This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer File: ntoJbbyNWaRCchzBadautkn1_T8.cer (raw, json) Hash identifier: 9P6hIW0/R9wrj2ErEyksqcD2PnKO/zUXmcqHjMB5OuQ= Subject key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE5065DB302C7F1F502A4CAAD88D0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201633 IP: 193.33.156.0/24 IP: 206.225.17.0/24 IP: 2a12:d4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:50:65:db:30:2c:7f:1f:50:2a:4c:aa:d8:8d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:5e:b2:46:9f:5f:8c:31:cd:40:f7:44:b1: f0:4f:3b:ee:9d:36:48:58:c4:6b:99:e4:38:46:3c: d9:ef:f1:8d:e0:36:6c:d0:7e:36:81:b4:b7:4a:12: ca:78:ed:9b:ea:59:3b:0d:f9:03:87:8c:49:93:98: c0:9a:c4:e9:5b:f7:8a:4a:fc:a6:8a:5e:ef:38:64: 01:4c:65:12:77:c1:eb:67:ff:ee:3b:7e:6e:7f:26: fa:c6:65:bf:74:2a:1e:77:57:33:d2:01:fa:d1:68: e5:01:7f:31:37:d8:a2:b8:a0:46:6b:74:81:02:20: 7f:3d:f2:a2:cc:66:9a:89:38:dc:bd:73:26:ab:c6: 7a:73:a3:dc:af:a1:98:b5:1c:0f:63:64:ff:b6:1e: 3c:ef:d1:d6:db:9f:b2:17:74:2b:ff:2a:21:d2:57: 0b:b4:93:66:83:37:bb:79:47:51:87:cb:eb:37:64: b5:8b:ce:a2:6e:39:a5:4b:6a:44:22:93:e0:f3:f1: 23:6f:6a:96:f6:ad:30:b8:34:db:dc:e9:55:bb:0b: 91:7d:63:e1:32:95:e2:5d:cc:d2:4a:32:f9:a9:89: 03:20:5e:7d:10:9d:49:a5:2c:8e:65:67:7e:58:b4: 80:47:a5:78:a6:46:79:76:49:bd:fd:b7:4a:79:1f: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.156.0/24 206.225.17.0/24 IPv6: 2a12:d4c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201633 Signature Algorithm: sha256WithRSAEncryption 65:45:83:ec:bb:56:1b:5c:a8:a7:34:7f:e3:10:32:89:86:04: 27:78:64:23:25:89:83:84:37:c1:64:3c:da:67:c6:c3:79:8d: e1:d9:17:8b:32:80:e0:fe:e7:bc:d5:ef:f0:6d:1a:18:1d:c9: 55:df:40:6e:eb:b3:b8:ad:42:4c:66:53:08:f9:60:48:6f:3a: fe:42:5a:3d:1e:95:cf:06:96:34:2e:2b:00:92:d4:49:6f:87: 43:5f:0d:bb:99:d0:df:f7:28:ad:52:93:4b:c8:2d:d4:7a:08: a5:7e:01:37:d7:84:e2:4e:ef:6e:78:b2:fe:89:85:6f:13:13: f7:5d:51:ab:eb:ad:2a:31:bf:c9:31:74:da:7f:28:2a:4a:4d: 10:9b:e4:60:cf:b7:fa:e4:f6:6a:d1:a5:ab:d8:10:ff:a3:1c: da:b6:06:77:ee:94:cf:cc:7f:5b:5e:6c:f8:3f:24:48:e1:71: 08:9b:04:17:f8:06:1a:8a:f9:54:85:72:2b:71:82:73:80:e4: 61:39:32:34:06:29:19:1b:a2:08:8b:1e:cb:82:d5:fa:12:fa: 30:a5:8f:e4:80:5a:6c:f0:a2:d1:7b:f7:1b:1e:4e:e0:f7:a3: 22:79:68:b2:1e:03:dd:23:e8:62:36:6b:5d:72:6d:f2:95:1d: ca:74:80:61 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87lBl2zAsfx9QKkyq2I0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWRhMDk2ZGJjOGQ1OWE0NDI3MjFjYzE2OWQ2YWViNjQ5ZjVmZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiFeskafX4wxzUD3RLHwTzvunTZI WMRrmeQ4RjzZ7/GN4DZs0H42gbS3ShLKeO2b6lk7DfkDh4xJk5jAmsTpW/eKSvym il7vOGQBTGUSd8HrZ//uO35ufyb6xmW/dCoed1cz0gH60WjlAX8xN9iiuKBGa3SB AiB/PfKizGaaiTjcvXMmq8Z6c6Pcr6GYtRwPY2T/th4879HW25+yF3Qr/yoh0lcL tJNmgze7eUdRh8vrN2S1i86ibjmlS2pEIpPg8/Ejb2qW9q0wuDTb3OlVuwuRfWPh MpXiXczSSjL5qYkDIF59EJ1JpSyOZWd+WLSAR6V4pkZ5dkm9/bdKeR9AnwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJ7aCW28jVmkQnIcwWnWrrZJ9f0/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzk4MWI1 MC0wM2FiLTQxNGItYTMxMC1iZGM1ZDZjYjIxNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvOTgxYjUw LTAzYWItNDE0Yi1hMzEwLWJkYzVkNmNiMjE0MS8xL250b0piYnlOV2FSQ2NoekJh ZGF1dGtuMV9UOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwSGcAwQAzuERMA0EAgACMAcDBQMqEtTAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMToTANBgkqhkiG9w0BAQsFAAOCAQEAZUWD 7LtWG1yopzR/4xAyiYYEJ3hkIyWJg4Q3wWQ82mfGw3mN4dkXizKA4P7nvNXv8G0a GB3JVd9AbuuzuK1CTGZTCPlgSG86/kJaPR6VzwaWNC4rAJLUSW+HQ18Nu5nQ3/co rVKTS8gt1HoIpX4BN9eE4k7vbniy/omFbxMT911Rq+utKjG/yTF02n8oKkpNEJvk YM+3+uT2atGlq9gQ/6Mc2rYGd+6Uz8x/W15s+D8kSOFxCJsEF/gGGor5VIVyK3GC c4DkYTkyNAYpGRuiCIsey4LV+hL6MKWP5IBabPCi0Xv3Gx5O4PejInlosh4D3SPo YjZrXXJt8pUdynSAYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:30 2026 by rpki-client