This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer File: nkVus5ycwGznHHdUoD8_PwCSgd0.cer (raw, json) Hash identifier: qHyDdLMsaVy+VGmVOj0WEvnJp0f7U0n8YPYo4EWZuPs= Subject key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66B08AB86C2DBF3631A42619A5145 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44264 IP: 91.199.72.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6b:08:ab:86:c2:db:f3:63:1a:42:61:9a:51:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:38:01:c1:51:ea:7b:ea:d5:c3:2b:29:2c: d5:ed:c3:2c:7f:67:95:b7:0c:c0:a1:6e:92:a2:42: 12:e2:85:2f:f3:ff:d4:0d:8b:ad:63:ab:42:a2:cf: 89:d3:a4:30:a5:fc:aa:27:a0:07:91:1e:78:99:52: b0:51:4e:04:32:91:3e:ac:82:d9:20:bd:1e:e3:41: 59:70:f0:6a:b1:c2:80:a2:32:0f:6f:05:a9:75:e7: 15:64:90:9e:8e:97:6b:49:c8:a9:b5:0c:96:54:f7: 08:ef:14:3c:a3:d4:9b:d0:58:b3:e4:f4:d7:c5:b5: b7:66:23:db:65:64:64:7b:68:09:0b:67:b5:f3:4e: e2:6e:47:6b:bc:68:1d:e3:e2:34:d7:59:49:56:5c: 21:84:75:21:6f:2c:e9:ae:92:39:a9:2a:45:81:1a: 52:53:5b:ad:31:3e:79:df:5c:00:30:0c:83:1e:67: 3f:fe:6a:2a:f6:96:2d:4b:13:ab:94:a5:9a:7f:d3: 3d:72:d1:9f:f7:69:17:87:b1:47:a9:fe:9b:b0:c7: c2:31:8d:9f:25:b2:78:c0:a5:76:65:bb:a1:70:31: a7:66:c4:e3:57:b2:7a:2b:77:78:25:50:4f:20:66: 2c:56:37:8c:bb:5c:ec:a2:2e:2f:51:c1:06:5e:35: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.72.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44264 Signature Algorithm: sha256WithRSAEncryption 35:6a:41:15:2e:a4:23:ff:da:89:33:02:71:78:19:cd:88:7d: 20:8e:5e:af:bd:39:1a:d2:b0:65:aa:37:df:59:3a:d6:82:bd: a9:1e:11:80:2d:e7:72:17:cf:1b:dc:47:bd:ed:df:7d:12:0b: cb:8c:ed:9e:67:16:c4:1a:6f:c7:f1:b9:6b:9a:19:3b:ff:56: 3a:52:26:b1:1f:c4:86:58:8d:3c:23:ce:ec:1a:e1:bf:5f:33: 9d:58:5d:5c:33:ee:20:70:dd:01:c6:6d:ab:e8:29:04:c2:81: 53:d1:0f:73:a4:c6:8f:06:5f:05:9f:f4:d2:98:06:26:d5:6d: 02:df:56:96:2b:72:64:7a:72:68:05:86:8a:36:98:a6:da:75: 61:f7:2b:28:db:40:80:ca:ee:91:3a:3d:98:45:0a:5d:fc:ee: 57:42:99:71:9c:e1:38:b8:e5:97:ad:a8:6b:08:9c:c9:bf:e8: 70:fa:a3:70:e7:7d:27:36:b7:3e:72:b6:07:ea:9c:a8:9e:26: 46:d6:7a:a6:25:75:0f:14:d2:9a:59:bc:ff:07:82:32:8e:7e: e6:6d:c9:97:73:16:6a:0f:f1:08:37:6d:f8:1b:07:c5:42:8e: db:93:e1:19:1c:d7:7c:b9:e1:dd:d6:72:8b:9b:fc:e8:9f:f5: 3e:43:85:fd -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xmsIq4bC2/NjGkJhmlFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQ1NmViMzljOWNjMDZjZTcxYzc3NTRhMDNmM2YzZjAwOTI4MWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F04AcFR6nvq1cMrKSzV7cMsf2eV twzAoW6SokIS4oUv8//UDYutY6tCos+J06QwpfyqJ6AHkR54mVKwUU4EMpE+rILZ IL0e40FZcPBqscKAojIPbwWpdecVZJCejpdrSciptQyWVPcI7xQ8o9Sb0Fiz5PTX xbW3ZiPbZWRke2gJC2e1807ibkdrvGgd4+I011lJVlwhhHUhbyzprpI5qSpFgRpS U1utMT5531wAMAyDHmc//moq9pYtSxOrlKWaf9M9ctGf92kXh7FHqf6bsMfCMY2f JbJ4wKV2ZbuhcDGnZsTjV7J6K3d4JVBPIGYsVjeMu1zsoi4vUcEGXjXn2QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ5FbrOcnMBs5xx3VKA/Pz8AkoHdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzEyYzcx Mi0wYzZlLTRmYjUtOTBkOS1jMWY5MTU4MjQzZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMTJjNzEy LTBjNmUtNGZiNS05MGQ5LWMxZjkxNTgyNDNlYS8xL25rVnVzNXljd0d6bkhIZFVv RDhfUHdDU2dkMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8dIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCs6DANBgkqhkiG9w0BAQsFAAOCAQEANWpBFS6kI//aiTMCcXgZzYh9II5er705 GtKwZao331k61oK9qR4RgC3nchfPG9xHve3ffRILy4ztnmcWxBpvx/G5a5oZO/9W OlImsR/EhliNPCPO7Brhv18znVhdXDPuIHDdAcZtq+gpBMKBU9EPc6TGjwZfBZ/0 0pgGJtVtAt9WlityZHpyaAWGijaYptp1YfcrKNtAgMrukTo9mEUKXfzuV0KZcZzh OLjll62oawicyb/ocPqjcOd9Jza3PnK2B+qcqJ4mRtZ6piV1DxTSmlm8/weCMo5+ 5m3Jl3MWag/xCDdt+BsHxUKO25PhGRzXfLnh3dZyi5v86J/1PkOF/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:57 2026 by rpki-client