This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer File: v-NULdY_7SUN5ctl9uykh-f0eEc.cer (raw, json) Hash identifier: +hIA6XTAXx+nhRl1+FmK42Km1STY1aCANiE1EbzmyZ8= Subject key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70E26C497EF947269C1D00A8CFF12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12333 IP: 5.61.224.0/21 IP: 94.143.0.0/21 IP: 193.23.0.0/23 IP: 193.23.46.0/23 IP: 195.70.0.0/19 IP: 2a00:1840::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0e:26:c4:97:ef:94:72:69:c1:d0:0a:8c:ff:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:99:9c:85:97:f7:26:ce:4f:17:48:e7:e6: a8:18:e2:d1:7c:e6:bd:38:65:ab:1f:3f:9b:3d:0f: fd:73:79:e4:21:8c:ab:7c:d1:3f:35:a2:1e:36:e3: c4:14:0f:9e:19:28:bd:65:e8:27:e1:62:66:99:9a: 01:04:d8:46:f2:e0:44:7c:0b:8c:89:2f:cc:7d:2c: a8:4b:58:be:ee:67:26:ae:27:6a:c8:f4:60:ce:3c: 52:63:50:6a:f8:67:61:76:8c:bf:43:c7:00:ee:30: 79:59:c8:79:5f:69:c6:3c:d5:db:09:96:86:9b:b5: bd:ae:b5:c5:ae:de:b3:86:98:18:54:c6:c7:aa:75: 03:ce:1d:ec:c5:b9:b6:d7:00:9a:21:0d:95:80:26: a2:e8:fd:7f:2b:33:ab:0c:b5:f5:6d:4a:b4:22:27: 87:09:69:b1:ea:f7:88:5b:6f:d5:82:67:7d:97:ef: e7:7a:78:66:ce:87:b9:26:33:e0:bc:31:38:55:b6: 42:58:9d:e6:0b:05:1a:93:5a:9c:6f:05:a4:77:64: 87:06:3b:e9:e4:48:67:c6:e7:65:96:9b:37:01:84: 14:89:bb:d8:0b:f7:7e:63:c7:f3:61:2f:73:76:80: 1b:2a:9a:44:c0:09:64:e3:f7:55:38:1f:d7:52:09: 78:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.224.0/21 94.143.0.0/21 193.23.0.0/23 193.23.46.0/23 195.70.0.0/19 IPv6: 2a00:1840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12333 Signature Algorithm: sha256WithRSAEncryption 68:8b:e0:a2:cd:a4:61:27:09:33:fa:21:e2:e5:f5:4b:0d:dc: d9:a2:24:0a:9b:56:af:d6:5a:ab:26:18:1e:d2:02:77:ff:ab: 2c:06:04:13:7e:f0:7a:67:b7:25:5d:6d:f9:fd:6d:6d:77:7d: 26:9a:d9:68:22:81:27:2e:b7:c1:c5:73:87:a2:4a:81:9e:08: 6b:65:5c:92:ec:b0:2f:81:6e:24:07:94:43:70:14:42:af:5e: cf:a6:e2:62:cc:d6:41:52:83:1a:2b:b5:65:e1:3b:2d:62:dc: 6c:f3:f2:a2:97:e0:c2:53:94:e6:f4:5c:7d:e5:a8:03:1b:18: af:c0:57:54:eb:b0:17:5d:a3:34:44:be:fc:5a:82:ca:be:e7: 6c:91:dc:a0:11:ec:68:fa:6d:d3:51:b0:b9:d8:6f:53:10:9a: 0a:3c:cd:52:37:49:8b:28:fc:2c:98:b2:e0:6f:50:63:b2:ee: f8:ce:69:3c:88:fc:42:2b:0c:e6:29:6e:96:d8:fa:24:17:73: 4c:2b:12:da:a5:cf:d3:5b:35:5c:26:6a:e4:4a:3a:c2:0e:7d: 44:84:a1:09:4a:6c:db:f6:62:c9:cf:eb:06:25:6d:ca:91:1a: 57:e6:26:bc:8f:25:57:5e:1c:74:60:47:ba:b3:d1:2f:6d:e2: 1c:b9:08:da -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt3xw4mxJfvlHJpwdAKjP8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmUzNTQyZGQ2M2ZlZDI1MGRlNWNiNjVmNmVjYTQ4N2U3ZjQ3ODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5GZnIWX9ybOTxdI5+aoGOLRfOa9 OGWrHz+bPQ/9c3nkIYyrfNE/NaIeNuPEFA+eGSi9Zegn4WJmmZoBBNhG8uBEfAuM iS/MfSyoS1i+7mcmridqyPRgzjxSY1Bq+Gdhdoy/Q8cA7jB5Wch5X2nGPNXbCZaG m7W9rrXFrt6zhpgYVMbHqnUDzh3sxbm21wCaIQ2VgCai6P1/KzOrDLX1bUq0IieH CWmx6veIW2/Vgmd9l+/nenhmzoe5JjPgvDE4VbZCWJ3mCwUak1qcbwWkd2SHBjvp 5Ehnxudllps3AYQUibvYC/d+Y8fzYS9zdoAbKppEwAlk4/dVOB/XUgl4wQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFL/jVC3WP+0lDeXLZfbspIfn9HhHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyL2IxNTY1 OC0xMGI2LTQwNDEtYTNkYS04ZDNhNmQxNjVkYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYjE1NjU4 LTEwYjYtNDA0MS1hM2RhLThkM2E2ZDE2NWRhMy8xL3YtTlVMZFlfN1NVTjVjdGw5 dXlraC1mMGVFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDBT3gAwQDXo8AAwQBwRcAAwQBwRcuAwQFw0YA MA0EAgACMAcDBQAqABhAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjAtMA0GCSqG SIb3DQEBCwUAA4IBAQBoi+CizaRhJwkz+iHi5fVLDdzZoiQKm1av1lqrJhge0gJ3 /6ssBgQTfvB6Z7clXW35/W1td30mmtloIoEnLrfBxXOHokqBnghrZVyS7LAvgW4k B5RDcBRCr17PpuJizNZBUoMaK7Vl4TstYtxs8/Kil+DCU5Tm9Fx95agDGxivwFdU 67AXXaM0RL78WoLKvudskdygEexo+m3TUbC52G9TEJoKPM1SN0mLKPwsmLLgb1Bj su74zmk8iPxCKwzmKW6W2PokF3NMKxLapc/TWzVcJmrkSjrCDn1EhKEJSmzb9mLJ z+sGJW3KkRpX5ia8jyVXXhx0YEe6s9EvbeIcuQja -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:30 2026 by rpki-client