This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer File: nqeCd0gM8trWyesKUr5I33q2Z1o.cer (raw, json) Hash identifier: QlDdXeMy3h1lYfexBc0RGB9m1nzawLuDdaT4VFUslhw= Subject key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC78948FB2A336C1A282271E0308C18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.110.211.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:89:48:fb:2a:33:6c:1a:28:22:71:e0:30:8c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:a5:e5:e2:6b:70:9b:f9:73:f9:ef:19:21: be:e9:14:ea:3e:32:13:b0:30:7c:c4:32:c5:cc:45: c1:9f:90:63:e1:49:fe:84:a1:cb:fc:53:1a:51:08: 93:54:1a:fb:33:81:1b:ea:8d:a7:45:3b:f9:b3:77: 10:b8:10:16:39:4d:45:c8:d1:81:c0:e7:b5:bc:f6: 4f:e0:28:a5:a0:67:b8:49:f0:5e:ae:cd:0e:20:d1: b1:27:eb:49:21:ee:d3:d1:35:ec:75:10:5e:eb:4a: 29:6d:69:bf:f1:35:1a:61:8b:f8:14:0b:f9:78:40: ed:82:28:3b:a4:54:46:21:e5:61:a0:99:04:8c:f0: dc:69:5f:89:31:e2:6e:be:fa:c1:64:98:8c:89:36: dd:01:ff:f7:fb:b9:81:53:da:cc:7b:5c:52:d2:32: 6a:9e:42:19:06:42:ac:30:d6:f8:56:3c:62:c8:36: c9:c8:87:43:0b:14:c9:d6:24:75:1a:33:6a:de:29: f8:ac:23:75:3a:37:dc:55:e9:db:1c:98:2a:02:fc: b4:99:15:ad:12:5f:7a:9c:93:a6:f9:5f:cb:10:e6: a6:70:48:e8:09:1b:44:3a:50:c6:81:07:c4:31:3c: a4:2c:00:a6:14:ee:b2:fa:7e:8d:9d:99:d2:57:5d: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.211.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:67:83:b6:4a:6f:7e:6d:c0:2a:dd:95:a2:d1:bc:f4:0c:4b: 37:35:ce:52:5c:a5:f6:78:38:50:cb:d5:40:5e:e5:d5:8b:68: b0:91:37:17:0a:9b:7d:86:f4:45:06:ef:80:b6:7c:b6:aa:c7: 1f:0d:f0:a3:f3:a3:b0:fe:5c:bd:f1:a5:b5:c8:45:20:68:02: a6:5c:c0:09:26:04:27:65:8e:3b:86:95:66:2e:fe:d7:24:fc: 74:c0:a5:0e:cb:51:1c:2a:9c:6b:fb:60:9b:4f:81:42:74:34: 53:67:00:bf:42:3f:86:78:97:f6:d0:c0:80:dd:d9:8d:b2:00: 58:9a:90:f2:d3:a0:77:19:a8:17:d1:86:d6:9d:a5:0c:4d:92: ea:86:77:f4:77:f4:77:e5:ee:ac:da:0c:5e:5e:05:7e:18:a5: af:e3:83:b6:4d:1c:96:93:68:b8:74:8c:d2:1a:ef:c4:6f:7c: 15:d2:67:57:49:aa:6b:ed:23:a8:3a:62:e8:78:c0:ef:66:b1: a6:57:dd:0f:10:b5:7d:17:1b:4e:f5:c2:87:0b:e9:22:11:da: 04:c0:dc:41:a5:72:90:5d:9c:6b:64:f0:85:05:8e:bf:ef:c3: 37:15:6b:3b:33:cd:f7:b3:57:b3:fe:38:77:58:a2:50:35:26: ce:10:0e:0b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6x4lI+yozbBooInHgMIwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWE3ODI3NzQ4MGNmMmRhZDZjOWViMGE1MmJlNDhkZjdhYjY2NzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV6l5eJrcJv5c/nvGSG+6RTqPjIT sDB8xDLFzEXBn5Bj4Un+hKHL/FMaUQiTVBr7M4Eb6o2nRTv5s3cQuBAWOU1FyNGB wOe1vPZP4CiloGe4SfBers0OINGxJ+tJIe7T0TXsdRBe60opbWm/8TUaYYv4FAv5 eEDtgig7pFRGIeVhoJkEjPDcaV+JMeJuvvrBZJiMiTbdAf/3+7mBU9rMe1xS0jJq nkIZBkKsMNb4VjxiyDbJyIdDCxTJ1iR1GjNq3in4rCN1OjfcVenbHJgqAvy0mRWt El96nJOm+V/LEOamcEjoCRtEOlDGgQfEMTykLACmFO6y+n6NnZnSV12uhwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ6ngndIDPLa1snrClK+SN96tmdaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2NiOTQ5 My1lODM0LTRmMGUtOGFiYi0xYTkyZmIwZGMxYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvY2I5NDkz LWU4MzQtNGYwZS04YWJiLTFhOTJmYjBkYzFjNy8xL25xZUNkMGdNOHRyV3llc0tV cjVJMzNxMloxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwm7TMA0GCSqGSIb3DQEBCwUAA4IBAQCcZ4O2 Sm9+bcAq3ZWi0bz0DEs3Nc5SXKX2eDhQy9VAXuXVi2iwkTcXCpt9hvRFBu+Atny2 qscfDfCj86Ow/ly98aW1yEUgaAKmXMAJJgQnZY47hpVmLv7XJPx0wKUOy1EcKpxr +2CbT4FCdDRTZwC/Qj+GeJf20MCA3dmNsgBYmpDy06B3GagX0YbWnaUMTZLqhnf0 d/R35e6s2gxeXgV+GKWv44O2TRyWk2i4dIzSGu/Eb3wV0mdXSapr7SOoOmLoeMDv ZrGmV90PELV9FxtO9cKHC+kiEdoEwNxBpXKQXZxrZPCFBY6/78M3FWs7M833s1ez /jh3WKJQNSbOEA4L -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:36 2026 by rpki-client