This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer File: c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer (raw, json) Hash identifier: Xk0XKuoSoxS+YaqS1SbCNaxvIg1mUn0XMUt1QQKxNss= Subject key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AEEB0B0C43CBE287A47522B132188 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5600 AS: 34442 AS: 200994 IP: 46.232.192.0/21 IP: 77.246.16.0/20 IP: 80.77.240.0/20 IP: 88.83.96.0/19 IP: 185.89.120.0/22 IP: 185.93.5.0/24 IP: 195.8.116.0/24 IP: 195.80.0.0/19 IP: 2a00:1990::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ee:b0:b0:c4:3c:be:28:7a:47:52:2b:13:21:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73e373fee780eeab2a90422d0ad514e084a8d611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:26:b0:9a:70:42:e4:86:91:dc:18:81:f1:00: 9b:76:32:a0:65:91:16:6c:7b:7c:a7:d8:de:5c:6a: 8b:fc:3c:0d:53:57:cd:29:00:0f:7a:37:91:dc:b1: fa:20:03:21:fc:63:2a:2c:10:04:ec:64:6c:5c:2d: 2a:a3:24:3e:2d:0d:55:47:ef:69:32:7d:b8:cb:c5: aa:8d:73:92:91:ab:be:cc:aa:81:1e:89:63:f7:cf: 97:26:21:a7:f1:a4:44:1e:47:19:25:7b:92:99:14: c9:2d:4c:3a:41:f6:07:0d:31:69:7c:2f:5c:52:88: 5b:02:33:41:05:34:a1:b0:7b:1f:e1:6e:aa:0f:e4: c9:1f:7e:60:ab:ac:7d:41:ec:5b:57:b7:0e:2b:bf: 1e:c6:8f:ae:c3:d5:cf:88:7c:25:5b:b9:fe:36:3f: b9:f5:b2:c2:35:65:37:cb:b0:29:48:f5:fc:8b:6a: a3:42:ac:10:a6:66:07:bc:a2:d0:5f:10:b3:7d:4f: 63:86:fe:ea:c2:14:b4:65:9e:4a:b0:d5:ae:e1:cf: 01:7f:54:5c:f9:4c:8c:b7:71:aa:4e:66:00:3d:6e: ef:4a:d4:5c:c2:a9:d5:ac:fa:60:13:bb:3e:20:d6: bc:94:6c:97:80:1b:09:b8:1a:ef:0e:cd:6f:e7:82: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.192.0/21 77.246.16.0/20 80.77.240.0/20 88.83.96.0/19 185.89.120.0/22 185.93.5.0/24 195.8.116.0/24 195.80.0.0/19 IPv6: 2a00:1990::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5600 34442 200994 Signature Algorithm: sha256WithRSAEncryption 4a:f0:51:2f:13:87:bd:11:17:ef:5c:29:df:7a:ae:0a:ee:a6: 6a:b9:83:97:50:4b:60:41:99:14:88:8a:c5:f8:34:05:13:6e: 8b:00:7e:d8:0e:ef:63:dc:23:53:1c:d2:d1:34:15:76:cb:9a: 50:30:2d:cb:c9:69:e3:f3:a1:88:8b:79:c1:82:7f:05:fc:32: 27:d0:e8:29:eb:7d:2d:59:14:2a:a6:7a:11:59:1e:ea:c3:5d: ef:1a:41:93:fc:08:5b:d9:72:24:03:d5:fd:8b:ef:18:d8:ee: 54:94:96:16:53:c2:7a:7b:2c:98:dc:c1:a9:a1:74:bd:7d:d5: f6:cf:e7:63:8e:9c:54:32:3d:59:a2:8d:79:12:90:64:6d:09: 98:84:c0:4f:fe:b2:17:16:dc:f6:6e:49:05:ea:e7:0e:35:f3: 07:08:0f:b5:81:99:c7:54:20:07:3c:48:8d:b8:e2:ef:25:a9: 55:84:ff:a1:1b:f4:bf:ca:6a:2b:6d:5a:fe:c2:4e:a5:d2:6a: 37:e5:71:9a:3b:68:cf:d0:83:7c:b0:72:e8:21:fc:d1:23:05: ad:e6:6a:58:70:62:00:3d:5d:99:f0:ba:df:8b:b5:3c:9f:2e: cb:09:5c:10:21:42:45:ce:30:43:4a:f2:e8:c8:31:ed:c3:08: 1f:51:18:a1 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt6Wu6wsMQ8vih6R1IrEyGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2UzNzNmZWU3ODBlZWFiMmE5MDQyMmQwYWQ1MTRlMDg0YThkNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iawmnBC5IaR3BiB8QCbdjKgZZEW bHt8p9jeXGqL/DwNU1fNKQAPejeR3LH6IAMh/GMqLBAE7GRsXC0qoyQ+LQ1VR+9p Mn24y8WqjXOSkau+zKqBHolj98+XJiGn8aREHkcZJXuSmRTJLUw6QfYHDTFpfC9c UohbAjNBBTShsHsf4W6qD+TJH35gq6x9QexbV7cOK78exo+uw9XPiHwlW7n+Nj+5 9bLCNWU3y7ApSPX8i2qjQqwQpmYHvKLQXxCzfU9jhv7qwhS0ZZ5KsNWu4c8Bf1Rc +UyMt3GqTmYAPW7vStRcwqnVrPpgE7s+INa8lGyXgBsJuBrvDs1v54I7YwIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFHPjc/7ngO6rKpBCLQrVFOCEqNYRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2L2UwZTQz My05YjM2LTQ3YTYtOTNhMi0wNDFmZDRjNmZmZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvZTBlNDMz LTliMzYtNDdhNi05M2EyLTA0MWZkNGM2ZmZkNC8xL2MtTnpfdWVBN3FzcWtFSXRD dFVVNElTbzFoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQDLujAAwQETfYQAwQEUE3wAwQFWFNgAwQCuVl4 AwQAuV0FAwQAwwh0AwQFw1AAMA0EAgACMAcDBQAqABmQMCMGCCsGAQUFBwEIAQH/ BBQwEqAQMA4CAhXgAgMAhooCAwMRIjANBgkqhkiG9w0BAQsFAAOCAQEASvBRLxOH vREX71wp33quCu6marmDl1BLYEGZFIiKxfg0BRNuiwB+2A7vY9wjUxzS0TQVdsua UDAty8lp4/OhiIt5wYJ/BfwyJ9DoKet9LVkUKqZ6EVke6sNd7xpBk/wIW9lyJAPV /YvvGNjuVJSWFlPCenssmNzBqaF0vX3V9s/nY46cVDI9WaKNeRKQZG0JmITAT/6y Fxbc9m5JBernDjXzBwgPtYGZx1QgBzxIjbji7yWpVYT/oRv0v8pqK21a/sJOpdJq N+Vxmjtoz9CDfLBy6CH80SMFreZqWHBiAD1dmfC634u1PJ8uywlcECFCRc4wQ0ry 6Mgx7cMIH1EYoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:55 2026 by rpki-client