This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer File: nm0dxsqkHTvv_o0domcaUOf3mjA.cer (raw, json) Hash identifier: I5yff4yst+70mSXrSJ00aZAhXQO03GgSGnjesdmTfYE= Subject key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1E22E82828347DE646DEB0DE22F35EFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 02 Feb 2026 11:35:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34854 AS: 64473 IP: 2.56.11.0/24 IP: 107.150.174.0/24 IP: 2a07:22c0::/29 IP: 2a0c:6500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:22:e8:28:28:34:7d:e6:46:de:b0:de:22:f3:5e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 11:35:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:b9:0b:0e:82:d2:06:b4:17:9e:b4:2a:93: f7:11:76:d9:b7:43:71:f5:be:84:d4:17:f9:a9:6b: 47:0e:1a:3c:99:4b:39:2e:ad:7d:0a:0e:b9:bc:5d: 51:e8:bc:62:5a:54:5e:3f:ad:d4:2c:3e:43:94:e9: 9b:df:ba:ea:e2:ac:24:f5:64:71:5f:39:68:16:cf: 19:f6:e1:89:fb:99:d8:ec:62:6c:b4:ff:5e:a2:60: 7d:31:6a:a4:19:25:44:cd:c3:88:6e:c7:49:04:1e: e0:f9:b5:26:2d:e7:b0:77:92:0a:94:b5:77:ec:55: 08:42:23:f2:21:49:22:f9:d7:06:e6:e2:d7:06:84: 5c:5a:7c:2c:4c:b7:1d:53:cd:5c:2b:d4:3a:a5:8e: 45:57:dc:f5:de:f2:2a:40:67:cb:ed:b4:f5:8e:02: 8b:22:39:dc:63:c4:3b:cb:c9:ea:4d:44:df:4e:40: 2b:00:88:7c:65:00:1d:90:e0:0f:c1:52:8c:45:a1: d5:3d:28:91:fb:6f:47:5b:3e:70:6c:5f:83:c6:8f: 50:96:19:63:01:f1:f4:21:bf:14:96:2d:1b:1e:25: a1:9d:e2:af:9f:d9:b7:43:cc:95:34:fd:fe:90:48: b5:b4:57:f9:a8:b1:9f:51:9a:f1:86:29:7d:3e:10: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.11.0/24 107.150.174.0/24 IPv6: 2a07:22c0::/29 2a0c:6500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34854 64473 Signature Algorithm: sha256WithRSAEncryption 8a:c4:ee:db:4d:54:6e:a5:7a:2d:e7:50:f9:86:f4:4a:0a:da: 4a:4f:4b:2a:8f:ef:b7:f9:b0:b4:a8:aa:73:28:29:e6:d6:28: 8d:06:8d:64:9c:b7:0d:f7:94:f8:8a:5c:39:21:67:2c:19:03: 05:88:b7:1e:47:95:ef:ad:11:f5:44:b4:de:d4:40:a2:73:e9: f2:21:d2:f2:30:c9:3b:18:53:29:32:b4:cf:2a:bc:3e:aa:19: 92:6e:c8:71:4f:5d:23:98:04:35:fb:73:39:49:4a:b1:9f:2a: b5:0f:a3:a2:fd:72:77:51:bf:23:27:cc:9c:cf:37:b2:c0:bf: e3:16:45:8f:61:65:cf:9f:df:dc:60:20:37:20:83:bc:d0:39: 6e:52:46:e5:8e:26:d2:16:96:3d:2b:16:17:c1:11:e7:90:8e: 4f:2d:9e:50:f2:7c:d4:1b:09:8b:df:fc:34:03:91:0d:5b:6f: 73:f7:2e:ee:4e:3f:9b:7c:d0:ae:d7:94:e9:43:d6:83:a0:c8: 05:a6:48:14:26:ed:2a:29:c0:41:89:0a:15:03:83:c0:ce:ff: f6:40:1d:69:aa:f1:31:22:77:07:56:79:c0:ac:9a:a6:f7:99: 78:8b:19:8e:31:0b:a8:e0:a8:b7:7f:b8:98:0a:64:07:09:9e: fd:08:c0:2f -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZweIugoKDR95kbesN4i8178MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTEzNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTZkMWRjNmNhYTQxZDNiZWZmZThkMWRhMjY3MWE1MGU3Zjc5YTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzK5Cw6C0ga0F560KpP3EXbZt0Nx 9b6E1Bf5qWtHDho8mUs5Lq19Cg65vF1R6LxiWlReP63ULD5DlOmb37rq4qwk9WRx XzloFs8Z9uGJ+5nY7GJstP9eomB9MWqkGSVEzcOIbsdJBB7g+bUmLeewd5IKlLV3 7FUIQiPyIUki+dcG5uLXBoRcWnwsTLcdU81cK9Q6pY5FV9z13vIqQGfL7bT1jgKL IjncY8Q7y8nqTUTfTkArAIh8ZQAdkOAPwVKMRaHVPSiR+29HWz5wbF+Dxo9Qlhlj AfH0Ib8Uli0bHiWhneKvn9m3Q8yVNP3+kEi1tFf5qLGfUZrxhil9PhDrfwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFJ5tHcbKpB077/6NHaJnGlDn95owMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzE0OTFm OS1kYzc2LTQ3NzctYjViZS04M2Y5YThkMWQ0ZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMTQ5MWY5 LWRjNzYtNDc3Ny1iNWJlLTgzZjlhOGQxZDRkNi8xL25tMGR4c3FrSFR2dl9vMGRv bWNhVU9mM21qQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAAjgLAwQAa5auMBQEAgACMA4DBQMqByLAAwUD KgxlADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAiCYCAwD72TANBgkqhkiG9w0B AQsFAAOCAQEAisTu201UbqV6LedQ+Yb0SgraSk9LKo/vt/mwtKiqcygp5tYojQaN ZJy3DfeU+IpcOSFnLBkDBYi3HkeV760R9US03tRAonPp8iHS8jDJOxhTKTK0zyq8 PqoZkm7IcU9dI5gENftzOUlKsZ8qtQ+jov1yd1G/IyfMnM83ssC/4xZFj2Flz5/f 3GAgNyCDvNA5blJG5Y4m0haWPSsWF8ER55COTy2eUPJ81BsJi9/8NAORDVtvc/cu 7k4/m3zQrteU6UPWg6DIBaZIFCbtKinAQYkKFQODwM7/9kAdaarxMSJ3B1Z5wKya pveZeIsZjjELqOCot3+4mApkBwme/QjALw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:45 2026 by rpki-client