This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer (raw, json) Hash identifier: e0vJvhhyY0azovYHzp2F7VqPP2NSvlHCYGtAP+4Z2lI= Subject key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A63C00CD1732751CDEF3FC4D35355 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199356 IP: 185.18.68.0/22 IP: 2a03:d140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:63:c0:0c:d1:73:27:51:cd:ef:3f:c4:d3:53:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:bb:41:73:12:23:08:28:77:73:98:ac:1d: c9:98:41:da:e8:7c:76:07:db:6d:a3:69:e1:47:a1: e0:d6:56:5c:ed:17:0c:06:9f:56:3b:38:77:24:6a: d8:c0:e6:ac:da:39:09:d7:d9:2d:e5:17:9d:18:6e: db:89:10:a3:b1:a8:7d:cf:07:06:14:04:b2:95:59: 7b:cb:4d:66:97:57:72:7b:43:58:71:2a:8d:2b:f6: 43:7e:fd:53:e3:51:9d:6f:2f:42:c3:26:dc:7f:09: 2a:72:42:73:44:df:80:ce:96:67:2e:1a:26:77:0c: 0d:e4:c5:5c:6b:91:62:f7:e5:43:8f:d8:a5:43:cc: a2:00:d5:47:db:da:37:d7:f5:ca:57:1b:4b:c7:05: f4:62:17:c7:af:6a:ed:80:ab:d2:f8:9f:bd:d4:ad: e4:27:d5:d5:ad:17:50:6c:02:ed:e9:e4:c7:95:db: 67:2a:be:6b:8b:04:f5:6f:d1:c0:be:f1:e7:3c:f8: 38:c9:75:55:89:12:50:ec:f2:44:25:b1:42:41:57: 24:07:04:81:c0:25:3d:b3:31:9c:99:c0:79:b2:b8: 71:97:73:9d:21:45:0e:7a:bc:f8:5a:b8:06:6e:55: 25:4f:74:db:c7:41:b1:04:18:2f:da:cc:0d:61:0c: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.68.0/22 IPv6: 2a03:d140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199356 Signature Algorithm: sha256WithRSAEncryption 59:a2:fe:7a:5f:33:65:cc:4f:8d:d5:25:5f:d7:6a:ac:77:dc: 10:bd:94:1d:5e:12:c4:3c:26:ab:ae:b4:77:b3:13:5a:14:dc: 6e:33:94:5e:82:59:5c:cc:bf:71:19:f5:fc:ff:84:8d:50:a8: a9:ef:f0:ce:6f:f6:9a:c2:f7:cc:44:e7:44:dd:f8:0d:a8:b4: 16:a7:ab:39:67:bf:e0:64:34:51:3c:47:cb:88:9a:fc:bc:f8: 53:fe:5d:2b:bf:b0:af:fa:d4:e3:c3:71:e2:79:6c:64:08:a2: fa:4f:8e:98:12:d2:68:6f:95:af:98:33:58:6d:c0:18:68:c4: a1:72:1b:c2:d1:21:94:e8:40:08:a5:5f:32:b3:8e:b4:dd:8d: 03:91:c2:b5:c3:ab:51:b7:1e:93:0b:3b:e3:2c:38:44:b8:6b: ba:ad:cb:bb:6a:a1:73:0f:b0:7a:9b:90:05:0e:6b:1d:93:c9: da:41:fb:48:55:a4:87:5f:69:16:cc:fb:f6:d4:5b:5d:44:45: 50:7b:95:cb:80:ae:99:ed:d3:ad:6c:81:0e:7e:4d:45:a6:8a: bf:bd:20:44:42:93:35:63:c7:c0:bd:e0:52:80:8a:00:c5:fb: 63:a7:13:bc:3c:c5:34:ca:47:19:87:17:db:9f:eb:a7:6b:5e: 28:ba:3b:28 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WmPADNFzJ1HN7z/E01NVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWExZTdlMmY4ZjMxNzc1OWYzNDY4ZmQ4MTViZjE0ZWIzNmUyMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOW7QXMSIwgod3OYrB3JmEHa6Hx2 B9tto2nhR6Hg1lZc7RcMBp9WOzh3JGrYwOas2jkJ19kt5RedGG7biRCjsah9zwcG FASylVl7y01ml1dye0NYcSqNK/ZDfv1T41Gdby9CwybcfwkqckJzRN+AzpZnLhom dwwN5MVca5Fi9+VDj9ilQ8yiANVH29o31/XKVxtLxwX0YhfHr2rtgKvS+J+91K3k J9XVrRdQbALt6eTHldtnKr5riwT1b9HAvvHnPPg4yXVViRJQ7PJEJbFCQVckBwSB wCU9szGcmcB5srhxl3OdIUUOerz4WrgGblUlT3Tbx0GxBBgv2swNYQzuPQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJ6h5+L48xd1nzRo/YFb8U6zbiHIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2JhMzU3 Ny1jY2IzLTRlYTYtODM2OC03NDU4NjA4ZjhkOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYmEzNTc3 LWNjYjMtNGVhNi04MzY4LTc0NTg2MDhmOGQ5OS8xL25xSG40dmp6RjNXZk5Hajln VnZ4VHJOdUljZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRJEMA0EAgACMAcDBQAqA9FAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMKvDANBgkqhkiG9w0BAQsFAAOCAQEAWaL+el8zZcxP jdUlX9dqrHfcEL2UHV4SxDwmq660d7MTWhTcbjOUXoJZXMy/cRn1/P+EjVCoqe/w zm/2msL3zETnRN34Dai0FqerOWe/4GQ0UTxHy4ia/Lz4U/5dK7+wr/rU48Nx4nls ZAii+k+OmBLSaG+Vr5gzWG3AGGjEoXIbwtEhlOhACKVfMrOOtN2NA5HCtcOrUbce kws74yw4RLhruq3Lu2qhcw+wepuQBQ5rHZPJ2kH7SFWkh19pFsz79tRbXURFUHuV y4Cume3TrWyBDn5NRaaKv70gREKTNWPHwL3gUoCKAMX7Y6cTvDzFNMpHGYcX25/r p2teKLo7KA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:26 2026 by rpki-client