This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer File: N6W4zf0deX2GBmDjS_oaKthf-dk.cer (raw, json) Hash identifier: cZmrx7/uLhDjB4tJx3FsjYA2jGM7wJdZGRUTpa/uepI= Subject key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC827B60D195A11664E5CA4D99B8F94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.84.53.0/24 IP: 193.84.55.0 -- 193.84.63.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:27:b6:0d:19:5a:11:66:4e:5c:a4:d9:9b:8f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:1e:7c:fd:e5:fd:6a:a0:6b:9b:72:b0:f9: 11:53:8e:c0:0b:ca:8d:38:72:de:af:3c:e6:b6:87: 74:45:89:e4:aa:3b:06:3e:67:9e:4b:40:ae:33:9b: 68:f2:ab:1b:b2:53:bd:ec:31:6d:3b:84:b5:e6:6c: 27:c6:5f:b1:7a:42:05:47:0a:15:c4:21:ec:48:02: fa:f6:a5:a0:01:ff:53:f4:17:57:97:b8:fd:29:f1: 02:9f:ce:37:15:26:d9:00:97:e9:65:56:b8:73:cf: 10:e4:cd:33:1a:f9:5c:56:dc:bf:48:9b:87:05:18: 67:5a:b7:49:d6:07:23:38:df:31:ae:87:c8:73:03: eb:1b:78:df:cc:87:cd:12:95:10:44:b7:fd:3c:a7: a5:67:7b:bd:ec:a1:45:21:be:cc:30:29:fc:0a:4f: 82:1d:43:16:f6:65:5a:58:4b:51:ee:b2:a1:08:ec: 71:89:ea:b9:16:2e:4c:ce:51:e0:20:a8:da:15:ce: 4d:3d:2d:f4:91:b0:b1:b9:d3:b7:53:8e:6c:f5:5b: 8c:28:fe:a1:f1:57:6e:0d:28:ec:48:57:e5:be:49: 19:7f:46:23:fa:b6:2d:80:fe:15:59:05:71:19:41: d7:7f:fd:62:ec:ce:4a:7c:cf:82:22:72:e7:11:e2: 53:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.53.0/24 193.84.55.0-193.84.63.255 Signature Algorithm: sha256WithRSAEncryption 1e:0c:76:47:0f:ab:b4:17:26:e5:8b:f3:69:1b:2c:f7:07:29: f9:bb:72:9b:c5:d7:c7:69:9d:7c:05:5d:72:f5:2e:69:33:b0: 9c:14:24:8d:af:b0:3e:66:31:d3:e4:88:75:69:93:f8:44:ea: a4:0d:85:2d:fc:7e:e6:b9:61:ec:fc:08:01:d3:1e:6a:57:52: 02:18:eb:69:a4:2d:e0:07:08:d6:b2:02:3d:73:0a:21:db:cb: 73:d1:bd:7b:1a:92:fb:63:cf:3f:c9:9a:24:2d:7f:f1:08:81: 5d:6b:fc:90:93:e4:a1:7c:71:a3:30:aa:c7:c7:57:c9:db:9a: 5b:82:7c:30:1d:a7:c3:71:a0:e9:aa:10:87:17:93:67:ea:cf: 28:3a:ca:d7:65:d0:a8:29:8e:3c:92:9c:c3:0e:00:33:45:1e: de:66:1b:a0:61:9e:8a:c7:23:a7:c7:52:11:29:1e:97:f0:9a: 7e:4e:34:f1:7a:c3:8c:e8:b0:11:76:4c:9c:ea:38:dc:3a:ba: 22:85:8d:c5:79:94:30:bf:7c:d8:ba:c7:8f:7f:17:a6:bf:38: 31:34:91:57:85:7c:e3:48:93:a1:b4:7d:0a:44:16:bd:fd:d9: 54:7b:9d:b0:9e:12:91:94:ce:36:87:53:2b:28:4d:66:0c:03: e2:31:3e:d3 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt6yCe2DRlaEWZOXKTZm4+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2E1YjhjZGZkMWQ3OTdkODYwNjYwZTM0YmZhMWEyYWQ4NWZmOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRoefP3l/Wqga5tysPkRU47AC8qN OHLerzzmtod0RYnkqjsGPmeeS0CuM5to8qsbslO97DFtO4S15mwnxl+xekIFRwoV xCHsSAL69qWgAf9T9BdXl7j9KfECn843FSbZAJfpZVa4c88Q5M0zGvlcVty/SJuH BRhnWrdJ1gcjON8xrofIcwPrG3jfzIfNEpUQRLf9PKelZ3u97KFFIb7MMCn8Ck+C HUMW9mVaWEtR7rKhCOxxieq5Fi5MzlHgIKjaFc5NPS30kbCxudO3U45s9VuMKP6h 8VduDSjsSFflvkkZf0Yj+rYtgP4VWQVxGUHXf/1i7M5KfM+CInLnEeJT8QIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFDeluM39HXl9hgZg40v6GirYX/nZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzNhOTAy MS0yOTU5LTQ3ZTctYTYxNS04MTE0NGZkMDE1NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvM2E5MDIx LTI5NTktNDdlNy1hNjE1LTgxMTQ0ZmQwMTU2NC8xL042VzR6ZjBkZVgyR0JtRGpT X29hS3RoZi1kay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUAwQAwVQ1MAwDBADBVDcDBAbBVAAwDQYJKoZIhvcN AQELBQADggEBAB4MdkcPq7QXJuWL82kbLPcHKfm7cpvF18dpnXwFXXL1LmkzsJwU JI2vsD5mMdPkiHVpk/hE6qQNhS38fua5Yez8CAHTHmpXUgIY62mkLeAHCNayAj1z CiHby3PRvXsakvtjzz/JmiQtf/EIgV1r/JCT5KF8caMwqsfHV8nbmluCfDAdp8Nx oOmqEIcXk2fqzyg6ytdl0KgpjjySnMMOADNFHt5mG6BhnorHI6fHUhEpHpfwmn5O NPF6w4zosBF2TJzqONw6uiKFjcV5lDC/fNi6x49/F6a/ODE0kVeFfONIk6G0fQpE Fr392VR7nbCeEpGUzjaHUysoTWYMA+IxPtM= -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:39 2026 by rpki-client