This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer File: nmw2D-XITxlWHHrpu89PnPpHi08.cer (raw, json) Hash identifier: vDpZH1+70ktYrGvopnxfaIS8qoeTe0NQoPu+/YzB6jA= Subject key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79102AB724E418DE5151F23458E17D10 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49607 IP: 185.23.4.0/24 IP: 2a12:50c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2a:b7:24:e4:18:de:51:51:f2:34:58:e1:7d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:02:ed:0e:06:2a:4b:09:19:9e:de:ed:38: af:9c:fe:ba:f2:e6:6e:28:53:b4:f6:eb:e1:c9:dd: c7:d8:62:d6:2e:e3:48:e9:d1:dc:42:42:62:c4:bd: a3:43:1c:27:e0:04:9c:64:2c:c4:83:b5:56:9b:f9: a3:52:e6:f1:66:d3:83:a9:b7:6a:db:4a:c6:35:51: a5:93:e2:37:dd:ed:48:19:cf:8b:54:13:b4:65:23: 9f:1a:d3:9d:b5:31:f5:a1:44:26:a9:c5:d5:20:b1: 65:b7:fd:11:b3:19:07:85:0a:50:00:45:a0:6f:77: 57:5a:45:9e:90:fa:79:71:c1:e8:ef:19:10:78:e9: 59:5d:bf:18:ea:f4:97:3f:26:30:cf:c7:89:46:44: 29:4d:40:02:f2:13:67:c0:62:d8:77:b6:79:79:c9: fe:0d:ed:27:e6:ff:2d:9c:ce:23:cf:e2:61:be:ec: 58:aa:a1:fe:1c:f3:bb:3f:5c:b6:cc:92:93:a5:2b: bc:85:d0:22:70:b0:ce:04:31:bb:98:44:b6:9a:77: 80:b3:16:f9:00:94:4b:ca:8a:69:0f:92:c7:f5:e1: 34:62:33:db:30:c8:e9:83:38:8f:26:54:8e:b3:f5: 3c:51:63:4d:0e:5f:2b:f7:12:f4:25:55:c9:cf:9f: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.4.0/24 IPv6: 2a12:50c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49607 Signature Algorithm: sha256WithRSAEncryption 1b:72:aa:e6:84:d7:1a:37:97:8f:1c:c2:4f:05:9c:be:e4:3c: e0:3c:22:77:5d:69:7f:c3:87:78:38:ad:59:01:66:2e:24:75: b1:76:63:06:7d:18:bb:cd:9b:e5:df:8d:f1:14:cf:e8:97:28: e5:91:7e:46:89:1e:60:1f:56:a4:8f:b6:d6:7f:bb:87:58:89: ba:32:8a:fe:2b:4e:2d:74:aa:b5:65:14:95:18:08:d7:eb:1f: 0d:ae:ed:c9:e9:e5:5c:49:2f:71:2b:b8:57:5f:ef:88:d4:c0: ab:52:e5:16:0d:2e:42:4d:e6:fd:74:89:f9:6d:b7:ac:2b:c7: 7b:e3:9c:15:4c:01:aa:99:84:00:6e:10:17:5e:bb:2b:af:7f: 89:6d:5c:6f:ad:51:24:c5:43:4f:f8:0e:cb:5c:b1:39:ad:3a: 7b:10:c9:15:a8:a6:2d:82:3c:e3:eb:2e:2b:5b:fc:ad:8c:8b: b6:fe:1d:f3:ec:d4:33:ea:80:dc:86:bd:1f:41:41:f3:e0:13: 11:19:96:9c:4d:af:c1:7a:57:fb:ab:0d:c2:f3:53:52:12:1b: 34:3d:d3:46:69:39:48:d3:ce:6a:94:a2:cb:b9:d1:e7:e4:85: 80:b1:5e:14:02:84:a6:39:44:23:06:53:3c:61:df:11:46:e0: f9:52:ee:c6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ECq3JOQY3lFR8jRY4X0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTZjMzYwZmU1Yzg0ZjE5NTYxYzdhZTliYmNmNGY5Y2ZhNDc4YjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEoC7Q4GKksJGZ7e7TivnP668uZu KFO09uvhyd3H2GLWLuNI6dHcQkJixL2jQxwn4AScZCzEg7VWm/mjUubxZtODqbdq 20rGNVGlk+I33e1IGc+LVBO0ZSOfGtOdtTH1oUQmqcXVILFlt/0RsxkHhQpQAEWg b3dXWkWekPp5ccHo7xkQeOlZXb8Y6vSXPyYwz8eJRkQpTUAC8hNnwGLYd7Z5ecn+ De0n5v8tnM4jz+JhvuxYqqH+HPO7P1y2zJKTpSu8hdAicLDOBDG7mES2mneAsxb5 AJRLyoppD5LH9eE0YjPbMMjpgziPJlSOs/U8UWNNDl8r9xL0JVXJz5/i4QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJ5sNg/lyE8ZVhx66bvPT5z6R4tPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2QyMjMz Yy1hNzQxLTRiZDktYjZkYi03ZWQ5OThkZGI4NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZDIyMzNj LWE3NDEtNGJkOS1iNmRiLTdlZDk5OGRkYjg1YS8xL25tdzJELVhJVHhsV0hIcnB1 ODlQblBwSGkwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuRcEMA0EAgACMAcDBQMqElDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDBxzANBgkqhkiG9w0BAQsFAAOCAQEAG3Kq5oTXGjeX jxzCTwWcvuQ84Dwid11pf8OHeDitWQFmLiR1sXZjBn0Yu82b5d+N8RTP6Jco5ZF+ RokeYB9WpI+21n+7h1iJujKK/itOLXSqtWUUlRgI1+sfDa7tyenlXEkvcSu4V1/v iNTAq1LlFg0uQk3m/XSJ+W23rCvHe+OcFUwBqpmEAG4QF167K69/iW1cb61RJMVD T/gOy1yxOa06exDJFaimLYI84+suK1v8rYyLtv4d8+zUM+qA3Ia9H0FB8+ATERmW nE2vwXpX+6sNwvNTUhIbND3TRmk5SNPOapSiy7nR5+SFgLFeFAKEpjlEIwZTPGHf EUbg+VLuxg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:52 2026 by rpki-client