This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer (raw, json) Hash identifier: f3sP3kIWk6/iysN/TsT2jSqlp0ZsveyWOD2MPLaQY78= Subject key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78352E27665B19F6469D9C57866A2930 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.176.134.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2e:27:66:5b:19:f6:46:9d:9c:57:86:6a:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acd6be97bcfe12becbe82b7841047f57972a935a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:f1:6a:77:c9:09:00:81:0b:3f:55:0e:ea: db:5d:5c:0f:f1:df:71:b7:87:62:da:43:33:ac:bf: 59:2c:2e:64:a5:9f:21:a3:3b:e6:41:ae:7f:ed:2b: 5d:93:a6:15:9c:57:31:3e:f5:06:9c:c8:71:47:d0: 16:1f:73:d5:df:1e:eb:01:c4:e7:c8:81:6f:5e:f3: 47:9c:87:c6:c8:98:82:6a:e8:ff:58:ab:50:80:78: 07:56:7a:b7:ee:69:2f:60:e1:34:93:15:60:4a:bd: 62:36:e2:0f:b9:fd:8f:ce:c6:0a:c3:21:f0:ca:de: df:da:5e:ba:32:36:6e:00:fe:18:2c:b3:9f:3a:f5: f0:45:48:04:a4:6c:b4:bc:09:82:d3:ec:66:72:e3: e1:3a:d7:89:fc:34:8e:d1:d0:82:ae:be:0c:73:c3: 1f:e9:ef:84:5b:b4:a2:14:c8:48:97:a9:01:ca:04: ff:be:38:55:67:b7:df:8d:4a:ae:33:05:c2:c4:51: d6:62:a9:6e:bf:6e:25:e0:35:75:f4:50:84:3d:ac: 61:ab:66:f2:c7:95:18:ec:63:70:74:22:18:92:27: bc:0c:b7:4f:a6:e6:15:a2:cd:1e:e0:93:26:0a:7e: d9:1a:de:8d:47:42:10:aa:f4:87:03:67:a6:ba:29: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.134.0/24 Signature Algorithm: sha256WithRSAEncryption a0:41:15:53:ca:c6:aa:d9:21:d8:f2:e2:86:f1:92:8c:30:0f: 0b:8e:12:ae:43:3e:b8:9a:c7:1e:e7:42:66:a5:5d:47:ee:6c: 43:2c:0a:aa:d1:14:83:ec:b1:b8:2f:d0:d7:2a:2f:30:86:60: dd:7e:82:47:0d:5a:ca:69:3f:40:74:2c:40:30:80:5e:a1:47: 49:73:dc:90:5a:10:26:d2:f8:b5:68:90:0e:87:48:56:85:fb: 0e:d6:ba:29:ec:5a:b0:64:fc:bf:2c:1c:cf:b4:46:81:3b:21: c9:ab:36:19:54:78:7f:e1:e0:f9:ba:3b:e8:1c:02:f3:24:51: 45:8c:fc:4d:2f:34:ac:7f:d2:67:31:0e:42:c6:80:25:00:cb: 03:0e:99:d7:61:48:ce:91:13:9a:c8:17:9b:64:bd:9a:33:99: 78:e1:09:6e:dd:6e:78:66:e7:ae:17:85:28:7d:5e:65:68:6d: eb:bb:89:7d:c0:84:fe:97:82:09:44:cb:62:80:35:69:43:94: 42:d9:59:59:4f:89:ca:35:2b:1c:9a:a8:e0:5e:40:2f:62:5e: e7:69:1a:a9:64:f5:fe:72:ca:0b:77:88:e3:7a:d8:2a:83:bd: 95:10:3e:49:32:75:93:48:3b:d6:be:84:8b:ae:6f:60:0c:ee: 5b:73:cc:36 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NS4nZlsZ9kadnFeGaikwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2Q2YmU5N2JjZmUxMmJlY2JlODJiNzg0MTA0N2Y1Nzk3MmE5MzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA/xanfJCQCBCz9VDurbXVwP8d9x t4di2kMzrL9ZLC5kpZ8hozvmQa5/7Stdk6YVnFcxPvUGnMhxR9AWH3PV3x7rAcTn yIFvXvNHnIfGyJiCauj/WKtQgHgHVnq37mkvYOE0kxVgSr1iNuIPuf2PzsYKwyHw yt7f2l66MjZuAP4YLLOfOvXwRUgEpGy0vAmC0+xmcuPhOteJ/DSO0dCCrr4Mc8Mf 6e+EW7SiFMhIl6kBygT/vjhVZ7ffjUquMwXCxFHWYqluv24l4DV19FCEPaxhq2by x5UY7GNwdCIYkie8DLdPpuYVos0e4JMmCn7ZGt6NR0IQqvSHA2emuim6VwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKzWvpe8/hK+y+greEEEf1eXKpNaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzRiN2My ZS0wODlmLTQ3MDgtOTE4NC0yYTg0YWNiZTA3ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvNGI3YzJl LTA4OWYtNDcwOC05MTg0LTJhODRhY2JlMDdlZS8xL3JOYS1sN3otRXI3TDZDdDRR UVJfVjVjcWsxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAubCGMA0GCSqGSIb3DQEBCwUAA4IBAQCgQRVT ysaq2SHY8uKG8ZKMMA8LjhKuQz64msce50JmpV1H7mxDLAqq0RSD7LG4L9DXKi8w hmDdfoJHDVrKaT9AdCxAMIBeoUdJc9yQWhAm0vi1aJAOh0hWhfsO1rop7FqwZPy/ LBzPtEaBOyHJqzYZVHh/4eD5ujvoHALzJFFFjPxNLzSsf9JnMQ5CxoAlAMsDDpnX YUjOkROayBebZL2aM5l44Qlu3W54ZueuF4UofV5laG3ru4l9wIT+l4IJRMtigDVp Q5RC2VlZT4nKNSscmqjgXkAvYl7naRqpZPX+csoLd4jjetgqg72VED5JMnWTSDvW voSLrm9gDO5bc8w2 -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:51 2026 by rpki-client