This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer (raw, json) Hash identifier: Fo+7scVjbaS+cQwRzBWNs4gkgNSKwUsbOlUKNAZPKlc= Subject key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA38DA34D495F458222BD70C6C9D8DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.84.116.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8d:a3:4d:49:5f:45:82:22:bd:70:c6:c9:d8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:02:5e:2e:dd:03:6e:bb:77:3c:14:c8:ff: ab:73:c5:e1:a9:9b:aa:3a:fb:6b:60:5b:6a:ee:de: 90:d1:b5:51:2e:ff:c1:48:03:1f:48:6c:ad:e4:fa: e3:0d:75:1b:08:2b:58:be:53:68:ac:6b:81:8c:91: b4:24:f9:0b:0c:4a:c1:c9:0e:65:cb:a7:9a:17:03: 62:33:5d:76:f3:5f:22:2c:0b:61:f5:0e:a2:78:20: df:31:da:f2:0e:a4:7b:2e:ef:b2:73:73:58:52:d7: 22:60:e2:5f:06:ec:cb:7a:27:e0:f2:a7:1c:5c:4c: 13:15:f6:03:de:f6:e7:bd:e5:32:80:56:e7:a1:b7: 30:24:c5:64:c9:73:76:0b:ac:c7:f3:2c:4a:29:8c: 98:2e:54:f4:58:e8:8e:68:7c:10:17:90:e4:b2:0f: 32:cc:b4:7f:77:d1:5f:9c:bc:e8:7c:f8:e3:ae:08: 26:b7:ad:2b:04:8d:05:20:a9:5c:d0:42:7b:42:2e: ea:fa:28:90:71:41:b9:60:a8:91:93:4b:c4:72:a9: 00:1a:27:0b:56:57:f5:27:81:2d:7f:42:3b:6d:99: fe:df:f1:c0:27:6b:97:f3:93:7e:fa:e7:5d:d2:73: 32:81:36:f9:cf:56:46:2b:4d:38:e3:6b:94:8d:d8: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.116.0/23 Signature Algorithm: sha256WithRSAEncryption 20:7c:88:9f:62:f6:3c:0f:a4:02:92:b4:b6:b4:78:84:2b:d8: 9a:3c:61:74:f1:74:a4:81:0a:10:9e:c0:a7:3d:97:35:9b:a9: 1f:f2:ab:d4:aa:2b:dc:5d:b2:52:48:a5:56:ec:61:3f:d5:6e: 08:80:31:b3:01:0a:f3:27:51:6e:c1:d7:d4:51:06:15:4f:ef: 43:66:c4:83:94:36:1f:9b:7d:1d:9e:6b:81:d7:90:89:75:8b: ad:88:0d:cd:b8:ee:68:ee:f9:5f:20:17:d0:25:68:e4:ea:89: 25:79:36:19:27:78:e3:a1:f3:c9:15:47:2e:2e:fe:6d:8a:eb: 01:6c:65:f2:2e:69:65:78:ce:f8:cb:75:32:c5:94:80:f5:a2: 06:25:4c:f1:b9:73:91:aa:45:09:86:89:08:f4:86:a6:e0:09: 08:09:a1:60:11:b7:56:e6:9a:ea:3d:e3:3e:80:25:f1:fe:90: 15:3c:19:6e:da:4a:3c:9f:86:fc:e5:68:97:20:6b:bd:a8:e4: 37:cb:fc:cd:e9:d9:0b:bc:03:b7:4f:6b:c8:86:91:0b:a6:e8: 0b:df:12:29:08:c3:46:a2:2c:6d:46:3c:bc:05:f5:07:16:72: 76:0b:da:ee:1f:9b:ae:7c:03:72:ae:23:c3:00:d7:ef:1a:08: 59:2a:e1:7e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7o42jTUlfRYIivXDGydjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTc0MTM1YmIwN2M2NTQwY2QzMDdiZGEwOGNhMDY3NGJjODRjOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzQCXi7dA267dzwUyP+rc8XhqZuq OvtrYFtq7t6Q0bVRLv/BSAMfSGyt5PrjDXUbCCtYvlNorGuBjJG0JPkLDErByQ5l y6eaFwNiM112818iLAth9Q6ieCDfMdryDqR7Lu+yc3NYUtciYOJfBuzLeifg8qcc XEwTFfYD3vbnveUygFbnobcwJMVkyXN2C6zH8yxKKYyYLlT0WOiOaHwQF5Dksg8y zLR/d9FfnLzofPjjrggmt60rBI0FIKlc0EJ7Qi7q+iiQcUG5YKiRk0vEcqkAGicL Vlf1J4Etf0I7bZn+3/HAJ2uX85N++udd0nMygTb5z1ZGK00442uUjdgfqwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ50E1uwfGVAzTB72gjKBnS8hMk5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzVlNzhm Ni0yNTNhLTQxMTUtYWU1ZC01ZGM4MGZhZWQyZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvNWU3OGY2 LTI1M2EtNDExNS1hZTVkLTVkYzgwZmFlZDJkYy8xL25uUVRXN0I4WlVETk1IdmFD TW9HZEx5RXlUay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwVR0MA0GCSqGSIb3DQEBCwUAA4IBAQAgfIif YvY8D6QCkrS2tHiEK9iaPGF08XSkgQoQnsCnPZc1m6kf8qvUqivcXbJSSKVW7GE/ 1W4IgDGzAQrzJ1FuwdfUUQYVT+9DZsSDlDYfm30dnmuB15CJdYutiA3NuO5o7vlf IBfQJWjk6okleTYZJ3jjofPJFUcuLv5tiusBbGXyLmlleM74y3UyxZSA9aIGJUzx uXORqkUJhokI9Iam4AkICaFgEbdW5prqPeM+gCXx/pAVPBlu2ko8n4b85WiXIGu9 qOQ3y/zN6dkLvAO3T2vIhpELpugL3xIpCMNGoixtRjy8BfUHFnJ2C9ruH5uufANy riPDANfvGghZKuF+ -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:46 2026 by rpki-client