This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer File: N4kaRySqxrXaAAUymqOlq-h3edY.cer (raw, json) Hash identifier: Egp9iX8sEkNKbV+xp8iqRc0F9OjSMOFZDOkwR4Ec5m8= Subject key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36BE5ACE0647C89D1A09CE0D0612B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207767 IP: 176.119.209.0/24 IP: 185.90.44.0/22 IP: 185.254.218.0/24 IP: 2a0f:ffc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:be:5a:ce:06:47:c8:9d:1a:09:ce:0d:06:12:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37891a4724aac6b5da0005329aa3a5abe87779d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:55:2c:3a:43:ea:b8:63:bf:36:5e:44:07: 23:30:eb:71:70:77:fa:7d:48:ef:36:0c:00:86:cd: d3:6c:b7:dc:6e:6d:7c:bc:07:48:a1:68:4d:ed:6f: b3:9b:59:68:62:fe:3c:ce:b6:c5:00:0e:cd:69:2a: d1:d2:07:43:92:3b:d6:31:d8:01:0d:a2:9d:56:8c: 6a:9f:52:4b:9c:f9:f4:13:40:aa:44:f6:28:54:a5: b3:81:6b:6a:8f:4a:87:1f:67:15:60:3b:68:1e:2b: ae:c1:bc:2f:1c:90:14:2d:86:32:8b:d5:b2:bc:05: 11:88:c1:c1:cf:16:52:78:4f:42:a7:9e:5d:bd:ba: f8:4b:2b:5f:99:4d:8f:a0:46:10:74:cb:d4:0d:b6: e5:76:b3:ad:97:6d:1b:5b:e8:26:73:cb:4d:4d:9d: 40:76:04:f7:69:d1:10:94:c4:11:73:c6:19:33:63: 1e:4f:0d:21:61:c5:31:80:63:00:37:c0:29:8b:37: 53:ff:66:e7:b5:32:82:58:2a:36:b9:5a:6a:e5:0c: e0:2a:e1:35:d1:bd:15:e7:e1:5b:05:6d:7f:b9:83: 24:7a:f3:35:05:9d:4a:30:0c:42:d5:a6:14:08:0d: dc:fd:c1:42:81:35:58:0f:b7:79:2a:22:d3:eb:61: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.209.0/24 185.90.44.0/22 185.254.218.0/24 IPv6: 2a0f:ffc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207767 Signature Algorithm: sha256WithRSAEncryption 18:c3:f5:4b:0e:bd:91:ea:f4:a0:54:87:c7:91:c7:d1:fa:64: f7:41:1f:92:f8:bb:fb:18:81:29:af:58:74:ed:83:0e:ad:79: 5d:d5:fe:9e:0b:72:52:a2:57:c2:90:93:9e:da:7f:78:b3:e1: 28:ce:36:aa:c7:1e:6a:c7:aa:0c:35:72:26:ff:98:e8:b7:46: 63:fa:71:c3:42:44:ca:3d:b7:8f:37:57:c9:e4:ab:ab:69:77: 20:21:bb:b0:08:f3:ce:42:06:f6:c7:54:45:57:0a:e0:8e:28: 6c:e8:ad:56:c1:80:c6:80:3b:dc:13:b7:da:5f:15:eb:20:91: 7e:dd:81:db:df:eb:d4:39:99:8f:a3:a4:1a:b0:73:88:30:86: 5e:41:02:4e:dd:ce:ad:b0:1f:a0:8a:47:c5:68:58:d7:b0:6a: 59:08:b9:77:9f:60:27:f2:33:89:1b:29:c2:53:ba:72:2c:6b: 3b:b8:45:b4:6c:90:68:83:9f:24:19:f2:50:0c:1a:5c:eb:7e: af:ef:fd:81:e4:44:68:50:1e:53:9f:71:d3:6a:ec:44:4e:50: 2a:f5:3f:a2:20:cc:46:8e:0f:15:e7:78:25:b0:c0:ec:07:03: a0:04:3c:ff:ea:8c:62:ad:8f:ca:fb:f5:cd:d5:7d:fc:37:e1: ed:38:61:86 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7Nr5azgZHyJ0aCc4NBhK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzg5MWE0NzI0YWFjNmI1ZGEwMDA1MzI5YWEzYTVhYmU4Nzc3OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup1VLDpD6rhjvzZeRAcjMOtxcHf6 fUjvNgwAhs3TbLfcbm18vAdIoWhN7W+zm1loYv48zrbFAA7NaSrR0gdDkjvWMdgB DaKdVoxqn1JLnPn0E0CqRPYoVKWzgWtqj0qHH2cVYDtoHiuuwbwvHJAULYYyi9Wy vAURiMHBzxZSeE9Cp55dvbr4SytfmU2PoEYQdMvUDbbldrOtl20bW+gmc8tNTZ1A dgT3adEQlMQRc8YZM2MeTw0hYcUxgGMAN8ApizdT/2bntTKCWCo2uVpq5QzgKuE1 0b0V5+FbBW1/uYMkevM1BZ1KMAxC1aYUCA3c/cFCgTVYD7d5KiLT62HIpQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFDeJGkckqsa12gAFMpqjpavod3nWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2UxMjhl MC0wMGE2LTQ2ODktOTViZS01MjRjMjEwOWNiMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvZTEyOGUw LTAwYTYtNDY4OS05NWJlLTUyNGMyMTA5Y2IwNS8xL040a2FSeVNxeHJYYUFBVXlt cU9scS1oM2VkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAsHfRAwQCuVosAwQAuf7aMA0EAgACMAcDBQMq D//AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMrlzANBgkqhkiG9w0BAQsFAAOC AQEAGMP1Sw69ker0oFSHx5HH0fpk90Efkvi7+xiBKa9YdO2DDq15XdX+ngtyUqJX wpCTntp/eLPhKM42qsceaseqDDVyJv+Y6LdGY/pxw0JEyj23jzdXyeSrq2l3ICG7 sAjzzkIG9sdURVcK4I4obOitVsGAxoA73BO32l8V6yCRft2B29/r1DmZj6OkGrBz iDCGXkECTt3OrbAfoIpHxWhY17BqWQi5d59gJ/IziRspwlO6cixrO7hFtGyQaIOf JBnyUAwaXOt+r+/9geREaFAeU59x02rsRE5QKvU/oiDMRo4PFed4JbDA7AcDoAQ8 /+qMYq2Pyvv1zdV9/Dfh7Thhhg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:55:45 2026 by rpki-client