This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer File: nz7CHhDzZG5NwOI_X37ERQFWDeM.cer (raw, json) Hash identifier: 2DktzViEsePc4dXxTO72tVPZ9OIZpLAC8ZmTwwsWWqU= Subject key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED1C7AFE6A5925A3A1F6C58EB441E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.200.145.0/24 IP: 2a01:efc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1c:7a:fe:6a:59:25:a3:a1:f6:c5:8e:b4:41:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:0c:44:af:0e:fc:99:de:22:3c:44:c9:ff: c3:b7:93:5a:d6:03:8a:7a:5b:4e:2f:b9:59:ef:ec: df:fa:b0:01:e3:63:aa:fd:36:92:76:25:f6:7b:67: 10:8a:18:93:5e:55:00:cc:15:24:62:7a:ab:c4:73: c4:07:b6:05:c9:8d:0f:f4:03:2d:2d:46:31:d4:f9: ef:b5:53:ae:63:58:1e:63:76:1d:57:e4:68:8e:82: 49:a3:16:2d:9a:90:17:92:e0:8c:f9:36:72:47:3e: f9:fb:a5:e8:e8:7c:67:4f:f8:79:36:e9:e4:af:6e: 91:a9:be:ed:e9:91:06:8a:9d:23:89:37:f8:f0:16: ee:7f:9a:e3:21:d9:a2:dc:4a:aa:69:5d:da:d0:05: 0c:65:73:f1:fe:81:a9:05:06:cb:f6:ef:1a:ea:5f: 6e:20:f4:b1:80:69:a8:08:34:22:f9:39:16:fc:3d: 1f:a9:5f:aa:37:35:ea:95:73:f1:ad:44:54:9f:3a: 54:af:7a:c6:b9:5a:36:38:da:e9:c5:e4:c7:22:74: eb:2c:07:ee:3d:23:fd:78:a2:cb:65:81:05:ed:a0: 3f:16:6b:76:2f:4a:40:75:3f:37:f9:3a:ef:10:5e: e5:a8:8d:42:d7:5b:e9:16:5a:07:73:b2:07:fc:22: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.145.0/24 IPv6: 2a01:efc0::/29 Signature Algorithm: sha256WithRSAEncryption 93:82:62:df:3b:71:09:6e:42:a7:29:c1:3b:63:e8:30:ab:93: 65:6c:b3:d4:13:dc:ae:f4:d0:8a:eb:53:26:cd:35:84:6a:0d: bc:22:7f:a4:1c:aa:76:cb:61:3e:f8:d7:50:c6:09:27:81:70: 03:ab:e3:8c:f0:65:ef:a3:c7:04:8f:ac:32:b0:10:32:b6:cc: b4:8f:d9:1d:f1:5e:e5:e8:9d:1f:2b:03:70:43:f4:14:76:af: 1f:ec:6a:1d:8f:8e:7c:50:6e:04:77:61:ac:66:5b:e2:96:cf: 69:70:a2:37:65:18:9e:18:73:23:e3:cb:9c:ed:8d:f1:5c:7a: 14:75:19:9c:21:4f:1b:47:e7:24:f1:79:c8:1e:92:69:48:f3: f5:92:dd:b2:8b:f3:48:b3:f5:c2:51:73:c0:cd:be:b7:f8:39: 9a:a9:af:f8:c0:a2:d5:cf:e4:31:a0:d6:10:0f:20:71:1e:87: 38:5f:bc:07:40:bd:e4:71:42:52:a1:e4:8c:86:31:0f:08:46: 38:4c:6a:d1:2b:40:d6:71:24:ca:d7:b0:81:b4:17:a8:8c:be: 5f:f4:54:0b:bb:b9:5c:31:2d:6f:70:9f:bc:65:91:ad:16:7f: 4d:41:69:a5:25:b9:fe:e3:8e:a2:8d:bb:01:19:eb:ac:8a:39: 1f:b5:1a:de -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57Rx6/mpZJaOh9sWOtEHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjNlYzIxZTEwZjM2NDZlNGRjMGUyM2Y1ZjdlYzQ0NTAxNTYwZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ8MRK8O/JneIjxEyf/Dt5Na1gOK eltOL7lZ7+zf+rAB42Oq/TaSdiX2e2cQihiTXlUAzBUkYnqrxHPEB7YFyY0P9AMt LUYx1PnvtVOuY1geY3YdV+RojoJJoxYtmpAXkuCM+TZyRz75+6Xo6HxnT/h5Nunk r26Rqb7t6ZEGip0jiTf48Bbuf5rjIdmi3EqqaV3a0AUMZXPx/oGpBQbL9u8a6l9u IPSxgGmoCDQi+TkW/D0fqV+qNzXqlXPxrURUnzpUr3rGuVo2ONrpxeTHInTrLAfu PSP9eKLLZYEF7aA/Fmt2L0pAdT83+TrvEF7lqI1C11vpFloHc7IH/CIIBwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJ8+wh4Q82RuTcDiP19+xEUBVg3jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzZiYWZl OS04NzhiLTQ2ZmQtYTMwNS03YmEyNWQ1NTk1ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvNmJhZmU5 LTg3OGItNDZmZC1hMzA1LTdiYTI1ZDU1OTVmYS8xL256N0NIaER6Wkc1TndPSV9Y MzdFUlFGV0RlTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW8iRMA0EAgACMAcDBQMqAe/AMA0GCSqGSIb3 DQEBCwUAA4IBAQCTgmLfO3EJbkKnKcE7Y+gwq5NlbLPUE9yu9NCK61MmzTWEag28 In+kHKp2y2E++NdQxgkngXADq+OM8GXvo8cEj6wysBAytsy0j9kd8V7l6J0fKwNw Q/QUdq8f7Godj458UG4Ed2GsZlvils9pcKI3ZRieGHMj48uc7Y3xXHoUdRmcIU8b R+ck8XnIHpJpSPP1kt2yi/NIs/XCUXPAzb63+Dmaqa/4wKLVz+QxoNYQDyBxHoc4 X7wHQL3kcUJSoeSMhjEPCEY4TGrRK0DWcSTK17CBtBeojL5f9FQLu7lcMS1vcJ+8 ZZGtFn9NQWmlJbn+446ijbsBGeusijkftRre -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:20 2026 by rpki-client