This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer File: noBwLuah3L864lehmUFfWbgzjqQ.cer (raw, json) Hash identifier: X5vGb/tI+uk9EKg8cg6KQ0RxavTr8qcKtMmIf/0Q/yg= Subject key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA37C675B8415ABFD35782B8DB7B150 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47548 IP: 5.149.176.0/20 IP: 185.216.36.0/22 IP: 2a00:b7c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7c:67:5b:84:15:ab:fd:35:78:2b:8d:b7:b1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:34:0f:df:89:cb:0c:b6:5e:66:43:85:b8:89: a4:8e:dd:01:9c:e4:d7:e0:65:55:cd:49:73:8f:e7: 63:e0:14:1e:c5:ea:e2:52:00:97:a5:e2:72:7a:6b: ed:ad:fc:d6:50:9a:41:e1:ac:f4:f5:fb:b2:06:35: 8c:bf:7e:fc:28:b1:5d:b1:df:f7:56:10:7b:96:57: c5:33:2e:06:9a:80:67:f5:1e:f4:3d:e0:d0:d3:64: a5:e2:fc:4b:d2:d0:38:b6:c4:da:3e:0b:5a:e3:57: 86:69:8e:53:3c:9d:6e:b5:d4:3d:6a:18:a3:f9:cc: 00:81:c4:5e:0d:87:d4:87:2f:1d:7a:44:e0:00:90: d8:c0:94:b4:46:75:7c:aa:3d:a5:f6:93:7d:be:72: 3b:a5:13:2b:ec:dd:d9:8f:e7:dc:1a:4f:85:ac:a9: b0:8c:c1:1b:36:92:b5:ff:fe:69:a3:aa:47:9a:04: 85:84:b7:f7:f6:8d:33:c7:e2:ad:47:cd:fa:51:a5: ce:dd:dd:26:2b:02:c9:9b:b5:91:df:8c:82:b4:8d: af:2a:b0:a3:a5:9c:d9:16:2c:a1:ee:21:bf:54:37: b1:65:c0:e7:b4:c5:30:12:9d:82:48:0c:f4:f7:9a: 5c:29:99:68:c8:43:0b:10:97:77:9f:dc:f4:e5:e6: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.176.0/20 185.216.36.0/22 IPv6: 2a00:b7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47548 Signature Algorithm: sha256WithRSAEncryption 58:d6:87:79:f3:e9:17:0c:af:de:9e:7c:7e:5b:1d:2d:ed:ee: 39:d3:81:4e:ec:5f:42:54:c0:66:fa:0f:89:65:e2:d9:7f:77: e7:de:5e:07:a5:4e:f0:0d:cb:0c:20:2f:f7:5b:9f:63:70:1b: e9:c0:d4:03:44:10:05:ad:27:e7:7d:b1:12:39:3a:7d:06:ff: 32:d5:b6:02:4e:ba:13:c0:00:c9:f6:57:c2:4c:d5:3c:ed:07: 34:bb:0c:ba:23:ba:b6:41:fe:68:c4:8b:b9:b8:f1:e0:43:32: ce:0b:89:a9:2a:5e:11:1b:9d:7f:0c:c1:b6:1a:da:8e:10:27: d9:45:12:2f:d3:a7:d4:9b:30:e6:57:f9:a1:e5:b1:58:4e:48: b4:c8:de:c8:4d:e6:a6:af:a8:2b:e2:31:ca:11:5c:35:d7:17: 1b:f3:a3:b1:7a:2e:e3:85:4f:a2:45:1c:ad:84:d0:d0:03:62: 12:3d:b1:02:7f:3e:93:8e:38:2e:bd:e9:67:e9:d5:5e:9b:7b: 5f:38:ea:ff:9a:bf:f8:1b:55:3d:28:62:f8:22:fc:a5:6a:3c: 5d:2c:7b:e4:bd:82:2e:52:5c:18:b9:c0:29:ae:14:cb:56:a1: e6:cd:e3:bf:10:38:36:ad:f7:09:a1:46:90:8c:b3:f0:61:96: 3c:53:09:25 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7o3xnW4QVq/01eCuNt7FQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTgwNzAyZWU2YTFkY2JmM2FlMjU3YTE5OTQxNWY1OWI4MzM4ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTQP34nLDLZeZkOFuImkjt0BnOTX 4GVVzUlzj+dj4BQexeriUgCXpeJyemvtrfzWUJpB4az09fuyBjWMv378KLFdsd/3 VhB7llfFMy4GmoBn9R70PeDQ02Sl4vxL0tA4tsTaPgta41eGaY5TPJ1utdQ9ahij +cwAgcReDYfUhy8dekTgAJDYwJS0RnV8qj2l9pN9vnI7pRMr7N3Zj+fcGk+FrKmw jMEbNpK1//5po6pHmgSFhLf39o0zx+KtR836UaXO3d0mKwLJm7WR34yCtI2vKrCj pZzZFiyh7iG/VDexZcDntMUwEp2CSAz095pcKZloyEMLEJd3n9z05eYH0wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJ6AcC7mody/OuJXoZlBX1m4M46kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzFiZGUz OS1iNmQ1LTQ2ZWMtYTgxMy0yNmVmOTY2NDNkODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMWJkZTM5 LWI2ZDUtNDZlYy1hODEzLTI2ZWY5NjY0M2Q4NC8xL25vQndMdWFoM0w4NjRsZWht VUZmV2JnempxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEBZWwAwQCudgkMA0EAgACMAcDBQAqALfAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC5vDANBgkqhkiG9w0BAQsFAAOCAQEAWNaH efPpFwyv3p58flsdLe3uOdOBTuxfQlTAZvoPiWXi2X93595eB6VO8A3LDCAv91uf Y3Ab6cDUA0QQBa0n532xEjk6fQb/MtW2Ak66E8AAyfZXwkzVPO0HNLsMuiO6tkH+ aMSLubjx4EMyzguJqSpeERudfwzBthrajhAn2UUSL9On1Jsw5lf5oeWxWE5ItMje yE3mpq+oK+IxyhFcNdcXG/OjsXou44VPokUcrYTQ0ANiEj2xAn8+k444Lr3pZ+nV Xpt7Xzjq/5q/+BtVPShi+CL8pWo8XSx75L2CLlJcGLnAKa4Uy1ah5s3jvxA4Nq33 CaFGkIyz8GGWPFMJJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:36 2026 by rpki-client