This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer File: NgAOvu0kK5VkrclUhTI7lr1vXAI.cer (raw, json) Hash identifier: m1CXtruxUzfISuio9tHWaSeWCSRQ6D9EpbIDMOMASqQ= Subject key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A332F92EF42445EFABD0DC5D6B1708 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213338 IP: 185.167.183.0/24 IP: 2a0b:9c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:32:f9:2e:f4:24:45:ef:ab:d0:dc:5d:6b:17:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36000ebeed242b9564adc95485323b96bd6f5c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:b6:ba:f5:21:e2:64:a5:57:2e:2e:37:e9: 10:b9:63:10:55:63:71:67:01:81:69:8a:fe:d4:04: 07:b3:1e:04:4b:ae:e4:77:08:2d:81:1d:48:37:86: f3:03:59:1a:ea:19:59:e8:8e:ce:93:a9:8d:6a:e1: 61:a2:22:b6:0a:20:e3:5d:80:44:f1:79:d6:ef:ea: 5f:1f:b7:ca:53:14:e4:8a:57:5f:ae:e4:71:ec:8f: 14:e1:3c:bf:90:ff:9b:27:74:e2:c5:90:04:9f:91: ab:2c:b2:77:ea:53:60:48:79:b3:ab:ac:87:64:f3: f6:32:0a:e2:dc:7f:c0:dc:6a:43:08:f0:c4:af:45: 42:fc:e7:45:30:52:1e:6b:b6:b2:f0:4d:80:23:56: 66:d1:91:a6:8a:26:b0:77:ca:42:44:32:66:7c:9d: 6e:ad:62:ac:80:9c:dd:21:a3:d3:3e:0a:c1:88:c7: 6f:16:17:d2:71:9b:19:09:14:65:cf:71:27:e7:9b: 4f:eb:7a:5e:b4:b6:f9:90:bc:98:eb:e6:8c:32:24: ad:06:dc:9f:42:08:5a:5c:15:fe:b6:9a:cd:cb:68: aa:b2:ee:c8:1c:23:d4:b2:f9:49:a7:05:25:d9:13: 92:60:2f:7c:72:cb:d9:41:aa:e5:6c:49:23:04:6f: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.183.0/24 IPv6: 2a0b:9c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213338 Signature Algorithm: sha256WithRSAEncryption 79:ab:1d:53:82:4e:60:51:89:94:9e:72:dc:e7:e2:5c:d5:6f: 92:36:fc:0c:6d:68:75:f2:ad:d9:c6:a5:fd:b4:93:9e:da:02: 0c:29:37:25:8b:9a:99:76:21:9f:7a:f0:24:e1:3c:5e:ba:cb: da:75:b6:29:10:b1:f0:77:18:c7:1b:d4:70:f1:c5:6b:3d:bd: 44:f8:b4:bd:3c:8b:e3:58:a1:24:c2:ec:2e:4e:22:82:c6:19: 3c:3c:1b:4e:6d:9a:1f:f2:52:5b:b6:30:e6:81:46:f2:9b:f1: 90:ab:1a:4f:ba:42:80:cc:28:65:6f:a2:6e:df:b6:68:6b:66: 4e:7f:91:74:df:7b:b4:ac:d2:72:4c:a9:2c:7d:80:87:44:bc: 7f:64:7c:71:55:32:ba:a2:e1:ee:5b:87:85:95:8a:a7:3c:4e: 6e:b0:c0:0f:36:aa:74:c5:2b:ff:6d:37:b1:45:c3:d9:02:66: 63:30:f0:b6:7b:42:e0:36:6d:ca:c0:62:2d:0b:4d:32:b0:2e: 20:fd:54:c3:08:d7:91:7d:97:8f:27:7e:92:7a:de:09:65:09: 61:b4:28:37:0f:d9:13:c9:36:4e:24:a9:21:2e:e4:a0:a9:cd: d4:d6:6f:26:fe:b9:c8:20:50:0e:eb:30:41:6e:0d:1e:b3:4e: 2c:a9:98:5a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ozL5LvQkRe+r0NxdaxcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjAwMGViZWVkMjQyYjk1NjRhZGM5NTQ4NTMyM2I5NmJkNmY1YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaO2uvUh4mSlVy4uN+kQuWMQVWNx ZwGBaYr+1AQHsx4ES67kdwgtgR1IN4bzA1ka6hlZ6I7Ok6mNauFhoiK2CiDjXYBE 8XnW7+pfH7fKUxTkildfruRx7I8U4Ty/kP+bJ3TixZAEn5GrLLJ36lNgSHmzq6yH ZPP2Mgri3H/A3GpDCPDEr0VC/OdFMFIea7ay8E2AI1Zm0ZGmiiawd8pCRDJmfJ1u rWKsgJzdIaPTPgrBiMdvFhfScZsZCRRlz3En55tP63petLb5kLyY6+aMMiStBtyf QghaXBX+tprNy2iqsu7IHCPUsvlJpwUl2ROSYC98csvZQarlbEkjBG+T8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDYADr7tJCuVZK3JVIUyO5a9b1wCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2I3N2Ux YS02NjNhLTQ0NWItOGU2MS0zNzAxNTBiNjY5ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYjc3ZTFh LTY2M2EtNDQ1Yi04ZTYxLTM3MDE1MGI2NjllNC8xL05nQU92dTBrSzVWa3JjbFVo VEk3bHIxdlhBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuae3MA0EAgACMAcDBQMqCwnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBWjANBgkqhkiG9w0BAQsFAAOCAQEAeasdU4JOYFGJ lJ5y3OfiXNVvkjb8DG1odfKt2cal/bSTntoCDCk3JYuamXYhn3rwJOE8XrrL2nW2 KRCx8HcYxxvUcPHFaz29RPi0vTyL41ihJMLsLk4igsYZPDwbTm2aH/JSW7Yw5oFG 8pvxkKsaT7pCgMwoZW+ibt+2aGtmTn+RdN97tKzSckypLH2Ah0S8f2R8cVUyuqLh 7luHhZWKpzxObrDADzaqdMUr/203sUXD2QJmYzDwtntC4DZtysBiLQtNMrAuIP1U wwjXkX2Xjyd+knreCWUJYbQoNw/ZE8k2TiSpIS7koKnN1NZvJv65yCBQDuswQW4N HrNOLKmYWg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:37 2026 by rpki-client