This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer File: NrVfs00p-WJUUTKgJbUmRP3_v28.cer (raw, json) Hash identifier: YNdBS7fiUPHf/h+OHNg7MIJVyQ2FLwyqnCHK3v++Plw= Subject key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15FE9890ABEDC6A7E3352F9ECC20E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212217 IP: 185.206.123.0/24 IP: 2a10:ca00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fe:98:90:ab:ed:c6:a7:e3:35:2f:9e:cc:20:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36b55fb34d29f962545132a025b52644fdffbf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:c8:2c:22:18:c1:a3:53:ed:81:1f:06:1f: 2c:db:01:36:72:d2:98:b9:c2:bc:5b:dc:a4:74:ef: e8:15:72:f7:e9:5d:03:bd:6d:c2:2d:b5:e9:91:19: 96:e3:93:f0:1e:3a:82:2b:0f:ad:26:35:4b:be:d3: 9d:2a:6c:e7:7e:35:5e:cd:2a:0d:4b:59:c1:4c:56: 30:6a:16:5f:3d:86:95:d0:9a:8c:64:84:25:23:39: ff:9a:73:70:12:ab:66:11:75:70:dd:1c:95:2b:c4: 95:e6:1b:ac:2d:cd:86:75:de:7d:c8:8d:1e:37:5a: f6:fa:b9:dc:58:2c:f4:7f:6c:d7:4e:00:62:9d:16: df:a1:fc:f5:3e:6e:f0:cf:3a:dd:df:a8:57:4c:5d: 40:30:ae:4e:98:4f:ff:ae:a2:e4:43:04:a4:95:be: 09:11:40:13:9e:13:26:64:17:4d:6a:ee:0e:87:f0: ea:6b:21:5d:63:ff:18:5f:64:22:c2:d4:44:f9:fd: 1e:ac:1c:b3:cf:6c:58:2c:e5:4e:cb:62:de:85:02: 98:6b:37:ed:30:fd:86:c7:28:e3:84:eb:4a:56:12: 81:6d:f5:62:be:01:8c:0b:4e:ca:0c:9d:b3:22:fe: 63:c4:93:01:e4:d5:fd:e9:49:74:87:d8:0a:b8:55: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.123.0/24 IPv6: 2a10:ca00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212217 Signature Algorithm: sha256WithRSAEncryption 57:94:b3:7d:29:73:6c:a8:6b:ff:1d:d1:d7:a5:ca:b4:ef:68: 57:85:d4:95:bc:f2:b7:2e:6e:01:1a:16:95:2a:c2:e4:6f:5b: d1:a4:5b:1f:12:93:5d:5a:29:2b:d7:da:c1:53:b8:dd:7d:60: 9e:e2:9c:60:a7:a7:79:10:2d:41:42:f1:2d:99:be:8e:6c:0b: d2:f1:00:6f:3e:96:d1:61:ed:9c:f7:a9:d8:8b:6c:15:32:3f: 90:05:c8:84:19:cc:29:c6:50:ba:04:4b:e5:cc:84:24:2a:57: e6:01:bd:f5:79:0f:00:90:38:b5:68:48:f7:25:41:35:0a:2e: 07:22:15:d8:45:f1:4b:f8:13:2e:20:31:73:a3:d4:db:0d:54: 94:dd:74:be:4f:2a:73:59:4c:37:f6:b2:36:8e:85:a3:10:96: 37:d0:b6:9a:b5:c5:d1:6e:9c:db:b2:a5:22:b0:ac:2b:a5:e9: 79:f3:54:9a:ae:38:1f:da:ab:b5:83:5f:d0:fb:7e:a4:48:39: ee:b9:6d:36:28:39:c1:1d:5c:12:a6:f4:89:93:fc:60:2c:3a: af:51:27:6b:aa:fd:e0:25:27:73:b5:f8:04:8e:5a:77:ac:ff: 95:58:43:0e:ce:5c:ff:75:c6:b4:85:79:22:a9:5e:a3:ef:62: 54:e7:bc:0b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/Ff6YkKvtxqfjNS+ezCDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmI1NWZiMzRkMjlmOTYyNTQ1MTMyYTAyNWI1MjY0NGZkZmZiZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xHILCIYwaNT7YEfBh8s2wE2ctKY ucK8W9ykdO/oFXL36V0DvW3CLbXpkRmW45PwHjqCKw+tJjVLvtOdKmznfjVezSoN S1nBTFYwahZfPYaV0JqMZIQlIzn/mnNwEqtmEXVw3RyVK8SV5husLc2Gdd59yI0e N1r2+rncWCz0f2zXTgBinRbfofz1Pm7wzzrd36hXTF1AMK5OmE//rqLkQwSklb4J EUATnhMmZBdNau4Oh/DqayFdY/8YX2QiwtRE+f0erByzz2xYLOVOy2LehQKYazft MP2GxyjjhOtKVhKBbfVivgGMC07KDJ2zIv5jxJMB5NX96Ul0h9gKuFVrhwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDa1X7NNKfliVFEyoCW1JkT9/79vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzJiZjAw Yi1iZmJjLTRmNmItYTEzZS1mMTBmNzNhOWVjYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvMmJmMDBi LWJmYmMtNGY2Yi1hMTNlLWYxMGY3M2E5ZWNiMy8xL05yVmZzMDBwLVdKVVVUS2dK YlVtUlAzX3YyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuc57MA0EAgACMAcDBQAqEMoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8+TANBgkqhkiG9w0BAQsFAAOCAQEAV5SzfSlzbKhr /x3R16XKtO9oV4XUlbzyty5uARoWlSrC5G9b0aRbHxKTXVopK9fawVO43X1gnuKc YKeneRAtQULxLZm+jmwL0vEAbz6W0WHtnPep2ItsFTI/kAXIhBnMKcZQugRL5cyE JCpX5gG99XkPAJA4tWhI9yVBNQouByIV2EXxS/gTLiAxc6PU2w1UlN10vk8qc1lM N/ayNo6FoxCWN9C2mrXF0W6c27KlIrCsK6XpefNUmq44H9qrtYNf0Pt+pEg57rlt Nig5wR1cEqb0iZP8YCw6r1Ena6r94CUnc7X4BI5ad6z/lVhDDs5c/3XGtIV5Iqle o+9iVOe8Cw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:22 2026 by rpki-client