This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer File: njUz1mLD8Na7HmkvP6tte6OCTCg.cer (raw, json) Hash identifier: 8BgjzMkeBML2hLoYjKeD3eK4N9fueUH0LYbR+brUIlI= Subject key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37C5EEE50DF3A1ADD4FF0A94FCF4EB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.34.48.0/22 IP: 195.13.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c5:ee:e5:0d:f3:a1:ad:d4:ff:0a:94:fc:f4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:f1:63:79:54:a9:f7:69:4b:24:00:53:f3: 25:2f:67:0b:9f:f3:db:cb:6f:2b:a0:c5:51:9d:06: 49:2c:91:54:3f:f5:65:6a:13:b7:21:6e:f1:96:6c: ee:e4:e9:3b:01:11:7a:c4:a4:e5:28:a1:db:75:2f: b5:bf:f2:dd:d1:85:86:9a:23:57:17:75:da:e3:a1: 4f:df:3d:95:89:b1:44:f2:a0:9e:19:eb:d5:bc:99: eb:5c:14:aa:05:a1:34:04:9b:40:af:22:22:27:56: 96:11:13:35:ee:9c:5b:d2:64:5e:3e:42:d8:a0:4b: a2:f9:b8:d1:ca:7d:a6:09:8d:42:ee:10:8e:6f:98: 4f:08:85:68:fe:bf:fc:60:20:46:64:20:46:b0:f4: 1a:83:21:cc:3e:d5:a9:30:c1:09:c3:a7:bb:24:19: 2d:04:94:4f:57:2c:b0:1f:97:f9:56:76:32:cc:c1: 46:30:67:75:a9:b1:04:07:ac:63:35:ac:00:1a:33: fa:00:f9:ce:f1:37:8a:83:0c:c7:17:a6:05:aa:ff: 81:8d:f3:75:01:82:ce:43:f7:d2:a2:84:61:ab:ae: c3:5b:8a:c8:4a:fb:04:29:4e:68:e8:df:23:27:a3: 61:73:1c:be:52:b4:20:9c:3e:53:fe:39:ab:29:8b: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.48.0/22 195.13.60.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:33:97:58:3e:c2:79:f3:66:c1:93:37:53:b1:22:e3:10:80: de:28:b3:e2:2b:ce:23:ae:ab:b0:33:10:b6:1b:92:00:b1:93: 2e:9b:f2:33:57:9e:2d:1b:13:ec:e0:d2:ba:a2:c4:0e:62:dd: 1c:1b:0a:cb:da:3e:81:27:5b:4e:81:a1:fb:b8:08:0c:9d:2a: 02:d9:3b:a0:8a:a8:8e:3e:80:f8:04:1c:69:fe:4b:0d:62:7c: 02:54:06:21:39:bb:c0:3b:1a:e9:de:04:27:1c:7e:4f:45:ef: 25:38:d9:fd:6e:26:eb:e2:70:02:23:52:30:7a:12:c3:a9:52: 49:19:1f:f7:8a:69:4a:6c:70:a6:93:fc:e4:11:64:8c:1c:3a: 81:22:88:59:88:67:3b:ef:88:46:3f:17:2e:e0:06:f5:a7:c2: 32:38:18:f2:cd:81:15:e7:93:a0:e4:63:0d:f0:7e:c1:cb:36: 23:8b:c2:a9:82:5c:02:b1:48:e9:21:92:c2:69:88:01:35:b3: 4c:07:26:fc:39:f5:0e:d1:72:39:ac:04:c0:95:98:8f:2d:fe: 52:09:1e:6d:e7:94:94:84:a9:bc:85:cf:13:42:b7:28:57:ad: 26:3c:5f:8f:46:b5:1f:34:9b:2a:19:d6:23:6d:3a:f3:ae:69: db:12:eb:2f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt+N8Xu5Q3zoa3U/wqU/PTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTM1MzNkNjYyYzNmMGQ2YmIxZTY5MmYzZmFiNmQ3YmEzODI0YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkDxY3lUqfdpSyQAU/MlL2cLn/Pb y28roMVRnQZJLJFUP/VlahO3IW7xlmzu5Ok7ARF6xKTlKKHbdS+1v/Ld0YWGmiNX F3Xa46FP3z2VibFE8qCeGevVvJnrXBSqBaE0BJtAryIiJ1aWERM17pxb0mRePkLY oEui+bjRyn2mCY1C7hCOb5hPCIVo/r/8YCBGZCBGsPQagyHMPtWpMMEJw6e7JBkt BJRPVyywH5f5VnYyzMFGMGd1qbEEB6xjNawAGjP6APnO8TeKgwzHF6YFqv+BjfN1 AYLOQ/fSooRhq67DW4rISvsEKU5o6N8jJ6Nhcxy+UrQgnD5T/jmrKYuF5QIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFJ41M9Ziw/DWux5pLz+rbXujgkwoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlL2JlYmU2 ZC0xNmIzLTRiMDItYjIwNS1hNzgzNDEzMDk5ZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvYmViZTZk LTE2YjMtNGIwMi1iMjA1LWE3ODM0MTMwOTlkMy8xL25qVXoxbUxEOE5hN0hta3ZQ NnR0ZTZPQ1RDZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCwSIwAwQCww08MA0GCSqGSIb3DQEBCwUAA4IB AQAqM5dYPsJ582bBkzdTsSLjEIDeKLPiK84jrquwMxC2G5IAsZMum/IzV54tGxPs 4NK6osQOYt0cGwrL2j6BJ1tOgaH7uAgMnSoC2TugiqiOPoD4BBxp/ksNYnwCVAYh ObvAOxrp3gQnHH5PRe8lONn9bibr4nACI1IwehLDqVJJGR/3imlKbHCmk/zkEWSM HDqBIohZiGc774hGPxcu4Ab1p8IyOBjyzYEV55Og5GMN8H7ByzYji8KpglwCsUjp IZLCaYgBNbNMByb8OfUO0XI5rATAlZiPLf5SCR5t55SUhKm8hc8TQrcoV60mPF+P RrUfNJsqGdYjbTrzrmnbEusv -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:25 2026 by rpki-client