This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer File: NEcY0TWgm7UkcGtCWcq8xiblFO8.cer (raw, json) Hash identifier: pCew+rSW6ial2YgCCoWEZtSAZY5oglVwYGPJRa3I2Sc= Subject key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A20E77FFE1BE7BB1F9253BA46C7B81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.104.157.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:0e:77:ff:e1:be:7b:b1:f9:25:3b:a4:6c:7b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344718d135a09bb524706b4259cabcc626e514ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:1f:88:52:b2:b0:32:56:6b:0c:42:5d:bc: 5d:79:f5:38:27:da:4a:a4:ed:47:59:6c:27:c2:92: 07:29:07:75:f1:f3:f9:71:cf:32:bf:69:1a:84:1c: 24:19:d8:da:e3:43:bc:f4:9f:f3:62:d2:8f:ca:bc: a2:3d:46:1f:fc:06:38:fb:c7:14:f3:40:b3:55:5e: 68:c6:0b:93:fd:a3:ac:72:4e:8e:7b:90:55:03:a6: c3:34:22:94:9c:36:70:93:eb:3c:44:9f:d2:34:d9: 29:d3:77:d3:9c:70:3a:ce:78:9f:cd:3b:be:b3:03: b5:03:e5:50:6f:33:4e:8b:51:79:9c:77:b5:0a:54: ec:32:18:1a:64:9e:90:14:d0:ec:3e:1c:2a:9b:c5: a0:88:71:ae:ab:9f:32:f0:f2:7c:d6:c1:57:1c:1b: 01:f7:f2:85:36:4d:a8:f3:59:46:5d:e8:0a:ae:fe: ea:4d:19:d0:ff:29:f1:11:cf:32:c7:80:bd:55:c6: bc:e9:25:71:87:49:84:77:ee:d8:8e:9d:f4:a0:84: 41:95:6a:6a:00:08:67:3c:9d:1e:93:67:50:39:d9: 36:9b:b6:80:90:9d:5b:42:00:90:d1:c3:4e:9e:22: cf:92:d2:16:96:8b:c7:4e:32:60:23:a3:f1:d2:ea: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.157.0/24 Signature Algorithm: sha256WithRSAEncryption 11:f8:58:de:45:b4:26:34:92:21:dd:61:dd:3b:8a:82:73:14: fa:ba:d4:75:ce:6b:e9:e2:78:e8:7a:b4:89:1a:fd:de:f1:ef: 12:7b:25:2f:03:a1:05:29:e3:cb:a2:e3:42:3f:ba:a9:36:bd: bc:f6:28:f5:b1:16:9b:aa:fa:65:33:26:de:46:fc:09:70:d3: bf:51:c2:74:fb:ae:04:8c:65:a8:ea:c2:5f:ba:59:8e:14:fd: 8d:5a:f4:aa:98:79:7b:42:53:52:58:fb:8c:04:ee:4c:88:64: bb:26:eb:a0:90:02:81:5b:9b:59:c0:37:b5:d4:5c:aa:8f:93: 99:0e:18:2c:39:f0:e2:f5:c3:12:a7:f2:f2:e4:d9:2d:bc:59: 13:7b:30:54:73:10:18:d4:34:87:a0:39:80:a8:4e:66:00:c0: 89:49:fb:d9:06:28:c2:3b:93:d8:00:e6:b2:5a:cf:fe:26:03: 62:cd:46:a5:f9:48:48:71:10:51:df:35:40:c9:40:5c:c0:7f: 25:2f:04:ba:00:aa:fd:d0:ee:0a:df:2e:92:a0:a7:f6:47:1c: 18:ae:3e:50:b2:b9:c6:d8:92:3e:af:ef:65:dd:5a:b3:52:11: c2:e2:3b:c7:4a:a3:c2:65:a8:ee:3f:99:4e:d7:4e:5e:5c:66: 76:aa:1a:34 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4og53/+G+e7H5JTukbHuBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDQ3MThkMTM1YTA5YmI1MjQ3MDZiNDI1OWNhYmNjNjI2ZTUxNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgMfiFKysDJWawxCXbxdefU4J9pK pO1HWWwnwpIHKQd18fP5cc8yv2kahBwkGdja40O89J/zYtKPyryiPUYf/AY4+8cU 80CzVV5oxguT/aOsck6Oe5BVA6bDNCKUnDZwk+s8RJ/SNNkp03fTnHA6znifzTu+ swO1A+VQbzNOi1F5nHe1ClTsMhgaZJ6QFNDsPhwqm8WgiHGuq58y8PJ81sFXHBsB 9/KFNk2o81lGXegKrv7qTRnQ/ynxEc8yx4C9Vca86SVxh0mEd+7Yjp30oIRBlWpq AAhnPJ0ek2dQOdk2m7aAkJ1bQgCQ0cNOniLPktIWlovHTjJgI6Px0urBAwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDRHGNE1oJu1JHBrQlnKvMYm5RTvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExL2JkZDJi YS1hNDg0LTRiMGQtYWU5YS01ZDMzZTE4YTY5YTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvYmRkMmJh LWE0ODQtNGIwZC1hZTlhLTVkMzNlMThhNjlhMC8xL05FY1kwVFdnbTdVa2NHdENX Y3E4eGlibEZPOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwmidMA0GCSqGSIb3DQEBCwUAA4IBAQAR+Fje RbQmNJIh3WHdO4qCcxT6utR1zmvp4njoerSJGv3e8e8SeyUvA6EFKePLouNCP7qp Nr289ij1sRabqvplMybeRvwJcNO/UcJ0+64EjGWo6sJfulmOFP2NWvSqmHl7QlNS WPuMBO5MiGS7JuugkAKBW5tZwDe11Fyqj5OZDhgsOfDi9cMSp/Ly5NktvFkTezBU cxAY1DSHoDmAqE5mAMCJSfvZBijCO5PYAOayWs/+JgNizUal+UhIcRBR3zVAyUBc wH8lLwS6AKr90O4K3y6SoKf2RxwYrj5QsrnG2JI+r+9l3VqzUhHC4jvHSqPCZaju P5lO105eXGZ2qho0 -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:50 2026 by rpki-client