This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer (raw, json) Hash identifier: DXukyqGvM4gy7fTvwwjO+lqTYi02hW+q8HBMXlh4riw= Subject key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80155A8A939793F7646060781C0F06 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.76.44.0/22 IP: 2a03:4ea0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:15:5a:8a:93:97:93:f7:64:60:60:78:1c:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aff3596546d4620b02a9642f08b77cfe6502ae99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:2b:f3:0c:a2:ce:33:4b:01:a8:47:34:0f: d0:07:ce:23:57:86:83:2c:e6:be:42:04:3a:b6:40: c1:12:c4:5a:42:8c:5f:20:0f:68:b5:3f:aa:8c:a1: 44:7e:f3:0a:11:d3:da:88:97:d5:04:09:2a:ef:32: b1:cc:88:47:f9:70:43:46:db:14:0e:63:35:17:50: 9d:6c:6c:a1:17:d9:41:84:fc:10:ee:3e:20:a1:8a: 16:72:63:0f:f8:a4:9d:06:b8:d5:1c:99:1d:2a:1f: 41:f0:a5:43:c2:51:34:7d:97:64:cd:e5:4e:12:88: 90:07:c3:77:cc:d6:15:0d:da:a6:d0:f9:6d:30:9c: 69:4d:02:36:36:ca:e9:57:be:9a:78:d4:b2:47:ca: 99:42:f9:60:22:46:27:62:a3:3a:26:5b:b6:ca:ca: ca:b8:9f:17:e6:9a:8b:b9:9e:9a:0c:8f:e1:c5:27: b7:d0:12:57:12:94:64:d4:d4:fa:8c:b8:f3:5e:a4: af:db:e8:69:ec:c3:1d:27:e5:5f:d8:82:0e:57:52: 62:79:28:35:74:04:d5:a2:f1:89:b3:8a:25:fb:b7: b5:39:67:de:35:0f:a8:20:a5:17:de:08:e8:5d:07: 77:1d:fc:ac:16:79:7d:b6:38:c8:5c:80:cb:ed:a4: e4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.44.0/22 IPv6: 2a03:4ea0::/32 Signature Algorithm: sha256WithRSAEncryption 46:b1:0a:36:49:42:a9:67:7d:6f:ca:71:cf:06:72:94:3c:7f: a8:69:4b:7e:00:d7:8d:59:30:bb:12:dc:ce:87:fb:3b:74:e9: ce:c0:33:41:f2:4b:9c:72:3d:27:02:07:14:ee:97:06:c8:e2: a5:c4:18:e4:08:9d:17:49:e1:7c:41:64:d6:b5:86:05:15:a9: d3:73:50:fd:b4:80:20:5f:64:cc:70:18:34:08:a6:83:b3:6b: ce:cb:88:f2:de:b0:89:49:09:9e:e3:a7:d5:f4:16:94:7b:ad: 84:f4:72:3b:7d:f1:09:0d:fb:d5:c9:eb:75:f6:23:2b:bd:47: 60:00:5c:7d:ca:35:e9:f2:ee:03:88:b6:f2:87:63:30:a7:69: 48:7a:ec:c2:06:5d:7a:82:92:e4:9e:89:f6:83:95:34:79:a3: 18:bc:26:2c:28:b9:b4:33:8a:ff:9e:50:7f:f5:07:d7:c8:78: 9a:0e:e1:c8:d6:8b:f3:b4:7c:14:bd:ed:9f:da:50:ac:2b:84: 1b:44:80:65:e5:13:34:be:e8:9a:00:78:1d:9f:00:fe:a4:a6: 57:0a:d4:1e:ec:24:d0:3f:9f:18:b4:7c:52:a0:73:89:bb:8c: b3:c9:85:86:0d:44:76:ca:89:f5:d0:a3:53:f9:29:44:74:50: ce:c5:bc:c2 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8gBVaipOXk/dkYGB4HA8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmYzNTk2NTQ2ZDQ2MjBiMDJhOTY0MmYwOGI3N2NmZTY1MDJhZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlIr8wyizjNLAahHNA/QB84jV4aD LOa+QgQ6tkDBEsRaQoxfIA9otT+qjKFEfvMKEdPaiJfVBAkq7zKxzIhH+XBDRtsU DmM1F1CdbGyhF9lBhPwQ7j4goYoWcmMP+KSdBrjVHJkdKh9B8KVDwlE0fZdkzeVO EoiQB8N3zNYVDdqm0PltMJxpTQI2NsrpV76aeNSyR8qZQvlgIkYnYqM6Jlu2ysrK uJ8X5pqLuZ6aDI/hxSe30BJXEpRk1NT6jLjzXqSv2+hp7MMdJ+Vf2IIOV1JieSg1 dATVovGJs4ol+7e1OWfeNQ+oIKUX3gjoXQd3HfysFnl9tjjIXIDL7aTkXwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFK/zWWVG1GILAqlkLwi3fP5lAq6ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzAyOTlm NC1kMDBkLTQ1N2MtYmI2Ny0yYWI5YWY5Mzg0MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMDI5OWY0 LWQwMGQtNDU3Yy1iYjY3LTJhYjlhZjkzODQzNC8xL3JfTlpaVWJVWWdzQ3FXUXZD TGQ4X21VQ3Jway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUwsMA0EAgACMAcDBQAqA06gMA0GCSqGSIb3 DQEBCwUAA4IBAQBGsQo2SUKpZ31vynHPBnKUPH+oaUt+ANeNWTC7EtzOh/s7dOnO wDNB8kuccj0nAgcU7pcGyOKlxBjkCJ0XSeF8QWTWtYYFFanTc1D9tIAgX2TMcBg0 CKaDs2vOy4jy3rCJSQme46fV9BaUe62E9HI7ffEJDfvVyet19iMrvUdgAFx9yjXp 8u4DiLbyh2Mwp2lIeuzCBl16gpLknon2g5U0eaMYvCYsKLm0M4r/nlB/9QfXyHia DuHI1ovztHwUve2f2lCsK4QbRIBl5RM0vuiaAHgdnwD+pKZXCtQe7CTQP58YtHxS oHOJu4yzyYWGDUR2yon10KNT+SlEdFDOxbzC -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:37 2026 by rpki-client