This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer File: nkz1EkerV_Um84ByWaeNKwJZBgM.cer (raw, json) Hash identifier: iB4Q3EA6gXtQtLWPQNv+RMUBYhj5In/DTWPP7LX5jj4= Subject key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC055DE30CD71C1B50FF7C8E8E079 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.62.180.0/22 IP: 2a07:dc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c0:55:de:30:cd:71:c1:b5:0f:f7:c8:e8:e0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e4cf51247ab57f526f3807259a78d2b02590603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:59:21:5b:04:33:81:56:67:b0:c7:7b:23: 97:3a:12:a8:9c:7d:cb:38:c7:ce:b6:ff:24:ac:a3: 2a:ab:7e:b4:99:f2:53:2c:16:d0:d9:27:d2:32:4d: 53:1b:f5:ac:a0:19:08:35:a2:ab:ad:cd:af:9f:24: d0:69:b6:5e:7c:37:81:95:23:0e:79:9e:09:8f:69: 68:e1:fa:11:7d:e0:70:97:88:d9:5c:23:3a:6c:4c: 73:4c:c2:8c:c3:b8:39:f1:f3:ff:5b:a6:dc:a4:0b: bb:d4:d6:3d:69:fd:51:61:e5:2e:82:b9:50:07:29: 40:0f:0b:ec:45:50:dc:af:3c:06:ef:e3:45:23:b6: 99:0d:df:42:b9:46:57:0e:a2:43:b2:e4:43:f1:b3: 38:c5:85:a8:ae:f3:2b:4f:16:d1:07:34:6a:e9:53: 90:0c:d6:67:ea:b9:19:48:5d:09:e2:08:dc:43:48: 8b:f4:f7:63:3f:13:3f:cc:28:a0:65:1c:a4:ca:c1: 9d:b7:e0:7d:69:67:cd:29:bb:c9:17:e0:64:a0:c8: 4d:5e:93:a7:de:17:e7:50:2e:5c:b4:92:b1:10:e4: 68:ee:08:67:be:4d:a6:64:39:5b:bc:e5:9f:ae:2a: 00:82:02:1e:36:ce:49:c5:d3:a0:f4:47:40:94:3f: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.180.0/22 IPv6: 2a07:dc00::/29 Signature Algorithm: sha256WithRSAEncryption 96:50:43:58:f7:a2:8c:ca:58:4b:06:3a:9d:87:5b:f4:ef:9c: 00:34:37:de:f2:0c:07:4a:44:f2:e1:aa:f0:db:60:09:4e:ee: 2d:40:25:c7:44:b4:11:e9:50:59:e0:75:f8:d4:8b:5b:d7:55: 75:4b:3e:f7:58:cf:3b:59:96:69:74:79:a8:71:cf:c8:39:53: 89:44:ca:c7:60:4c:11:88:73:70:a1:1f:5c:ec:b1:4b:bc:74: 1f:d5:b9:f0:74:1a:11:d4:26:49:48:c7:76:be:7c:b2:61:b4: c0:27:6d:f0:21:d0:1c:0f:59:67:ca:09:07:35:e6:f6:e2:6f: af:38:89:9b:28:c6:e8:b7:c9:29:6b:25:0e:9d:28:e8:54:7a: c3:b6:ca:62:ec:2f:6b:c0:55:45:93:23:93:95:ae:4e:70:7f: 04:f5:32:24:14:a3:74:33:9d:33:4b:fb:30:1a:3d:4c:07:69: d2:62:f4:2c:33:c8:d1:f7:a8:f5:92:0c:90:43:3a:66:39:20: 86:67:86:10:7b:57:12:ff:44:f9:5d:e6:94:3b:71:3d:fb:9b: a9:cc:6f:b8:9b:90:8f:a2:9d:30:cb:fa:c5:68:ee:e9:9c:66: 24:33:61:fb:0a:69:32:a9:24:8c:e8:11:9e:50:c4:0c:f9:02: c6:c7:59:6a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26sBV3jDNccG1D/fI6OB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTRjZjUxMjQ3YWI1N2Y1MjZmMzgwNzI1OWE3OGQyYjAyNTkwNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg5ZIVsEM4FWZ7DHeyOXOhKonH3L OMfOtv8krKMqq360mfJTLBbQ2SfSMk1TG/WsoBkINaKrrc2vnyTQabZefDeBlSMO eZ4Jj2lo4foRfeBwl4jZXCM6bExzTMKMw7g58fP/W6bcpAu71NY9af1RYeUugrlQ BylADwvsRVDcrzwG7+NFI7aZDd9CuUZXDqJDsuRD8bM4xYWorvMrTxbRBzRq6VOQ DNZn6rkZSF0J4gjcQ0iL9PdjPxM/zCigZRykysGdt+B9aWfNKbvJF+BkoMhNXpOn 3hfnUC5ctJKxEORo7ghnvk2mZDlbvOWfrioAggIeNs5JxdOg9EdAlD+BpQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJ5M9RJHq1f1JvOAclmnjSsCWQYDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2I2NzY4 Zi1kMzk1LTQ2ODEtYTNmMy0zY2YzMDY4MDdhN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvYjY3Njhm LWQzOTUtNDY4MS1hM2YzLTNjZjMwNjgwN2E3ZS8xL25rejFFa2VyVl9VbTg0QnlX YWVOS3dKWkJnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwj60MA0EAgACMAcDBQMqB9wAMA0GCSqGSIb3 DQEBCwUAA4IBAQCWUENY96KMylhLBjqdh1v075wANDfe8gwHSkTy4arw22AJTu4t QCXHRLQR6VBZ4HX41Itb11V1Sz73WM87WZZpdHmocc/IOVOJRMrHYEwRiHNwoR9c 7LFLvHQf1bnwdBoR1CZJSMd2vnyyYbTAJ23wIdAcD1lnygkHNeb24m+vOImbKMbo t8kpayUOnSjoVHrDtspi7C9rwFVFkyOTla5OcH8E9TIkFKN0M50zS/swGj1MB2nS YvQsM8jR96j1kgyQQzpmOSCGZ4YQe1cS/0T5XeaUO3E9+5upzG+4m5CPop0wy/rF aO7pnGYkM2H7CmkyqSSM6BGeUMQM+QLGx1lq -----END CERTIFICATE-----Generated at Thu Jan 29 03:34:13 2026 by rpki-client