This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer (raw, json) Hash identifier: dAg5BIozaFJHcryDGlHvt6WshgGDeCvpNYrTTybHhRY= Subject key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F820B0FBA802E886BDCC8D6FF6E9D4B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208342 IP: 45.13.12.0/22 IP: 2a0e:cf00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:0b:0f:ba:80:2e:88:6b:dc:c8:d6:ff:6e:9d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e42ca46688a837b575234ce6a1a326587d6c204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:68:90:af:83:67:71:dd:93:59:c2:c6:b1: 83:a3:81:4a:97:43:b2:03:7b:49:e0:38:f4:65:33: 6f:c1:a1:b0:6c:f4:7a:37:2f:13:7d:c1:23:f9:28: 26:66:d8:11:a4:fe:ec:7f:13:6b:47:eb:f5:bf:79: 0a:d4:8c:9b:c8:83:a8:10:a6:ec:de:fc:91:4e:07: f5:c1:39:3f:b2:25:3b:b4:0a:65:3b:9b:d6:12:6b: 6a:9a:23:ac:1b:d1:31:e2:f1:70:03:74:a2:ac:a8: 13:23:a1:53:c0:bb:e9:9d:d2:c5:99:4c:37:f2:b3: 80:4e:6f:7f:ca:c7:fc:6d:e8:a0:98:49:3a:f8:90: 04:c7:43:93:6a:77:ee:9e:24:18:52:9b:7d:9d:c7: 90:f3:73:0d:34:f2:66:1f:d0:70:c8:b3:4f:48:d4: 1f:01:5b:52:e6:d2:8c:15:eb:61:b7:6e:61:02:22: 5b:2f:ad:d7:a9:69:63:76:8d:8f:fc:24:65:61:d4: 91:ba:65:07:82:d1:99:e3:9d:89:3a:87:1e:3d:9c: 54:e7:98:27:29:60:43:d4:b3:d7:69:b3:13:34:57: 61:e0:c6:0a:f4:bc:24:d9:76:65:a9:d7:4a:14:8e: 2a:5a:65:0f:26:3b:c6:0b:9d:24:76:cf:50:99:6e: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.12.0/22 IPv6: 2a0e:cf00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208342 Signature Algorithm: sha256WithRSAEncryption 7a:c8:8b:e1:ae:d2:24:6d:21:9a:57:c3:2f:4f:3b:95:3f:4c: ea:31:b0:1e:e0:bc:58:57:80:cc:31:f3:fe:7a:51:08:dd:1f: 86:62:1f:91:78:33:23:3d:10:ee:55:10:3c:a8:46:8f:1d:1c: 81:a4:ca:0a:5e:b0:9f:d2:ad:86:39:8b:03:6d:97:7c:cf:eb: ae:59:2f:27:e6:f2:6a:08:63:d9:9b:68:b1:fe:80:71:07:a6: 03:f5:4f:9c:c7:cd:48:dc:19:83:8d:e1:16:92:96:4d:94:65: eb:ca:61:ce:2f:dc:fc:aa:90:d2:65:bd:56:96:8c:7c:9c:e7: 1e:54:60:85:5d:ba:31:60:ec:6f:27:3d:96:fe:bb:0a:fd:5b: 35:cc:38:93:e5:cc:ea:4a:c6:16:33:ff:ce:a3:df:1b:69:9c: d8:a2:bf:d5:90:3a:8f:af:66:78:2f:6e:a8:bd:02:bc:34:1b: 47:43:1c:d6:80:cb:1b:3d:08:f2:48:2d:af:7d:54:96:e3:e1: a8:e7:0b:cc:19:78:89:61:eb:0d:cf:c0:c9:0e:61:33:f8:80: e8:32:1c:71:cd:a1:f5:87:2c:f4:ae:b9:75:5e:e2:92:9e:44: 3b:3f:7e:d0:c9:07:06:4d:c9:5d:d4:ac:7f:0f:12:ae:b0:18: e8:06:fa:1e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/ggsPuoAuiGvcyNb/bp1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQyY2E0NjY4OGE4MzdiNTc1MjM0Y2U2YTFhMzI2NTg3ZDZjMjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT1okK+DZ3Hdk1nCxrGDo4FKl0Oy A3tJ4Dj0ZTNvwaGwbPR6Ny8TfcEj+SgmZtgRpP7sfxNrR+v1v3kK1IybyIOoEKbs 3vyRTgf1wTk/siU7tAplO5vWEmtqmiOsG9Ex4vFwA3SirKgTI6FTwLvpndLFmUw3 8rOATm9/ysf8beigmEk6+JAEx0OTanfuniQYUpt9nceQ83MNNPJmH9BwyLNPSNQf AVtS5tKMFetht25hAiJbL63XqWljdo2P/CRlYdSRumUHgtGZ452JOocePZxU55gn KWBD1LPXabMTNFdh4MYK9Lwk2XZlqddKFI4qWmUPJjvGC50kds9QmW7EQQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJ5CykZoioN7V1I0zmoaMmWH1sIEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2VlMjc5 My1hMGM5LTQyZGMtYTZhMi0zMjliYTM4OGI3Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvZWUyNzkz LWEwYzktNDJkYy1hNmEyLTMyOWJhMzg4YjdjZi8xL25rTEtSbWlLZzN0WFVqVE9h aG95WllmV3dnUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQ0MMA0EAgACMAcDBQMqDs8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMt1jANBgkqhkiG9w0BAQsFAAOCAQEAesiL4a7SJG0h mlfDL087lT9M6jGwHuC8WFeAzDHz/npRCN0fhmIfkXgzIz0Q7lUQPKhGjx0cgaTK Cl6wn9KthjmLA22XfM/rrlkvJ+byaghj2Ztosf6AcQemA/VPnMfNSNwZg43hFpKW TZRl68phzi/c/KqQ0mW9VpaMfJznHlRghV26MWDsbyc9lv67Cv1bNcw4k+XM6krG FjP/zqPfG2mc2KK/1ZA6j69meC9uqL0CvDQbR0Mc1oDLGz0I8kgtr31UluPhqOcL zBl4iWHrDc/AyQ5hM/iA6DIccc2h9Ycs9K65dV7ikp5EOz9+0MkHBk3JXdSsfw8S rrAY6Ab6Hg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:29 2026 by rpki-client