This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer File: N0mXVDn-T_qTECYqy91fcjzuIiM.cer (raw, json) Hash identifier: iKFgxBR1rpuee7FwBx98LD+lU9ObLDO3vnjPYrz6dAY= Subject key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113476E257E4D7C44EA67A949155AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.12.40.0/22 IP: 2a0e:9500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:34:76:e2:57:e4:d7:c4:4e:a6:7a:94:91:55:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3749975439fe4ffa9310262acbdd5f723cee2223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:dd:86:ac:60:d3:35:27:38:4c:8e:57:c1: 0a:f8:9f:6f:a7:fb:ce:c0:75:28:f0:b9:6f:90:50: 7e:00:74:60:66:0f:2e:14:b4:1d:04:3b:30:d4:d8: a6:07:2a:cf:fd:92:72:a7:db:f1:22:db:3f:90:4d: 66:8a:5a:6b:c4:01:2b:69:90:76:35:d9:11:c7:b7: b0:28:09:d4:b4:0b:5c:57:1a:6c:67:75:3f:58:74: cc:24:49:48:00:db:0e:92:ad:34:1f:28:72:e7:e1: 1b:a9:11:4f:2c:e9:e8:a6:b9:f0:8a:27:db:19:dd: 7d:15:95:d8:de:6f:19:09:a2:88:fe:51:05:3e:74: 95:7d:99:b5:58:d5:c7:9a:54:62:7c:4f:e7:6d:ce: be:2e:0f:cf:89:61:5e:fd:34:00:fc:06:32:43:38: de:4b:bb:f9:74:96:f4:d4:54:af:2d:0d:60:83:84: 46:d7:39:29:b4:09:7c:b9:00:09:c6:d2:7d:b8:88: bf:06:30:27:1c:95:fa:7e:b2:15:b2:cd:76:d2:d0: ee:14:fb:d8:f9:c3:83:2c:ec:b7:89:ad:60:4d:b2: a5:9f:c1:91:66:b0:c7:79:01:5f:25:a2:49:6a:97: e6:8c:86:75:ee:c7:e4:f2:c7:28:de:d7:4d:cb:1e: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.40.0/22 IPv6: 2a0e:9500::/29 Signature Algorithm: sha256WithRSAEncryption 2b:cc:c0:98:8d:32:73:bd:3e:68:c3:b9:e9:5e:4e:41:ed:47: 6a:37:3a:e9:f1:0b:5c:5b:7d:3b:09:e3:9e:6d:61:4d:e3:8e: 9a:62:7a:61:04:29:af:d7:a5:ee:bd:55:5d:6f:4b:7c:f6:ce: 7b:20:0c:7d:76:c8:59:e2:c9:80:45:2b:d0:ff:ae:94:f9:dc: 02:f7:8d:62:47:73:fa:9a:d9:b4:79:a2:c1:14:14:80:d3:70: f2:b1:4a:8f:83:97:37:3e:16:99:b9:7f:71:1d:65:1a:89:21: de:8a:fe:eb:c8:7d:4a:ec:9c:01:4a:fc:67:18:77:e8:0e:2d: 74:aa:1b:70:73:ea:c7:24:d2:9c:2b:d6:00:78:32:d6:56:37: c4:18:1d:12:7f:e4:cb:db:57:b1:0f:ac:77:b6:d2:f4:fc:98: 1f:14:7b:5b:0a:14:93:b2:a8:13:e8:21:1c:b9:c7:b9:7f:2d: f5:f8:16:6d:19:6a:5e:77:d0:4a:09:1e:a0:5f:34:9c:ad:b6: 1c:e7:43:d1:bd:56:1e:22:27:be:73:4d:8a:bc:74:a9:91:aa: d9:7f:42:85:fe:e7:78:66:13:ed:48:91:d5:ed:b5:6d:0d:8f: 0e:bb:9a:8a:a3:e7:69:54:10:be:cd:33:e1:a0:0c:da:62:46: f7:e3:8f:4f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5ETR24lfk18ROpnqUkVWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzQ5OTc1NDM5ZmU0ZmZhOTMxMDI2MmFjYmRkNWY3MjNjZWUyMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjPdhqxg0zUnOEyOV8EK+J9vp/vO wHUo8LlvkFB+AHRgZg8uFLQdBDsw1NimByrP/ZJyp9vxIts/kE1milprxAEraZB2 NdkRx7ewKAnUtAtcVxpsZ3U/WHTMJElIANsOkq00Hyhy5+EbqRFPLOnoprnwiifb Gd19FZXY3m8ZCaKI/lEFPnSVfZm1WNXHmlRifE/nbc6+Lg/PiWFe/TQA/AYyQzje S7v5dJb01FSvLQ1gg4RG1zkptAl8uQAJxtJ9uIi/BjAnHJX6frIVss120tDuFPvY +cODLOy3ia1gTbKln8GRZrDHeQFfJaJJapfmjIZ17sfk8sco3tdNyx7v0QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDdJl1Q5/k/6kxAmKsvdX3I87iIjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzNmYzRl MC1lYjVmLTQyZDMtOThlMS1iZTAwYTY1MTAzYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvM2ZjNGUw LWViNWYtNDJkMy05OGUxLWJlMDBhNjUxMDNhZC8xL04wbVhWRG4tVF9xVEVDWXF5 OTFmY2p6dUlpTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQwoMA0EAgACMAcDBQMqDpUAMA0GCSqGSIb3 DQEBCwUAA4IBAQArzMCYjTJzvT5ow7npXk5B7UdqNzrp8QtcW307CeOebWFN446a YnphBCmv16XuvVVdb0t89s57IAx9dshZ4smARSvQ/66U+dwC941iR3P6mtm0eaLB FBSA03DysUqPg5c3PhaZuX9xHWUaiSHeiv7ryH1K7JwBSvxnGHfoDi10qhtwc+rH JNKcK9YAeDLWVjfEGB0Sf+TL21exD6x3ttL0/JgfFHtbChSTsqgT6CEcuce5fy31 +BZtGWped9BKCR6gXzScrbYc50PRvVYeIie+c02KvHSpkarZf0KF/ud4ZhPtSJHV 7bVtDY8Ou5qKo+dpVBC+zTPhoAzaYkb3449P -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:18 2026 by rpki-client