This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer (raw, json) Hash identifier: elL5SDeWOQAkRX6tdO83ltpEFwjJs8/oQWbq1j2bh10= Subject key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB066EC4092F353D2439E3199D2AA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.243.88.0/22 IP: 83.143.104.0/22 IP: 146.19.90.0/24 IP: 178.20.212.0/22 IP: 185.101.20.0/22 IP: 185.239.136.0/22 IP: 185.240.92.0/22 IP: 194.26.129.0/24 IP: 194.104.128.0/24 IP: 2a05:f680::/29 IP: 2a07:e240::/29 IP: 2a0c:5980::/29 IP: 2a0c:7980::/29 IP: 2a0c:8240::/29 IP: 2a0c:da80::/29 IP: 2a0d:1840::/29 IP: 2a12:6d00::/29 IP: 2a12:7c80::/29 IP: 2a12:b080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:06:6e:c4:09:2f:35:3d:24:39:e3:19:9d:2a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:c0:bf:3b:8f:7f:17:e5:e9:3e:4a:df:66: 9c:3d:c3:1e:55:17:db:75:ca:af:36:9a:48:22:a3: d0:f5:31:32:f7:c5:db:b7:c7:24:fc:a9:00:a3:a8: 8a:cc:47:2e:29:a8:1f:62:42:80:54:e9:3f:da:ee: 13:7a:48:f5:6e:f6:22:d9:17:94:e6:75:d1:d6:ca: 11:fb:33:37:4c:96:0f:23:b8:d2:59:df:4d:2a:66: 00:54:cd:5a:c0:a6:ee:10:0e:76:9a:ac:c6:50:36: 41:67:48:ac:b0:d4:cd:f1:50:c2:e2:6d:19:09:cc: 83:0b:a7:02:ed:0f:0c:e5:83:ed:fb:64:df:5c:02: bc:a0:d8:b9:bb:33:02:4a:b5:24:50:32:03:95:c0: 6d:e3:1b:65:cb:f5:14:d8:99:62:36:ab:46:64:c0: 9b:b6:ca:f1:fa:60:45:3b:6b:9a:91:e7:b0:9b:ca: a4:61:41:27:52:72:87:7c:78:51:eb:92:92:6b:07: 83:a7:b6:f1:c6:50:e1:ac:a7:8e:fb:18:49:93:33: 7b:c0:2a:42:44:97:19:c2:2f:1e:f7:72:c2:d6:52: 14:28:76:65:c7:93:b2:3b:9c:e5:c4:18:48:a6:b7: 3f:8a:c5:08:81:66:89:42:4f:2b:b6:0a:3e:7b:99: ad:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.243.88.0/22 83.143.104.0/22 146.19.90.0/24 178.20.212.0/22 185.101.20.0/22 185.239.136.0/22 185.240.92.0/22 194.26.129.0/24 194.104.128.0/24 IPv6: 2a05:f680::/29 2a07:e240::/29 2a0c:5980::/29 2a0c:7980::/29 2a0c:8240::/29 2a0c:da80::/29 2a0d:1840::/29 2a12:6d00::/29 2a12:7c80::/29 2a12:b080::/29 Signature Algorithm: sha256WithRSAEncryption 5d:d8:26:0d:cc:23:f7:b0:35:1f:53:6d:20:8e:bf:76:9c:87: 78:fb:9b:fa:2d:b1:44:0d:4d:de:e8:b9:87:54:c9:c0:11:7f: 82:a6:8c:65:59:2a:a4:9f:f4:3b:9e:ae:9f:e2:67:01:62:27: 09:c9:03:07:8a:e2:93:c7:7d:9d:d4:28:4e:46:9e:2a:0b:89: 23:37:90:16:d9:e4:9d:c8:d2:38:ec:f4:2d:43:e9:ee:98:88: 6d:2b:c0:fd:02:ef:2e:76:c7:9e:9f:3b:e8:1c:fb:e1:c5:39: 47:00:e3:ae:db:6e:1b:07:5f:37:d8:56:a3:c6:ce:17:86:29: 9d:02:76:2f:cc:66:6c:09:40:2b:bb:57:2f:a2:f8:d3:3e:bb: b4:6e:e8:f5:f7:cc:c0:fc:c2:e8:2e:43:39:3a:d1:d4:b2:8e: 72:17:9d:b0:ff:51:20:54:c1:7e:37:dc:39:6e:fe:f6:ae:f9: 9c:0c:e5:9b:59:29:68:da:ec:20:b0:05:e0:d1:56:fb:d0:ae: 6c:c9:6c:c9:18:6a:45:84:f8:54:ae:e1:b4:04:92:a3:80:c3: 3f:2a:65:05:3f:ef:75:db:04:60:8d:20:85:25:fe:ca:8c:5f: 12:c2:b6:b6:91:df:56:0f:f9:8a:39:0b:24:35:ca:94:23:b0: 2f:b6:ab:d6 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZt26wZuxAkvNT0kOeMZnSqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzRlMjcyOWIxNzM2OTg5MGExNTEyZjY0M2NkMDhlNGJhMmZmNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLPAvzuPfxfl6T5K32acPcMeVRfb dcqvNppIIqPQ9TEy98Xbt8ck/KkAo6iKzEcuKagfYkKAVOk/2u4Tekj1bvYi2ReU 5nXR1soR+zM3TJYPI7jSWd9NKmYAVM1awKbuEA52mqzGUDZBZ0issNTN8VDC4m0Z CcyDC6cC7Q8M5YPt+2TfXAK8oNi5uzMCSrUkUDIDlcBt4xtly/UU2JliNqtGZMCb tsrx+mBFO2uakeewm8qkYUEnUnKHfHhR65KSaweDp7bxxlDhrKeO+xhJkzN7wCpC RJcZwi8e93LC1lIUKHZlx5OyO5zlxBhIprc/isUIgWaJQk8rtgo+e5mtBwIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFDdOJymxc2mJChUS9kPNCOS6L/QUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4Lzk1MjIz MC1jMjYyLTQxY2MtYjk1Ni1jZmM0NmE3NmVjNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvOTUyMjMw LWMyNjItNDFjYy1iOTU2LWNmYzQ2YTc2ZWM3OC8xL04wNG5LYkZ6YVlrS0ZSTDJR ODBJNUxvdjlCUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGfBggrBgEF BQcBBwEB/wSBjzCBjDA8BAIAATA2AwQCTfNYAwQCU49oAwQAkhNaAwQCshTUAwQC uWUUAwQCue+IAwQCufBcAwQAwhqBAwQAwmiAMEwEAgACMEYDBQMqBfaAAwUDKgfi QAMFAyoMWYADBQMqDHmAAwUDKgyCQAMFAyoM2oADBQMqDRhAAwUDKhJtAAMFAyoS fIADBQMqErCAMA0GCSqGSIb3DQEBCwUAA4IBAQBd2CYNzCP3sDUfU20gjr92nId4 +5v6LbFEDU3e6LmHVMnAEX+CpoxlWSqkn/Q7nq6f4mcBYicJyQMHiuKTx32d1ChO Rp4qC4kjN5AW2eSdyNI47PQtQ+numIhtK8D9Au8udseenzvoHPvhxTlHAOOu224b B1832Fajxs4XhimdAnYvzGZsCUAru1cvovjTPru0buj198zA/MLoLkM5OtHUso5y F52w/1EgVMF+N9w5bv72rvmcDOWbWSlo2uwgsAXg0Vb70K5syWzJGGpFhPhUruG0 BJKjgMM/KmUFP+912wRgjSCFJf7KjF8Swra2kd9WD/mKOQskNcqUI7AvtqvW -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:44 2026 by rpki-client