This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer File: nVE44frPe2XbtXX6fUckDCeLNN8.cer (raw, json) Hash identifier: WUAwS7YXGBO6sScunhPMrDhllju/4Bfc5k3hw2KQU6Q= Subject key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11E70F6073BBC016A6948665636FF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.83.144.0/22 IP: 185.174.28.0/22 IP: 2a05:9bc0::/29 IP: 2a0b:8100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e7:0f:60:73:bb:c0:16:a6:94:86:65:63:6f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:70:89:c1:ef:50:1b:34:6c:38:56:ac:a5: 6d:0c:67:62:6f:7d:bb:f2:88:aa:7e:cb:35:12:39: b5:75:c7:ed:3b:3e:0f:f6:fc:4b:5e:97:05:51:1b: b9:15:50:d4:b9:ac:32:48:bb:2b:26:35:12:d9:fe: 4c:aa:d8:af:e1:6f:6b:8c:7e:41:c3:67:d8:1f:ef: 2d:bd:69:eb:a9:9f:87:fe:8a:1f:d5:56:cd:6f:21: ac:4f:6c:81:7d:6a:30:0d:7b:05:cc:22:fe:13:e6: d0:ed:ba:ba:75:8a:bf:79:71:06:c6:13:ff:47:be: 13:ce:93:d5:b6:fa:93:0a:01:60:46:50:58:5f:f5: ee:3d:fd:39:b9:df:51:b2:0f:57:ef:3b:84:ed:70: a5:58:17:cf:f4:db:71:d5:64:78:49:a3:f5:ce:54: 77:cd:b8:28:a0:cc:da:15:b3:a0:54:f6:f1:d4:cc: ff:a7:b1:9b:1f:14:9f:db:dd:62:5c:2e:33:e1:64: f4:12:f9:05:e6:6d:cf:db:f1:c1:1a:63:7c:64:7c: f9:ba:ad:0d:30:b8:76:42:b9:fc:4d:8f:c0:93:04: 56:17:02:9e:a4:f4:7e:ef:a7:98:c6:e4:df:00:07: 75:b8:60:20:6f:ec:6e:5a:86:ce:62:f5:6d:3c:1f: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.144.0/22 185.174.28.0/22 IPv6: 2a05:9bc0::/29 2a0b:8100::/29 Signature Algorithm: sha256WithRSAEncryption b1:40:7b:2c:5c:a4:04:08:99:3c:52:4d:f6:7c:d2:27:bb:d4: 65:d5:36:d9:4d:e0:29:70:e9:b5:7a:e9:fe:50:ba:86:82:f4: 99:ed:0b:00:53:87:ef:e3:b5:18:de:97:f0:21:82:c1:13:76: f4:b5:82:d2:e9:2d:aa:30:fa:bb:68:b6:6b:48:90:ce:90:af: 96:bd:52:ab:66:0c:21:2d:40:82:83:fc:3b:09:97:1d:18:9d: f8:9c:c2:cf:aa:6e:58:83:3e:47:ab:19:f9:b3:3e:b4:64:e9: 17:46:e7:ae:f6:0c:e1:99:86:a9:0e:4d:1b:15:ff:e0:00:ee: 72:c7:3d:62:d6:da:3c:e0:df:a7:49:a2:fe:3b:14:c7:51:ad: cb:01:45:f2:ea:73:bc:7f:fd:02:f6:92:df:b5:c9:8e:66:54: ee:84:17:21:84:18:2b:c2:52:d3:75:6c:78:50:88:23:d6:23: a0:42:28:b2:e8:f8:ae:26:45:99:d7:d9:20:a3:c9:3c:ed:98: 76:e2:f6:75:85:f5:ac:b4:2b:df:4d:e7:03:1f:53:a0:db:65: ac:9d:bf:12:d0:84:09:ab:d7:d9:0b:b6:ec:10:e8:22:c0:e4: db:a1:b6:f2:a4:3b:2a:25:93:72:3d:69:a6:c0:13:c8:49:3f: 27:f5:4e:10 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EecPYHO7wBamlIZlY2/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDUxMzhlMWZhY2Y3YjY1ZGJiNTc1ZmE3ZDQ3MjQwYzI3OGIzNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6pwicHvUBs0bDhWrKVtDGdib327 8oiqfss1Ejm1dcftOz4P9vxLXpcFURu5FVDUuawySLsrJjUS2f5Mqtiv4W9rjH5B w2fYH+8tvWnrqZ+H/oof1VbNbyGsT2yBfWowDXsFzCL+E+bQ7bq6dYq/eXEGxhP/ R74TzpPVtvqTCgFgRlBYX/XuPf05ud9Rsg9X7zuE7XClWBfP9Ntx1WR4SaP1zlR3 zbgooMzaFbOgVPbx1Mz/p7GbHxSf291iXC4z4WT0EvkF5m3P2/HBGmN8ZHz5uq0N MLh2Qrn8TY/AkwRWFwKepPR+76eYxuTfAAd1uGAgb+xuWobOYvVtPB/oBwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ1ROOH6z3tl27V1+n1HJAwnizTfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2QwMDFm Zi04MzIzLTRiODktYmUzZC1jMmVmZWIzYjMyYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZDAwMWZm LTgzMjMtNGI4OS1iZTNkLWMyZWZlYjNiMzJhNS8xL25WRTQ0ZnJQZTJYYnRYWDZm VWNrRENlTE5OOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuVOQAwQCua4cMBQEAgACMA4DBQMqBZvAAwUD KguBADANBgkqhkiG9w0BAQsFAAOCAQEAsUB7LFykBAiZPFJN9nzSJ7vUZdU22U3g KXDptXrp/lC6hoL0me0LAFOH7+O1GN6X8CGCwRN29LWC0uktqjD6u2i2a0iQzpCv lr1Sq2YMIS1AgoP8OwmXHRid+JzCz6puWIM+R6sZ+bM+tGTpF0bnrvYM4ZmGqQ5N GxX/4ADucsc9YtbaPODfp0mi/jsUx1GtywFF8upzvH/9AvaS37XJjmZU7oQXIYQY K8JS03VseFCII9YjoEIosuj4riZFmdfZIKPJPO2YduL2dYX1rLQr303nAx9ToNtl rJ2/EtCECavX2Qu27BDoIsDk26G28qQ7KiWTcj1ppsATyEk/J/VOEA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:23 2026 by rpki-client