This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer File: nM47EZfQz5URVAVypY_TctzAdIk.cer (raw, json) Hash identifier: OA8GcSPkgBxoqaGBysQvWC9b7hbQZ0hdWP/rpt8V9/4= Subject key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C111930533F0C236E9C4DEC70FBD2B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41705 AS: 48958 IP: 185.159.40.0/22 IP: 193.32.240.0/22 IP: 217.67.160.0/20 IP: 2a07:f740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:19:30:53:3f:0c:23:6e:9c:4d:ec:70:fb:d2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:13:dd:d6:ed:d1:b3:a9:34:e9:ca:3b:46: ae:f1:9e:c9:0f:2c:f4:36:81:4d:79:70:4f:ba:46: 32:e3:d8:6b:56:6b:35:bb:d7:22:5c:75:9e:0e:26: af:41:d0:38:13:30:1f:25:8e:56:e9:8f:d0:80:32: bb:2f:40:d7:f7:5c:68:34:8d:44:54:1f:50:f7:f9: a3:25:11:59:d0:13:01:14:90:03:7b:d4:64:f7:2c: fb:e5:51:73:a9:7f:0e:a3:f7:6c:d3:72:38:0b:18: a0:2d:62:e1:8a:9b:d4:ac:48:c7:da:41:03:99:69: a0:24:ac:4e:70:33:59:75:56:b9:b1:67:17:85:bb: 23:77:c2:a0:ab:23:87:e1:d3:a5:1b:78:14:e9:2e: ba:6f:7e:17:b5:36:46:86:03:fd:9b:83:8f:54:35: e6:8d:f4:26:32:07:de:d6:21:7f:68:eb:de:18:bf: 4a:89:af:f8:99:0a:51:ed:c9:d6:86:67:f1:a4:f3: 88:8d:2c:ee:92:f3:db:92:75:9c:66:21:a1:02:85: e9:4f:0c:1a:6f:e2:07:79:d5:15:3c:15:9b:c3:bf: 38:49:60:da:e2:c9:89:37:28:3b:7f:0f:bd:ba:d7: d2:a6:6e:61:dc:4e:18:57:0a:5b:fd:b6:1e:70:82: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.40.0/22 193.32.240.0/22 217.67.160.0/20 IPv6: 2a07:f740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41705 48958 Signature Algorithm: sha256WithRSAEncryption 67:91:ef:7e:93:ba:89:df:e0:81:d1:71:a9:fd:bc:a3:a1:7e: 6d:b6:9d:ca:75:17:92:c4:50:e0:60:5c:d3:28:b1:45:cc:7e: 72:59:8b:63:9c:6c:36:b7:46:02:4f:3b:e9:a8:8c:9f:c8:11: d8:8d:c8:f8:4e:a4:98:88:6e:45:40:94:89:a4:a0:90:e2:33: a0:90:8a:cf:43:45:40:2c:09:63:f6:e2:2a:69:a9:49:f9:12: 1f:24:3f:47:8b:34:01:63:cc:1a:c9:eb:9a:6e:ad:0e:0d:fc: 4a:ab:3d:d7:31:58:d4:4b:fa:96:ad:0b:8f:3e:54:a1:54:b4: a9:c4:af:96:03:67:e3:ba:b8:76:7b:b8:b1:08:6d:6f:63:d8: c5:c0:a7:e4:34:27:8d:0c:5c:9d:5e:0c:9c:b6:e8:18:66:1f: 1b:5c:40:c6:07:2a:94:06:73:5c:6c:f0:11:62:2c:5a:32:59: 70:38:89:dd:6c:87:02:7d:2b:c9:83:81:e0:47:e7:59:0f:14: 35:a7:0c:ea:eb:87:bc:2f:61:f6:45:36:c9:3a:92:e9:94:af: b1:54:da:2c:f6:a1:ba:a4:4c:86:4f:3a:00:3a:dd:06:4b:ed: c0:81:df:d4:16:d7:32:f0:58:7a:00:fc:58:c8:65:d5:64:d6: 1d:51:a8:41 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt8ERkwUz8MI26cTexw+9K3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2NlM2IxMTk3ZDBjZjk1MTE1NDA1NzJhNThmZDM3MmRjYzA3NDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwisT3dbt0bOpNOnKO0au8Z7JDyz0 NoFNeXBPukYy49hrVms1u9ciXHWeDiavQdA4EzAfJY5W6Y/QgDK7L0DX91xoNI1E VB9Q9/mjJRFZ0BMBFJADe9Rk9yz75VFzqX8Oo/ds03I4CxigLWLhipvUrEjH2kED mWmgJKxOcDNZdVa5sWcXhbsjd8KgqyOH4dOlG3gU6S66b34XtTZGhgP9m4OPVDXm jfQmMgfe1iF/aOveGL9Kia/4mQpR7cnWhmfxpPOIjSzukvPbknWcZiGhAoXpTwwa b+IHedUVPBWbw784SWDa4smJNyg7fw+9utfSpm5h3E4YVwpb/bYecIL5YwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFJzOOxGX0M+VEVQFcqWP03LcwHSJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzRmMjM2 Ny03M2YzLTQ4MTYtYmVhOC1hMDQ1ZmY4ZTJhYzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvNGYyMzY3 LTczZjMtNDgxNi1iZWE4LWEwNDVmZjhlMmFjMC8xL25NNDdFWmZRejVVUlZBVnlw WV9UY3R6QWRJay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuZ8oAwQCwSDwAwQE2UOgMA0EAgACMAcDBQMq B/dAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCi6QIDAL8+MA0GCSqGSIb3DQEB CwUAA4IBAQBnke9+k7qJ3+CB0XGp/byjoX5ttp3KdReSxFDgYFzTKLFFzH5yWYtj nGw2t0YCTzvpqIyfyBHYjcj4TqSYiG5FQJSJpKCQ4jOgkIrPQ0VALAlj9uIqaalJ +RIfJD9HizQBY8wayeuabq0ODfxKqz3XMVjUS/qWrQuPPlShVLSpxK+WA2fjurh2 e7ixCG1vY9jFwKfkNCeNDFydXgyctugYZh8bXEDGByqUBnNcbPARYixaMllwOInd bIcCfSvJg4HgR+dZDxQ1pwzq64e8L2H2RTbJOpLplK+xVNos9qG6pEyGTzoAOt0G S+3Agd/UFtcy8Fh6APxYyGXVZNYdUahB -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:15 2026 by rpki-client