This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer (raw, json) Hash identifier: 4mGyCQezVlWpYM4n2pgbXBtHj3JdqOLj+SBn5Ehe04c= Subject key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12605544A0427ABB6F37980C538074 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205423 IP: 185.176.208.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:60:55:44:a0:42:7a:bb:6f:37:98:0c:53:80:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:9c:5c:94:16:f5:69:06:a8:7f:04:b4:c6: 02:6d:12:8f:cc:75:16:45:c2:c2:21:eb:59:83:c8: 1a:37:0d:7a:fb:59:09:82:41:41:96:3e:6c:27:3a: 24:be:5a:3f:24:a6:34:28:8b:0c:51:26:d4:c6:98: 94:5e:c7:d9:52:21:8b:41:c2:95:75:c8:ae:6d:e2: 6e:3c:8a:49:68:a2:4a:da:1c:20:75:85:58:93:2f: 98:ef:54:c7:2a:e7:ab:3e:cc:85:3a:7c:d3:fe:a9: f5:ac:98:0d:2c:61:67:03:8e:a0:11:a6:86:55:8c: 59:0a:e2:fc:fa:74:0b:a8:e0:c8:bf:3d:d0:81:06: 8e:b4:40:d9:a3:55:b3:6e:d1:d9:b1:bf:a5:df:12: a8:80:b0:d1:f3:cc:92:b5:d7:3c:dd:0d:86:cc:58: f7:fa:9a:1c:e8:73:8e:b9:93:88:b9:d7:0a:4f:44: 92:0c:ff:11:0c:d9:e4:46:07:3c:79:56:3a:3d:63: 2b:54:32:4c:82:1f:55:aa:fd:2d:b1:83:d0:a6:65: e0:81:e0:95:c2:14:07:1b:47:0c:74:fe:c6:e0:39: f2:31:f5:19:e6:a5:3f:05:e6:68:13:cd:7f:5c:00: b7:d0:a5:90:34:80:ea:36:6b:c8:55:9f:fe:b9:57: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205423 Signature Algorithm: sha256WithRSAEncryption 02:38:62:fb:b8:95:af:80:6a:9d:4f:81:4c:aa:57:3e:09:fe: b8:d2:cf:f2:1a:26:1f:7f:7b:71:aa:e0:64:78:1a:d1:10:c9: 56:07:c1:f4:6b:32:66:a2:5b:4c:2f:69:26:1e:1c:53:ca:d7: a9:65:ef:57:7c:6f:b0:6f:57:62:32:28:4f:39:36:1b:69:53: 71:38:c0:71:71:ae:92:c2:fd:fa:2a:13:a6:17:c4:50:e3:15: ae:ed:0c:db:ea:28:3d:2c:e4:a2:8a:17:87:cc:ed:af:d5:0a: e4:b2:a9:16:d4:6f:af:53:1d:80:ed:d4:fb:17:e2:01:87:3d: 35:a0:2f:70:ee:fb:2b:05:e4:2b:ef:39:b9:a3:04:c6:52:d5: 3c:dd:82:1f:c4:f0:63:f3:b9:a0:7c:f7:97:c8:30:da:f0:43: f9:67:c0:f8:d7:0b:6a:55:af:bf:44:e1:13:71:39:a2:17:1a: 3a:e2:4c:c4:5b:6e:a8:24:db:e6:d6:bc:8f:68:8f:46:0a:03: 96:1e:2e:a8:bb:6b:27:47:20:1a:72:59:fc:48:7e:73:ae:11: 38:58:95:7a:3f:15:44:7f:dc:41:cb:57:65:73:39:ee:b8:b3: 98:97:cc:94:bd:0e:03:72:56:7b:17:be:97:85:36:3b:f8:4a: ac:81:72:1b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EmBVRKBCertvN5gMU4B0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDY5YjZiMmEwYTcyODE4ZDFmYTlhNDZlZjJhZDc4MTJiOTViY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgmcXJQW9WkGqH8EtMYCbRKPzHUW RcLCIetZg8gaNw16+1kJgkFBlj5sJzokvlo/JKY0KIsMUSbUxpiUXsfZUiGLQcKV dciubeJuPIpJaKJK2hwgdYVYky+Y71THKuerPsyFOnzT/qn1rJgNLGFnA46gEaaG VYxZCuL8+nQLqODIvz3QgQaOtEDZo1WzbtHZsb+l3xKogLDR88yStdc83Q2GzFj3 +poc6HOOuZOIudcKT0SSDP8RDNnkRgc8eVY6PWMrVDJMgh9Vqv0tsYPQpmXggeCV whQHG0cMdP7G4DnyMfUZ5qU/BeZoE81/XAC30KWQNIDqNmvIVZ/+uVdNIwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ1ptrKgpygY0fqaRu8q14ErlbzAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzYzM2Fm Mi01YjRlLTRhNGMtYjEzOS0zOTYwNzgyMWEwOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvNjMzYWYy LTViNGUtNGE0Yy1iMTM5LTM5NjA3ODIxYTA5YS8xL25XbTJzcUNuS0JqUi1wcEc3 eXJYZ1N1VnZNQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCubDQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMibzANBgkqhkiG9w0BAQsFAAOCAQEAAjhi+7iVr4BqnU+BTKpXPgn+uNLP8hom H397cargZHga0RDJVgfB9GsyZqJbTC9pJh4cU8rXqWXvV3xvsG9XYjIoTzk2G2lT cTjAcXGuksL9+ioTphfEUOMVru0M2+ooPSzkoooXh8ztr9UK5LKpFtRvr1MdgO3U +xfiAYc9NaAvcO77KwXkK+85uaMExlLVPN2CH8TwY/O5oHz3l8gw2vBD+WfA+NcL alWvv0ThE3E5ohcaOuJMxFtuqCTb5ta8j2iPRgoDlh4uqLtrJ0cgGnJZ/Eh+c64R OFiVej8VRH/cQctXZXM57rizmJfMlL0OA3JWexe+l4U2O/hKrIFyGw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:45 2026 by rpki-client