This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer File: nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer (raw, json) Hash identifier: 3Snd53EfhSwdXbJK6rCo6gps1kH2t8Ri3MPXhPCVYHc= Subject key identifier: 9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A215ABCF63D27A994192F878BC2CEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.216.182.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:15:ab:cf:63:d2:7a:99:41:92:f8:78:bc:2c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:f3:40:95:e9:d6:43:15:53:80:5d:bc:8b: b6:8d:68:2a:4f:1c:81:27:dc:53:e1:ed:bb:fc:b5: 07:2a:cd:d7:9b:d2:e0:d5:62:b5:6c:be:d8:2d:d9: 1d:8d:cc:ad:61:23:95:7a:2b:44:3b:17:29:b8:d6: 7e:77:ee:db:91:6c:33:05:ea:36:36:ef:fe:b4:50: fc:40:05:8c:b3:f9:4e:42:4b:63:b5:2e:7f:60:13: 04:cf:84:c6:d0:bf:ae:aa:a5:7e:84:4d:0c:fc:05: e9:09:8b:8f:c1:70:03:a3:e4:82:fb:92:70:f1:a9: 99:fe:3d:df:d9:f1:31:6b:7f:0e:da:5e:81:28:5c: 15:c0:4b:1d:6e:81:73:5c:15:84:f3:9d:99:76:57: bd:80:55:11:46:87:af:5f:cd:ba:ab:5f:6c:ac:82: b0:ff:de:a7:ca:1d:4c:4d:8b:21:0b:68:83:8d:47: 1c:ef:7c:0b:24:09:32:e1:79:79:44:e4:a1:d9:2f: 18:38:09:10:63:65:88:4c:ac:38:1a:b1:e3:b6:21: aa:25:53:b1:61:69:e1:23:76:a7:94:3b:7b:2e:a6: c5:ca:15:aa:19:0b:f1:58:c9:27:cc:04:45:eb:cd: 3a:fe:d7:1a:f2:ca:12:b2:85:7b:cc:98:d9:cc:a9: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.182.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:11:c0:84:46:63:bb:ca:c4:d8:d7:66:2c:c4:ea:fa:a1:af: 81:16:e2:17:7c:56:1d:4a:b5:8d:74:0c:64:a8:c4:71:a6:af: 76:3d:5f:23:8f:99:7c:23:38:2f:4d:d8:17:99:95:5d:fd:ba: ac:dc:93:db:11:6a:82:fd:4e:bd:fe:34:28:ad:af:ec:7e:8f: b4:2b:22:11:7a:67:ab:c5:aa:ea:bf:40:31:da:54:93:7f:da: ec:cc:29:45:fa:96:56:d3:3d:83:88:bf:66:f9:5e:ce:cb:66: af:b1:e5:05:b7:ca:2e:da:c3:8b:f7:a5:5a:54:d5:56:73:a0: 52:29:be:f4:c0:06:e9:78:cb:04:85:9d:fc:d8:60:d4:56:4b: 6d:c0:44:be:e1:ef:6e:42:f3:c4:fc:38:32:fb:e3:a6:40:88: e5:ce:44:ef:2c:d7:45:0d:34:d2:f6:81:07:56:cd:aa:bf:7e: a3:18:ff:23:74:37:00:7c:0b:96:5c:b3:f3:46:e5:ea:ce:d0: bc:8c:fc:d0:c4:36:d5:81:2f:bc:fe:54:a2:b7:5d:c5:ff:60: 7c:4f:32:00:cc:eb:55:67:f4:78:cc:06:89:d6:03:67:3b:94: cb:eb:f2:8d:e0:d3:c4:33:9c:1a:ad:b2:00:df:a2:c7:c1:77: c6:d1:02:3b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4ohWrz2PSeplBkvh4vCzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjM5OTY2ODYzZDgyZmE4YmQxY2EzOTM2OTA1ZmExZTI0YTlhMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wfzQJXp1kMVU4BdvIu2jWgqTxyB J9xT4e27/LUHKs3Xm9Lg1WK1bL7YLdkdjcytYSOVeitEOxcpuNZ+d+7bkWwzBeo2 Nu/+tFD8QAWMs/lOQktjtS5/YBMEz4TG0L+uqqV+hE0M/AXpCYuPwXADo+SC+5Jw 8amZ/j3f2fExa38O2l6BKFwVwEsdboFzXBWE852Zdle9gFURRoevX826q19srIKw /96nyh1MTYshC2iDjUcc73wLJAky4Xl5ROSh2S8YOAkQY2WITKw4GrHjtiGqJVOx YWnhI3anlDt7LqbFyhWqGQvxWMknzARF6806/tca8soSsoV7zJjZzKl5TwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ85lmhj2C+ovRyjk2kF+h4kqaC/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlL2MzZTNh ZC01MWViLTRlOTYtOThiMi0wYjFkMDk0OTg1MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvYzNlM2Fk LTUxZWItNGU5Ni05OGIyLTBiMWQwOTQ5ODUzNC8xL256bVdhR1BZTDZpOUhLT1Rh UVg2SGlTcG9MOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9i2MA0GCSqGSIb3DQEBCwUAA4IBAQB8EcCE RmO7ysTY12YsxOr6oa+BFuIXfFYdSrWNdAxkqMRxpq92PV8jj5l8IzgvTdgXmZVd /bqs3JPbEWqC/U69/jQora/sfo+0KyIRemerxarqv0Ax2lSTf9rszClF+pZW0z2D iL9m+V7Oy2avseUFt8ou2sOL96VaVNVWc6BSKb70wAbpeMsEhZ382GDUVkttwES+ 4e9uQvPE/Dgy++OmQIjlzkTvLNdFDTTS9oEHVs2qv36jGP8jdDcAfAuWXLPzRuXq ztC8jPzQxDbVgS+8/lSit13F/2B8TzIAzOtVZ/R4zAaJ1gNnO5TL6/KN4NPEM5wa rbIA36LHwXfG0QI7 -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:55 2026 by rpki-client