/ZKEdaVGdbgOXbYJshL6NG76uGonk2/r+6tq5QP4vgVHe1AbA2R5zvwGS+Xqn ozpOqutWQcwjoW+6eADvSyTaZA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:48 2026 by rpki-client