This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer File: N1GNGAkjp_PABlPsErxwK5WquQc.cer (raw, json) Hash identifier: OTyXg59y/ZI3/4hn7MqZ/+v2ezcYbrQ4T0QZNG1h2jo= Subject key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C122DDDB18FB1FAF8C47F3E0A6C8C72 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8517 IP: 79.123.128.0/17 IP: 95.183.128.0/17 IP: 185.7.0.0/22 IP: 193.140.0.0/16 IP: 193.255.0.0/16 IP: 194.27.0.0/16 IP: 2001:a98::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2d:dd:b1:8f:b1:fa:f8:c4:7f:3e:0a:6c:8c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37518d180923a7f3c00653ec12bc702b95aab907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:97:75:6e:a5:5e:dd:ad:1c:80:98:31:de: a9:fc:74:22:3b:66:e3:91:b3:44:a8:50:17:7b:6f: f0:2a:06:d7:15:2a:eb:b5:b7:34:02:52:8c:55:54: c5:92:23:a7:c8:ef:3b:db:d2:c2:5c:21:52:98:3b: da:74:9d:c8:ce:a6:2e:0e:46:e2:98:62:00:3e:72: 55:4a:fe:c1:72:f1:ba:58:a0:d2:ff:15:2a:07:91: 11:0a:8a:2f:a7:4c:b6:0b:86:01:fa:f3:95:cb:ea: 28:b6:18:5c:1f:10:87:31:8f:92:a3:59:6c:95:6c: b6:53:18:ac:89:d8:06:a3:95:67:ff:5c:9b:6d:ac: 80:8c:fb:57:e4:6c:89:9d:82:40:d2:af:12:bd:77: 28:53:a6:0c:86:79:91:05:be:14:2b:08:3a:b7:10: 0b:01:00:41:dd:7b:66:27:e8:af:92:27:95:fa:d9: 18:3f:bb:af:ec:81:fc:54:6c:7e:48:cd:c7:ed:b0: ed:c1:6d:8f:2e:58:ba:e6:5d:cf:ce:19:41:21:e1: bf:55:88:21:6a:d5:12:e5:37:2a:2a:a4:b1:30:96: ce:0c:83:36:0b:57:8d:f1:d8:53:1c:1e:32:47:ba: 82:50:d2:8c:20:7e:38:07:89:96:5d:4b:26:4d:4e: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.123.128.0/17 95.183.128.0/17 185.7.0.0/22 193.140.0.0/16 193.255.0.0/16 194.27.0.0/16 IPv6: 2001:a98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8517 Signature Algorithm: sha256WithRSAEncryption 78:46:ca:85:cb:39:d9:ad:98:72:4e:8e:64:c5:2e:9f:74:ea: 7e:e9:2a:26:a2:e2:22:71:1b:4f:be:a2:4e:b9:93:2a:0a:c6: b6:61:c6:5f:ce:e2:6a:f8:d2:87:45:7b:20:03:b2:ea:97:66: e3:fd:a8:e4:a6:f2:7f:69:43:8d:e2:63:53:06:bf:cf:45:73: 39:34:90:3a:ae:52:aa:66:6f:2f:6c:5f:ac:c3:63:2a:84:64: ab:38:4d:05:40:4e:f0:fb:8d:87:52:d6:86:95:27:24:d5:d2: 5b:c1:58:1b:d4:fa:70:ad:ce:78:21:c3:5e:76:3a:e6:a8:55: 17:37:0d:fa:c7:a3:0f:b0:9b:3d:90:bb:df:f8:ed:cf:9d:13: 2c:c7:76:34:cf:83:a2:d5:04:0a:e2:73:53:95:85:3c:8d:36: 6f:ff:45:ec:bf:fe:ef:27:3e:b4:ae:df:26:7d:1d:71:8d:7d: d1:0c:f5:33:e4:c2:24:73:ea:0e:05:db:25:ec:44:3d:71:c9: 6f:ff:f5:2d:ff:44:69:7b:4a:c6:6a:a1:6e:3a:db:94:96:ac: 54:33:6b:bb:47:78:14:1c:93:64:00:8f:5d:8f:d3:7c:dc:6c: bf:e3:9b:0d:5a:85:5d:4a:ad:e7:8e:6d:79:06:04:b2:ef:d3: c2:4e:d5:54 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt8Ei3dsY+x+vjEfz4KbIxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzUxOGQxODA5MjNhN2YzYzAwNjUzZWMxMmJjNzAyYjk1YWFiOTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8yXdW6lXt2tHICYMd6p/HQiO2bj kbNEqFAXe2/wKgbXFSrrtbc0AlKMVVTFkiOnyO8729LCXCFSmDvadJ3IzqYuDkbi mGIAPnJVSv7BcvG6WKDS/xUqB5ERCoovp0y2C4YB+vOVy+oothhcHxCHMY+So1ls lWy2UxisidgGo5Vn/1ybbayAjPtX5GyJnYJA0q8SvXcoU6YMhnmRBb4UKwg6txAL AQBB3XtmJ+ivkieV+tkYP7uv7IH8VGx+SM3H7bDtwW2PLli65l3PzhlBIeG/VYgh atUS5TcqKqSxMJbODIM2C1eN8dhTHB4yR7qCUNKMIH44B4mWXUsmTU5CSQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFDdRjRgJI6fzwAZT7BK8cCuVqrkHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiL2Y4MGVm My05ZjBiLTRiZDEtODAxOC01OTY3MTkyMGZiNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjgwZWYz LTlmMGItNGJkMS04MDE4LTU5NjcxOTIwZmI2MC8xL04xR05HQWtqcF9QQUJsUHNF cnh3SzVXcXVRYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF BwEHAQH/BDowODAnBAIAATAhAwQHT3uAAwQHX7eAAwQCuQcAAwMAwYwDAwDB/wMD AMIbMA0EAgACMAcDBQAgAQqYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiFFMA0G CSqGSIb3DQEBCwUAA4IBAQB4RsqFyznZrZhyTo5kxS6fdOp+6SomouIicRtPvqJO uZMqCsa2YcZfzuJq+NKHRXsgA7Lql2bj/ajkpvJ/aUON4mNTBr/PRXM5NJA6rlKq Zm8vbF+sw2MqhGSrOE0FQE7w+42HUtaGlSck1dJbwVgb1Ppwrc54IcNedjrmqFUX Nw36x6MPsJs9kLvf+O3PnRMsx3Y0z4Oi1QQK4nNTlYU8jTZv/0Xsv/7vJz60rt8m fR1xjX3RDPUz5MIkc+oOBdsl7EQ9cclv//Ut/0Rpe0rGaqFuOtuUlqxUM2u7R3gU HJNkAI9dj9N83Gy/45sNWoVdSq3njm15BgSy79PCTtVU -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:58 2026 by rpki-client