This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer (raw, json) Hash identifier: zxoa3Gh26FmzTxnl3nYva6IojyaZkJ0ggXxgBOLTeE8= Subject key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF28E9D2678A0460472A5067E6CA72F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:2248::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8e:9d:26:78:a0:46:04:72:a5:06:7e:6c:a7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d07041fe55591e4e2236a40f43900ef26ef045e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:61:d8:e3:6c:11:4e:51:bb:25:2a:9e:59: 4f:5e:d3:0b:24:61:c2:6a:26:dd:d6:7e:3c:f0:96: 6d:e2:db:98:ee:0b:2d:b9:1c:3c:9f:d8:dd:fa:53: 36:c6:c1:46:17:71:f9:31:d2:75:f2:0b:79:61:1a: 48:cf:35:94:7c:6c:0f:14:6e:05:03:72:64:f0:80: fb:f5:cc:ba:bb:32:94:cb:9b:60:d6:e0:02:bf:47: 75:4a:08:e8:2c:92:3f:dc:1d:84:78:e2:78:13:4f: 4b:2b:4b:54:5a:80:38:07:a5:63:77:af:64:ef:2d: 72:73:0e:aa:8b:8a:27:e9:c3:c8:cc:cc:3c:21:91: e5:5c:b4:64:9a:eb:9f:28:5b:b1:42:3c:7d:82:f4: ca:21:8a:60:42:a9:90:a4:ce:fc:db:9e:45:0a:5e: 24:d0:a6:f0:17:de:05:33:d3:f2:cc:8d:d6:1e:61: 5d:d4:6a:c5:28:2e:86:cc:79:44:ac:d3:b6:b6:b8: 80:64:df:4c:5c:dd:2a:84:9e:3c:41:7f:d5:7a:f4: aa:bf:82:99:72:44:80:bf:6e:83:e1:9a:6f:d3:da: 3e:0f:16:73:62:cc:78:44:e7:d4:06:35:28:11:39: ad:2d:d1:69:9f:e1:97:2e:4b:d6:c8:ec:e7:05:ad: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2248::/48 Signature Algorithm: sha256WithRSAEncryption a4:b1:5b:70:76:9f:80:b9:99:c3:7a:24:d8:9d:dc:95:87:58: 22:d1:59:21:64:3e:e4:d7:00:c2:17:1b:05:e8:54:ca:88:c0: d1:90:66:b8:de:19:12:7f:f3:cf:db:c5:b5:20:90:99:2f:c0: 3f:82:e8:f8:72:ce:3a:df:64:68:64:92:92:c3:4d:14:e8:0c: 98:82:d4:07:08:0c:fd:83:2d:b5:ca:56:a3:7b:7c:2b:a1:96: 1c:c2:d3:fa:d1:ed:3d:83:1b:7f:eb:51:a9:24:46:bf:82:ba: 9b:bc:8c:c2:e5:48:96:52:7a:70:8f:3c:bc:91:2f:fc:e7:51: 02:b5:7b:8a:d6:5f:2e:07:fa:49:a3:b0:96:8a:2c:2a:aa:f5: 5a:15:45:ce:f5:5b:a0:ef:03:23:69:81:80:be:58:8c:89:2a: 0a:20:2e:7d:19:1b:54:c3:0c:78:49:e7:49:a4:95:b8:7e:90: 68:4f:e7:2a:39:1b:84:16:04:89:f2:bb:b4:a6:d8:92:19:30: 64:1b:ff:1e:77:0f:3a:49:cf:94:a7:5b:47:1d:e4:97:86:70: ad:54:8d:ae:f8:a1:e9:80:4b:69:b6:cf:2a:e5:20:3b:2c:04: d4:ee:45:bb:c6:47:23:01:70:78:ce:19:e3:e7:92:65:c9:1d: 67:3b:b0:12 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt/8o6dJnigRgRypQZ+bKcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDA3MDQxZmU1NTU5MWU0ZTIyMzZhNDBmNDM5MDBlZjI2ZWYwNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH9h2ONsEU5RuyUqnllPXtMLJGHC aibd1n488JZt4tuY7gstuRw8n9jd+lM2xsFGF3H5MdJ18gt5YRpIzzWUfGwPFG4F A3Jk8ID79cy6uzKUy5tg1uACv0d1SgjoLJI/3B2EeOJ4E09LK0tUWoA4B6Vjd69k 7y1ycw6qi4on6cPIzMw8IZHlXLRkmuufKFuxQjx9gvTKIYpgQqmQpM78255FCl4k 0KbwF94FM9PyzI3WHmFd1GrFKC6GzHlErNO2triAZN9MXN0qhJ48QX/VevSqv4KZ ckSAv26D4Zpv09o+DxZzYsx4ROfUBjUoETmtLdFpn+GXLkvWyOznBa2L2wIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFJ0HBB/lVZHk4iNqQPQ5AO8m7wReMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzEzNTZh OC04OTFjLTRlZTEtYjZkOS03NDc0Njk4OWFjOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMTM1NmE4 LTg5MWMtNGVlMS1iNmQ5LTc0NzQ2OTg5YWM5Mi8xL25RY0VILVZWa2VUaUkycEE5 RGtBN3lidkJGNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCJIMA0GCSqGSIb3DQEBCwUAA4IBAQCk sVtwdp+AuZnDeiTYndyVh1gi0VkhZD7k1wDCFxsF6FTKiMDRkGa43hkSf/PP28W1 IJCZL8A/guj4cs4632RoZJKSw00U6AyYgtQHCAz9gy21ylaje3wroZYcwtP60e09 gxt/61GpJEa/grqbvIzC5UiWUnpwjzy8kS/851ECtXuK1l8uB/pJo7CWiiwqqvVa FUXO9Vug7wMjaYGAvliMiSoKIC59GRtUwwx4SedJpJW4fpBoT+cqORuEFgSJ8ru0 ptiSGTBkG/8edw86Sc+Up1tHHeSXhnCtVI2u+KHpgEtpts8q5SA7LATU7kW7xkcj AXB4zhnj55JlyR1nO7AS -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:03 2026 by rpki-client