This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer File: N21flFiDj88WzChwIl7l-I_5Tco.cer (raw, json) Hash identifier: LJCl6je/5sFiaqbmrjuaQaAHRC1r2rB93sLYNHQusg4= Subject key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783513BB9DB559C98AE9834F86B9BA14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197042 IP: 91.216.148.0/24 IP: 194.164.219.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:13:bb:9d:b5:59:c9:8a:e9:83:4f:86:b9:ba:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:62:1c:f0:a6:5e:f1:ae:32:22:d8:e0:f1: c5:e8:88:06:39:6f:6f:83:9f:5c:e8:35:e8:c6:0e: 5e:cf:6d:97:e1:e9:1b:5b:9e:8d:ba:fd:93:d0:0c: 86:ac:d3:c8:1c:d5:31:ee:92:6d:ca:6a:f6:ce:77: 00:e5:c3:9f:4f:33:49:26:67:4f:3a:90:fa:d6:91: f4:db:57:7b:d8:be:22:94:bd:3d:80:ec:43:25:6a: 4e:e1:27:fa:3c:98:80:91:22:73:68:0d:13:59:05: 67:bb:10:66:1e:d5:fc:b1:67:fc:80:7e:3a:c9:30: 1f:c5:d0:9b:4f:3a:ae:d6:85:23:a0:92:5a:c8:97: 79:dd:c5:29:7f:72:37:43:14:74:1c:6e:17:69:6d: 16:0c:08:7f:76:3c:06:4c:1c:f8:82:04:aa:ea:91: 1e:cc:36:3c:45:f5:e7:6b:5f:00:01:0d:fe:93:73: b4:e9:85:e1:77:99:5d:04:ad:8b:39:4d:54:27:1e: 9c:03:07:e1:68:e4:8f:ad:b0:75:2f:aa:f5:b0:f2: 8d:a2:1f:f7:4e:f5:31:63:96:71:30:0c:ed:20:17: 92:e5:0a:ea:bf:5d:a3:89:83:00:d9:5b:d8:46:f4: 46:d0:e1:ab:31:1c:9f:71:76:4a:b6:a6:f6:97:b4: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.148.0/24 194.164.219.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197042 Signature Algorithm: sha256WithRSAEncryption 9e:79:eb:a0:e8:75:0f:c1:e8:b2:7c:24:a5:f1:7d:01:cd:a5: 30:2a:74:4e:5e:1c:1e:cb:1a:8b:57:77:57:1f:16:1b:7b:dc: c1:4c:94:17:74:e8:f6:3f:e3:d7:c3:5b:5b:19:23:b4:1a:3f: b4:82:fc:fb:a1:57:b7:4f:9d:d0:08:9a:8f:fe:67:2c:27:55: 76:90:88:df:10:08:51:32:71:12:82:12:9e:cc:95:7a:66:d7: 75:96:48:26:d7:1c:64:19:4b:d7:d6:46:43:e2:37:76:c0:5c: d2:76:58:de:d8:64:2a:81:34:fd:4c:e0:6f:d7:7a:b2:bf:e2: 48:27:22:3b:3d:fa:10:a9:95:e0:cb:ea:a9:4e:0b:3b:62:22: 03:73:1d:cb:55:c3:14:b4:db:ed:fd:2e:f1:27:aa:6c:2a:53: 96:36:2b:50:34:b7:2b:4a:50:ef:48:84:9b:f4:64:2b:3f:f3: ec:0e:0f:77:49:32:12:7f:d8:66:01:28:f8:84:71:ce:54:fb: b2:04:54:e1:90:6f:33:b0:82:17:ff:a1:30:2c:e9:bb:7b:8f: b3:5e:9e:da:6e:27:02:d3:a4:5a:ed:c9:e9:67:57:cd:84:ac: 32:65:3f:46:0f:e2:e4:2e:1a:a3:bf:8c:e8:16:dd:15:ae:3a: 87:8d:b6:dd -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4NRO7nbVZyYrpg0+GuboUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzZkNWY5NDU4ODM4ZmNmMTZjYzI4NzAyMjVlZTVmODhmZjk0ZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WliHPCmXvGuMiLY4PHF6IgGOW9v g59c6DXoxg5ez22X4ekbW56Nuv2T0AyGrNPIHNUx7pJtymr2zncA5cOfTzNJJmdP OpD61pH021d72L4ilL09gOxDJWpO4Sf6PJiAkSJzaA0TWQVnuxBmHtX8sWf8gH46 yTAfxdCbTzqu1oUjoJJayJd53cUpf3I3QxR0HG4XaW0WDAh/djwGTBz4ggSq6pEe zDY8RfXna18AAQ3+k3O06YXhd5ldBK2LOU1UJx6cAwfhaOSPrbB1L6r1sPKNoh/3 TvUxY5ZxMAztIBeS5Qrqv12jiYMA2VvYRvRG0OGrMRyfcXZKtqb2l7QaiQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFDdtX5RYg4/PFswocCJe5fiP+U3KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2M4MGY2 Yi1kNThlLTQ3N2ItYjk4MC00NDExMDEyYWI5OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvYzgwZjZi LWQ1OGUtNDc3Yi1iOTgwLTQ0MTEwMTJhYjk5ZS8xL04yMWZsRmlEajg4V3pDaHdJ bDdsLUlfNVRjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9iUAwQAwqTbMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMBsjANBgkqhkiG9w0BAQsFAAOCAQEAnnnroOh1D8HosnwkpfF9Ac2l MCp0Tl4cHssai1d3Vx8WG3vcwUyUF3To9j/j18NbWxkjtBo/tIL8+6FXt0+d0Aia j/5nLCdVdpCI3xAIUTJxEoISnsyVembXdZZIJtccZBlL19ZGQ+I3dsBc0nZY3thk KoE0/Uzgb9d6sr/iSCciOz36EKmV4MvqqU4LO2IiA3Mdy1XDFLTb7f0u8SeqbCpT ljYrUDS3K0pQ70iEm/RkKz/z7A4Pd0kyEn/YZgEo+IRxzlT7sgRU4ZBvM7CCF/+h MCzpu3uPs16e2m4nAtOkWu3J6WdXzYSsMmU/Rg/i5C4ao7+M6BbdFa46h4223Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:42 2026 by rpki-client