This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer (raw, json) Hash identifier: hddBfHx65vAnq/q94hf9R+xIUQwArhQcNLBWKnyyRnE= Subject key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC3AE13C2A4E4459E658CEE15E57C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.95.135.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c3:ae:13:c2:a4:e4:45:9e:65:8c:ee:15:e5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ecb222b8126a21df32d015e4c4853957d1d9744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:f4:ac:86:a0:42:0a:ef:e6:c0:fd:1b:07: 24:00:6e:9a:f4:5a:4b:29:19:f7:9a:ab:1f:5a:4c: 8a:04:3e:9b:f4:86:02:b8:38:64:4e:2b:ac:19:31: 44:2a:7c:98:59:25:b9:b3:b2:9e:11:a7:09:b9:5a: d0:d9:40:9b:18:73:bc:7e:58:85:c9:db:7c:e0:8f: 50:d5:82:b0:a0:13:15:74:86:70:99:26:47:b2:0b: f9:ae:bd:3d:ef:b1:0a:2b:ea:b7:df:b6:a6:28:57: 40:4d:07:6c:96:f3:12:32:06:5a:ea:b0:be:56:af: 21:4d:c8:de:c8:e3:1a:71:45:90:e5:d5:ca:f4:6e: a0:a8:69:15:0a:48:ba:c1:14:01:4f:5b:09:bc:2d: 6d:d2:7b:a0:74:14:a9:19:c4:7c:8e:aa:22:56:71: 3d:5b:3a:2e:22:4f:55:2b:71:d3:94:10:a1:5a:19: 1d:53:dc:be:e3:95:26:a2:1e:68:bf:24:cc:e8:a9: 9e:ce:78:85:e9:21:98:8e:37:3b:cf:bd:a4:4e:d2: d5:b7:0b:18:ec:6e:32:a0:94:22:a1:91:4d:99:ef: 84:17:07:e2:1c:3d:61:46:e9:98:38:1b:5c:62:05: 93:c9:01:ac:69:dc:62:d9:d9:7b:93:11:1d:c1:be: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.135.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:67:fd:d1:0d:55:e0:88:82:11:33:31:9d:e1:04:61:31:59: 2e:4a:c8:be:21:8b:eb:c8:36:a0:63:d2:3e:c9:ca:1a:db:08: c6:00:94:f7:d8:53:f5:5f:be:ee:32:a7:0d:31:2a:e6:26:0a: da:ec:c4:a6:9f:b7:87:b2:58:93:cd:1c:91:e2:08:dc:18:7e: e9:56:97:ed:bf:55:6b:8d:0c:fe:57:af:ea:77:46:0a:ab:cd: bf:55:f4:79:93:fe:52:cc:06:75:af:f9:63:d5:35:ca:6a:a5: 37:48:f7:1d:67:b5:6f:47:16:2a:1a:57:47:e7:20:c3:7b:da: a9:57:96:33:d4:b5:b0:2f:39:d6:6f:a3:e3:97:08:d7:d0:e4: 48:bb:8d:bb:19:c2:c0:91:21:20:4b:dd:ab:d7:11:18:c5:c4: d9:d5:ab:9d:ee:7d:86:f5:78:52:a8:f9:a9:fc:6b:7c:fe:fa: 73:3f:26:70:75:16:57:ad:b3:85:e0:a9:69:b8:6d:04:66:c1: 4c:89:0a:30:80:e6:d7:51:8a:4a:92:69:1d:d5:e7:fd:e1:f2: 42:6f:d5:4d:c7:5b:2c:62:03:76:12:c4:27:e9:ed:10:f8:cd: 7b:a8:b6:d9:8e:af:05:d3:53:fa:32:da:8a:d2:25:78:55:53: 60:1b:59:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9ysOuE8Kk5EWeZYzuFeV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWNiMjIyYjgxMjZhMjFkZjMyZDAxNWU0YzQ4NTM5NTdkMWQ5NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNz0rIagQgrv5sD9GwckAG6a9FpL KRn3mqsfWkyKBD6b9IYCuDhkTiusGTFEKnyYWSW5s7KeEacJuVrQ2UCbGHO8fliF ydt84I9Q1YKwoBMVdIZwmSZHsgv5rr0977EKK+q337amKFdATQdslvMSMgZa6rC+ Vq8hTcjeyOMacUWQ5dXK9G6gqGkVCki6wRQBT1sJvC1t0nugdBSpGcR8jqoiVnE9 WzouIk9VK3HTlBChWhkdU9y+45Umoh5ovyTM6KmezniF6SGYjjc7z72kTtLVtwsY 7G4yoJQioZFNme+EFwfiHD1hRumYOBtcYgWTyQGsadxi2dl7kxEdwb6tmQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ7LIiuBJqId8y0BXkxIU5V9HZdEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2I0ZjI5 YS1hNzA5LTQyYmEtOTYzMi01OGU0ZjI0ZmFiZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYjRmMjlh LWE3MDktNDJiYS05NjMyLTU4ZTRmMjRmYWJlYS8xL25zc2lLNEVtb2gzekxRRmVU RWhUbFgwZGwwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw1+HMA0GCSqGSIb3DQEBCwUAA4IBAQCKZ/3R DVXgiIIRMzGd4QRhMVkuSsi+IYvryDagY9I+ycoa2wjGAJT32FP1X77uMqcNMSrm Jgra7MSmn7eHsliTzRyR4gjcGH7pVpftv1VrjQz+V6/qd0YKq82/VfR5k/5SzAZ1 r/lj1TXKaqU3SPcdZ7VvRxYqGldH5yDDe9qpV5Yz1LWwLznWb6PjlwjX0ORIu427 GcLAkSEgS92r1xEYxcTZ1aud7n2G9XhSqPmp/Gt8/vpzPyZwdRZXrbOF4KlpuG0E ZsFMiQowgObXUYpKkmkd1ef94fJCb9VNx1ssYgN2EsQn6e0Q+M17qLbZjq8F01P6 MtqK0iV4VVNgG1nY -----END CERTIFICATE-----Generated at Mon Jan 26 13:48:28 2026 by rpki-client