This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer File: ncNmr2zgsan2AXOxS1_d1-C5YwY.cer (raw, json) Hash identifier: LZXmlBXV8uTD6RL2EpxmIPqB6uNrRyhjOV1qRYDxYGs= Subject key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F151E2CE459096BE2BF61234E714399 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.253.4.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1e:2c:e4:59:09:6b:e2:bf:61:23:4e:71:43:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:40:01:4c:0d:f7:09:15:5d:f4:ee:d6:87: 39:23:54:3a:e6:9b:4e:b0:f7:2c:34:a4:db:03:ed: d4:88:f1:da:96:4a:c0:e1:df:fc:9e:74:84:0b:19: 50:11:c0:f7:b3:3e:ce:49:a4:a9:f9:d8:82:b3:84: ae:86:39:a3:a5:a2:73:45:f6:39:3d:57:39:52:14: 0d:e4:df:25:f4:ef:fd:82:c5:b7:ec:f4:37:5d:f9: ef:91:dd:d8:96:8f:4f:54:9c:c8:f5:62:44:6c:73: b7:59:4b:46:d6:c1:4c:97:26:50:b1:7e:98:3c:ff: 41:50:cb:ad:87:d8:6b:4c:06:f4:db:13:63:f1:04: 34:62:d3:bf:dc:81:47:51:b8:db:d0:6c:2d:9b:c5: 1a:4b:9a:e3:e3:fc:cb:b1:f4:dc:6d:46:af:f7:60: d5:a0:4f:57:57:ea:76:ff:bb:86:8d:fd:58:73:2b: 30:16:cf:5e:52:e5:ce:ce:5e:d6:06:3c:54:9f:a5: 1b:2d:43:66:d6:e4:16:29:d1:fb:a3:8a:53:7d:71: e6:e6:86:02:74:6b:2a:e4:12:76:a2:77:df:78:c1: 38:62:ef:22:37:bc:1d:a6:f9:d5:86:d0:bd:6e:72: 49:27:16:4e:ee:12:d1:ec:d9:37:30:a2:04:01:2f: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.4.0/22 Signature Algorithm: sha256WithRSAEncryption 88:2f:1f:35:ef:83:ff:b3:02:1d:25:df:84:98:2a:6f:1d:bd: a3:a6:72:b1:6b:ec:f5:c5:64:a8:1a:44:ef:fe:b7:24:10:af: 92:30:04:ba:3f:51:31:fd:c6:59:9f:c7:a2:26:69:1b:eb:29: 00:9d:a0:7f:d9:15:f9:74:3e:8a:1a:fd:b3:5a:6b:c8:5f:25: a8:84:6a:7c:a8:8f:44:59:8f:91:8c:1f:a3:80:35:32:70:e7: d4:5d:83:77:8c:6b:78:ce:d1:72:a8:73:52:e9:e2:d8:a7:e8: e9:18:28:2d:01:ca:3a:20:65:7c:25:a7:df:d7:23:5b:3e:96: c6:d9:5d:f8:83:dc:71:63:81:06:f8:f6:a3:fb:a9:f0:7c:b4: 15:58:aa:75:d4:80:e2:70:4e:d3:de:ca:f6:0a:1a:27:34:1c: ca:78:04:fb:08:18:52:e6:68:8a:e2:a9:4b:b1:7e:58:20:43: ec:bd:9f:0f:f5:67:c0:2b:89:b2:83:90:3e:9c:51:b8:b4:9c: b6:58:a6:3e:97:c2:0e:67:39:0a:a1:92:e3:cc:c6:86:e5:be: 84:94:00:91:c7:33:e3:c7:ac:bc:ff:12:fc:56:6b:92:98:f0: 86:f6:85:c2:98:9e:bb:ce:99:0d:85:d2:b9:f4:26:9e:0b:4a: 9e:f1:44:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FR4s5FkJa+K/YSNOcUOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGMzNjZhZjZjZTBiMWE5ZjYwMTczYjE0YjVmZGRkN2UwYjk2MzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAondAAUwN9wkVXfTu1oc5I1Q65ptO sPcsNKTbA+3UiPHalkrA4d/8nnSECxlQEcD3sz7OSaSp+diCs4SuhjmjpaJzRfY5 PVc5UhQN5N8l9O/9gsW37PQ3Xfnvkd3Ylo9PVJzI9WJEbHO3WUtG1sFMlyZQsX6Y PP9BUMuth9hrTAb02xNj8QQ0YtO/3IFHUbjb0Gwtm8UaS5rj4/zLsfTcbUav92DV oE9XV+p2/7uGjf1YcyswFs9eUuXOzl7WBjxUn6UbLUNm1uQWKdH7o4pTfXHm5oYC dGsq5BJ2onffeME4Yu8iN7wdpvnVhtC9bnJJJxZO7hLR7Nk3MKIEAS+K2QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ3DZq9s4LGp9gFzsUtf3dfguWMGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzc4OGZj Zi02MGYzLTQyNmYtOTg1OC04MmY0NzZiNWNmZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvNzg4ZmNm LTYwZjMtNDI2Zi05ODU4LTgyZjQ3NmI1Y2ZkYi8xL25jTm1yMnpnc2FuMkFYT3hT MV9kMS1DNVl3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCBf0EMA0GCSqGSIb3DQEBCwUAA4IBAQCILx81 74P/swIdJd+EmCpvHb2jpnKxa+z1xWSoGkTv/rckEK+SMAS6P1Ex/cZZn8eiJmkb 6ykAnaB/2RX5dD6KGv2zWmvIXyWohGp8qI9EWY+RjB+jgDUycOfUXYN3jGt4ztFy qHNS6eLYp+jpGCgtAco6IGV8Jaff1yNbPpbG2V34g9xxY4EG+Paj+6nwfLQVWKp1 1IDicE7T3sr2ChonNBzKeAT7CBhS5miK4qlLsX5YIEPsvZ8P9WfAK4myg5A+nFG4 tJy2WKY+l8IOZzkKoZLjzMaG5b6ElACRxzPjx6y8/xL8VmuSmPCG9oXCmJ67zpkN hdK59CaeC0qe8UQo -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:23 2026 by rpki-client