This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer File: nvnDHh7MuhkCs_YiWT3pcspxi1w.cer (raw, json) Hash identifier: qrbufq5ZX4uy7e8YaEmBPWZn7Lfbff90WYk5dFkjZn8= Subject key identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36D7084BA1D7D4DA0DC5EA43655163 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208679 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d7:08:4b:a1:d7:d4:da:0d:c5:ea:43:65:51:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ef9c31e1eccba1902b3f622593de972ca718b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:e2:7f:b9:76:47:40:96:b3:f6:7c:c5:4f: a8:c6:13:c1:78:d9:d1:bb:84:b9:ef:a3:66:6d:39: 94:4d:fe:e8:75:14:b9:b2:a9:81:71:c3:69:d4:ed: fd:87:f8:f7:cc:de:8b:fb:46:05:74:a4:9e:e9:b3: e5:5e:39:cf:a6:af:50:8f:0f:67:ff:c3:a6:dd:92: cc:62:6a:80:12:e4:9a:dc:ba:d5:88:d8:04:f6:b2: c9:5f:e8:04:b8:8c:87:c0:a4:d0:6a:a5:4a:10:8a: ba:76:7d:8a:52:86:ab:31:51:de:79:bc:9b:b4:d7: 52:f9:01:51:56:25:13:da:b9:70:25:69:3f:3f:e1: 37:f1:c8:d7:1e:70:79:be:dc:01:51:d2:58:a4:d4: dd:3a:b7:0f:75:d2:3b:9a:3f:aa:3f:ea:49:e9:ba: 4b:85:aa:ff:7f:ea:8f:c8:d9:07:e6:99:5d:e5:97: 6f:c7:9f:47:6e:84:ba:3b:1b:11:ab:45:b1:25:16: 07:f0:68:e9:5d:0d:1a:5d:f5:a1:ca:d4:d7:90:d0: 77:66:72:7a:9e:bb:bd:46:21:59:42:d0:1f:c8:5c: 44:c2:0f:d1:b6:48:1b:96:9a:5c:11:fb:bc:d6:95: 8a:f7:c8:45:a2:0c:96:15:95:17:8e:7a:86:af:2f: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208679 Signature Algorithm: sha256WithRSAEncryption 66:9c:ab:52:cf:14:f7:90:00:86:86:5e:8e:4d:d2:6d:c2:95: e1:4c:ba:fc:3e:e6:db:ab:45:1f:ff:2a:8d:d4:3c:5f:f4:cc: 21:c8:96:72:ab:e0:e5:df:02:91:34:2f:52:30:b6:04:d0:a2: 15:91:59:d2:17:94:98:13:40:8a:51:d3:4e:c9:41:0b:f1:74: 44:4d:9f:eb:10:4a:29:0c:cf:c6:20:e1:83:87:fb:b4:20:7b: c7:6d:1d:b4:5f:f9:04:74:66:93:55:2c:c2:2e:13:74:36:67: 72:12:7d:74:a9:d6:26:89:c3:d4:4f:bf:c5:ba:9a:8d:35:fc: 74:6f:68:54:12:92:b3:53:4c:61:2e:4a:62:1a:c8:6a:e1:11: e7:31:db:96:eb:2f:55:61:82:d1:4e:c1:42:c9:89:74:dd:ff: b5:92:88:d8:47:99:44:9c:b8:68:f9:02:93:d0:52:fe:5f:60: 8d:80:e2:dc:5e:c2:7e:9a:e4:de:cf:7e:1e:ff:c9:dd:ff:fa: 23:8e:1e:9d:ac:62:1f:61:c3:30:fd:ae:5d:bf:85:42:a5:90: 02:04:58:d4:f5:7e:b4:ff:41:7e:c3:0b:05:ee:7a:f8:6e:1e: 09:8e:3c:8e:32:a0:39:fb:02:36:d7:60:96:f5:95:9a:98:3c: 2b:f8:5f:4c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NtcIS6HX1NoNxepDZVFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWY5YzMxZTFlY2NiYTE5MDJiM2Y2MjI1OTNkZTk3MmNhNzE4YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOPif7l2R0CWs/Z8xU+oxhPBeNnR u4S576NmbTmUTf7odRS5sqmBccNp1O39h/j3zN6L+0YFdKSe6bPlXjnPpq9Qjw9n /8Om3ZLMYmqAEuSa3LrViNgE9rLJX+gEuIyHwKTQaqVKEIq6dn2KUoarMVHeebyb tNdS+QFRViUT2rlwJWk/P+E38cjXHnB5vtwBUdJYpNTdOrcPddI7mj+qP+pJ6bpL har/f+qPyNkH5pld5Zdvx59HboS6OxsRq0WxJRYH8GjpXQ0aXfWhytTXkNB3ZnJ6 nru9RiFZQtAfyFxEwg/RtkgblppcEfu81pWK98hFogyWFZUXjnqGry8fVQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJ75wx4ezLoZArP2Ilk96XLKcYtcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzJmYTdi OC1hNDg0LTQ3ZGYtYjFjMi05NzJjMGZhZTY3YjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvMmZhN2I4 LWE0ODQtNDdkZi1iMWMyLTk3MmMwZmFlNjdiOC8xL252bkRIaDdNdWhrQ3NfWWlX VDNwY3NweGkxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvJzANBgkqhkiG9w0BAQsFAAOCAQEAZpyrUs8U95AA hoZejk3SbcKV4Uy6/D7m26tFH/8qjdQ8X/TMIciWcqvg5d8CkTQvUjC2BNCiFZFZ 0heUmBNAilHTTslBC/F0RE2f6xBKKQzPxiDhg4f7tCB7x20dtF/5BHRmk1Uswi4T dDZnchJ9dKnWJonD1E+/xbqajTX8dG9oVBKSs1NMYS5KYhrIauER5zHblusvVWGC 0U7BQsmJdN3/tZKI2EeZRJy4aPkCk9BS/l9gjYDi3F7Cfprk3s9+Hv/J3f/6I44e naxiH2HDMP2uXb+FQqWQAgRY1PV+tP9BfsMLBe56+G4eCY48jjKgOfsCNtdglvWV mpg8K/hfTA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:38 2026 by rpki-client