This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer File: nszH3a4R-I4QvSCGbhvW5ldWl-M.cer (raw, json) Hash identifier: EsN1KErBFli4oBbrHqXEFgJiCZAMdpts/ATYZOABhF8= Subject key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82EF7D8F8A4E8A2E355A767D9088BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215530 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ef:7d:8f:8a:4e:8a:2e:35:5a:76:7d:90:88:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:b9:56:44:ef:2c:60:93:ee:a8:0c:e0:94: 43:59:4d:3c:b0:40:c7:20:46:c4:f1:f1:37:35:87: b1:b6:b2:72:ed:79:4e:64:3e:0c:f5:ce:82:87:11: 00:f8:53:cb:7c:84:b1:ee:31:dd:bd:81:8f:78:68: 7e:8a:e3:9f:14:10:75:51:c8:c1:8d:94:83:f0:8e: 64:24:fe:de:6e:00:bd:3a:e6:a4:f1:08:9d:23:3c: 48:c5:8f:db:7a:f4:b4:b8:29:dc:c8:27:65:92:8b: f9:ee:f5:52:10:55:7d:74:aa:fd:fc:dd:42:89:78: a1:e5:9f:45:99:a0:76:bb:72:f1:41:73:71:32:a7: 1e:84:86:55:94:d2:6e:93:63:af:7e:1a:e7:71:68: 08:f6:a2:8e:fc:e7:ab:f9:85:cd:47:18:82:f4:dd: 49:bf:5c:7a:49:c2:a4:dc:65:45:00:4d:fc:1a:e7: 84:1e:c4:83:36:91:5f:4c:47:d7:14:95:79:36:33: 05:18:ba:aa:62:a1:df:35:a1:d7:e3:7d:34:53:c2: 3e:4a:e6:48:06:0a:2c:ae:38:30:af:83:32:ca:40: bb:ec:3a:73:23:06:82:57:b2:fd:93:34:b8:16:83: e5:71:76:c2:23:20:28:f7:29:05:43:30:31:3f:4e: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215530 Signature Algorithm: sha256WithRSAEncryption 1e:92:ff:0a:6f:c5:1d:f9:f4:2c:fe:6d:69:8b:01:0f:89:b4: 97:7e:4b:71:15:b8:2c:62:09:67:36:ee:ec:95:c4:4e:62:6d: f6:79:33:5a:82:43:96:16:f4:07:09:17:96:62:cb:93:1a:b5: d3:77:91:3f:6e:83:73:53:2f:e6:26:10:3d:09:f1:03:47:ee: b3:d9:d7:2e:a1:d2:56:3f:93:25:84:a6:99:1d:2d:ae:6f:8c: 90:69:5a:7d:78:3c:9a:cb:84:15:b2:d6:ee:52:39:1f:dd:22: d1:a6:10:7f:c4:49:d3:ce:93:f2:14:03:56:1e:9e:2e:a5:16: 25:68:1e:3a:24:d5:75:71:80:3d:86:fa:c6:13:56:3c:1b:7b: c8:15:ab:bc:a6:c3:54:b8:f3:83:32:ff:b4:69:40:22:72:b2: dc:29:f0:e8:92:32:5b:41:16:54:b1:f4:be:42:9d:56:c0:51: 26:65:55:21:bc:d9:35:f7:be:ef:18:c6:af:e5:9c:2d:42:5f: 79:a3:d2:eb:0f:b9:1c:eb:6f:13:17:dc:9b:a0:20:f6:61:d2: 11:4d:be:ae:fe:4e:1a:a8:a5:8c:27:64:5b:97:d3:4b:9e:cd: b0:ef:df:16:bf:c7:99:64:fb:b5:2f:3c:b0:fc:07:9d:42:36: 51:63:8f:7b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/gu99j4pOii41WnZ9kIi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWNjYzdkZGFlMTFmODhlMTBiZDIwODY2ZTFiZDZlNjU3NTY5N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSq5VkTvLGCT7qgM4JRDWU08sEDH IEbE8fE3NYextrJy7XlOZD4M9c6ChxEA+FPLfISx7jHdvYGPeGh+iuOfFBB1UcjB jZSD8I5kJP7ebgC9Ouak8QidIzxIxY/bevS0uCncyCdlkov57vVSEFV9dKr9/N1C iXih5Z9FmaB2u3LxQXNxMqcehIZVlNJuk2OvfhrncWgI9qKO/Oer+YXNRxiC9N1J v1x6ScKk3GVFAE38GueEHsSDNpFfTEfXFJV5NjMFGLqqYqHfNaHX4300U8I+SuZI Bgosrjgwr4MyykC77DpzIwaCV7L9kzS4FoPlcXbCIyAo9ykFQzAxP04HzQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJ7Mx92uEfiOEL0ghm4b1uZXVpfjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2ViNGRm ZS0wMzg0LTQ4MzEtYjNhZC1lNjcyYjMxOTA2ODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvZWI0ZGZl LTAzODQtNDgzMS1iM2FkLWU2NzJiMzE5MDY4Ny8xL25zekgzYTRSLUk0UXZTQ0di aHZXNWxkV2wtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJ6jANBgkqhkiG9w0BAQsFAAOCAQEAHpL/Cm/FHfn0 LP5taYsBD4m0l35LcRW4LGIJZzbu7JXETmJt9nkzWoJDlhb0BwkXlmLLkxq103eR P26Dc1Mv5iYQPQnxA0fus9nXLqHSVj+TJYSmmR0trm+MkGlafXg8msuEFbLW7lI5 H90i0aYQf8RJ086T8hQDVh6eLqUWJWgeOiTVdXGAPYb6xhNWPBt7yBWrvKbDVLjz gzL/tGlAInKy3Cnw6JIyW0EWVLH0vkKdVsBRJmVVIbzZNfe+7xjGr+WcLUJfeaPS 6w+5HOtvExfcm6Ag9mHSEU2+rv5OGqiljCdkW5fTS57NsO/fFr/HmWT7tS88sPwH nUI2UWOPew== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:07 2026 by rpki-client