This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer File: nRNTyAuINe6erTfvfp9kIQp3O_s.cer (raw, json) Hash identifier: Bk5dXjdoZh4QgvMGe/p+k81DdTrlhRm6GK91tJx4rj4= Subject key identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7333C6A738B13BF3E914B2EBD39F1CD6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 13:56:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203893 IP: 185.217.217.0 -- 185.217.219.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:33:c6:a7:38:b1:3b:f3:e9:14:b2:eb:d3:9f:1c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 13:56:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:04:d5:5c:65:93:a8:42:f2:61:80:05:c4: 81:25:cc:a8:61:ed:39:53:f8:ff:56:c8:c6:c4:97: 35:99:5e:1a:31:a0:88:a5:e5:1e:9a:c7:15:08:c5: 42:e4:23:14:b5:9b:fa:a7:43:11:c5:2c:5a:09:16: 04:47:d5:0b:0d:27:dc:39:69:54:6e:0f:d0:a6:97: c8:c7:cf:98:2f:ab:31:52:68:bb:37:a3:42:04:e4: 98:60:9b:04:af:24:f0:9e:af:08:11:74:64:d8:e6: 6d:1e:c0:25:1d:75:3a:18:dc:63:f9:ea:78:4f:af: 4d:c6:d3:4e:b1:a8:7c:f2:d2:79:12:0e:1d:87:59: 9b:1d:31:79:d8:0f:5a:d8:80:bb:42:64:00:88:59: e6:ad:17:95:41:f9:43:d2:a7:72:37:e4:f8:8b:93: d2:4e:57:92:48:14:15:3a:f7:dd:be:c4:7d:63:49: 41:1c:1c:93:83:85:04:d6:b4:d0:37:1c:12:ca:bb: 42:85:aa:28:33:05:a4:4f:0d:71:3c:88:fc:32:59: 88:ba:55:d4:54:bf:74:3a:82:3a:a5:e6:70:d8:6b: f4:8c:e1:e7:a0:50:d3:22:d9:9f:50:0e:97:21:fa: 5b:0a:3e:e2:b7:cd:72:76:50:a4:53:cb:14:25:0b: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.217.0-185.217.219.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203893 Signature Algorithm: sha256WithRSAEncryption 5c:be:fc:ee:55:84:99:e0:9b:eb:f7:03:91:6d:49:ed:90:32: db:47:6a:b7:1f:29:ce:9e:fe:43:dd:56:8e:9a:85:b8:d2:05: 30:5e:bd:39:ba:bb:6b:ed:8f:fa:0f:6e:e5:5f:a4:a6:6e:81: 07:42:32:a4:c4:e1:1f:c3:40:49:d5:69:4b:37:8c:67:1d:82: f8:d4:ba:4a:ad:1d:af:6d:47:b6:05:ac:90:b5:71:44:83:67: b3:99:63:0c:fe:3d:07:89:c7:83:04:4f:5d:fb:1e:e1:1c:03: cc:be:33:10:4c:2a:29:a4:3a:55:a6:bf:d9:dc:b0:c1:96:b6: 4a:d3:9c:99:a1:7e:4c:58:29:c9:06:b3:26:d5:4a:85:d4:29: 54:e5:a5:dc:40:f9:75:d7:2d:ca:9f:6c:ba:f9:12:27:e1:c4: 75:d2:6b:c8:5e:d1:f4:4d:96:53:74:fe:78:e7:4f:74:d0:3e: 47:f7:e4:8c:bf:99:de:33:1f:4c:ec:e3:37:02:07:a6:e1:e4: 4f:7a:94:7d:09:8d:b1:50:e1:51:08:11:2c:cb:ea:7a:fa:16: d9:4a:b8:e0:c9:71:21:ae:26:e4:39:41:6c:90:2d:6a:a7:11: e3:43:ce:fd:91:4a:03:0c:86:76:e1:e0:9f:4d:e9:a9:d4:2c: 95:79:19:73 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZpzM8anOLE78+kUsuvTnxzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMTM1NjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDEzNTNjODBiODgzNWVlOWVhZDM3ZWY3ZTlmNjQyMTBhNzczYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHQE1Vxlk6hC8mGABcSBJcyoYe05 U/j/VsjGxJc1mV4aMaCIpeUemscVCMVC5CMUtZv6p0MRxSxaCRYER9ULDSfcOWlU bg/QppfIx8+YL6sxUmi7N6NCBOSYYJsEryTwnq8IEXRk2OZtHsAlHXU6GNxj+ep4 T69NxtNOsah88tJ5Eg4dh1mbHTF52A9a2IC7QmQAiFnmrReVQflD0qdyN+T4i5PS TleSSBQVOvfdvsR9Y0lBHByTg4UE1rTQNxwSyrtChaooMwWkTw1xPIj8MlmIulXU VL90OoI6peZw2Gv0jOHnoFDTItmfUA6XIfpbCj7it81ydlCkU8sUJQsiAQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFJ0TU8gLiDXunq03736fZCEKdzv7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzI1YTYy NS02NDljLTRhMTEtYjdlYi1hNDNkOTlmZTExZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvMjVhNjI1 LTY0OWMtNGExMS1iN2ViLWE0M2Q5OWZlMTFlMS8xL25STlR5QXVJTmU2ZXJUZnZm cDlrSVFwM09fcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAC52dkDBAK52dgwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAxx1MA0GCSqGSIb3DQEBCwUAA4IBAQBcvvzuVYSZ4Jvr9wORbUnt kDLbR2q3HynOnv5D3VaOmoW40gUwXr05urtr7Y/6D27lX6SmboEHQjKkxOEfw0BJ 1WlLN4xnHYL41LpKrR2vbUe2BayQtXFEg2ezmWMM/j0HiceDBE9d+x7hHAPMvjMQ TCoppDpVpr/Z3LDBlrZK05yZoX5MWCnJBrMm1UqF1ClU5aXcQPl11y3Kn2y6+RIn 4cR10mvIXtH0TZZTdP5450900D5H9+SMv5neMx9M7OM3Agem4eRPepR9CY2xUOFR CBEsy+p6+hbZSrjgyXEhribkOUFskC1qpxHjQ879kUoDDIZ24eCfTemp1CyVeRlz -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:06 2025 by rpki-client