This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer File: nry_64-olzdHGKkQKkpwZx4qq_k.cer (raw, json) Hash identifier: ARnoPm0wmVWlfk5vxO5pCecy/Gn2HppXJfWplNvjG5c= Subject key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79106FDCDF92083F8F1D6A19D47E7A7F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20650 IP: 77.72.232.0/21 IP: 217.145.32.0/20 IP: 2a01:38::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:dc:df:92:08:3f:8f:1d:6a:19:d4:7e:7a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:ce:29:27:0e:46:6f:f7:87:1b:05:c4:fc: ea:16:a2:f6:8f:c5:53:49:31:6d:47:19:86:05:b8: c8:9a:27:b7:93:96:b4:d5:3e:35:90:01:c3:b1:77: 62:10:0c:31:2b:cb:a2:5c:a9:13:76:02:2e:de:98: fe:c9:cb:f4:c4:70:a4:07:6b:7e:2d:80:43:75:9c: 6f:c6:76:c8:75:f0:12:30:54:49:fb:30:e9:b4:3e: 0a:66:eb:f1:17:f7:98:65:c7:0b:f7:e7:4e:05:6f: 7a:4e:23:cb:b0:0a:e7:a2:5d:f4:ce:68:7f:06:a9: a4:e2:b1:a8:72:82:ee:6e:c6:68:68:c8:3e:5c:b3: 11:48:01:e5:f6:47:7a:59:a8:4d:9d:1c:c7:17:57: 31:76:80:51:bd:1f:97:b6:cf:7e:c7:f8:f1:91:14: 5f:72:53:88:22:fa:b4:af:6a:df:cf:33:95:48:3b: f4:ec:78:e5:4d:e4:a3:74:83:8f:7f:75:17:22:27: 99:62:a8:ba:68:7f:56:ad:e6:0e:82:98:20:cb:ce: e4:0b:45:6d:4e:8b:c6:d7:09:31:fb:a6:f2:04:ae: 47:0a:20:90:99:77:f9:1b:6c:76:75:16:1d:a2:57: 76:d9:f2:1c:92:ca:80:3b:77:d5:5a:c4:46:cc:a6: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.232.0/21 217.145.32.0/20 IPv6: 2a01:38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20650 Signature Algorithm: sha256WithRSAEncryption 6f:9f:3b:b5:d8:d4:19:a9:12:a6:ef:11:60:63:c7:8e:11:72: 4a:bd:0d:57:0a:77:e2:7b:0c:e8:c3:92:66:73:ce:ff:f2:b5: e8:47:42:bf:c6:da:b1:76:f5:c3:ba:52:08:60:43:50:2d:cc: 15:fb:ce:be:13:e9:5f:ed:d1:5a:97:02:b4:0e:f5:22:bf:10: e5:ec:46:54:2b:f4:90:72:b4:93:42:19:68:fd:b8:56:ce:e0: d0:db:b7:2b:61:ba:2c:93:47:01:b0:16:2e:bc:96:eb:28:59: 8e:f0:14:d0:b8:e4:5d:48:37:c7:66:73:be:97:fc:2e:cb:75: 73:cf:cc:3a:7c:83:61:ed:e7:a9:6d:ec:f8:18:c1:d7:aa:0d: 05:3b:72:b3:ed:c2:56:71:ea:e2:3d:f7:8a:26:af:3e:01:4f: 1e:73:e0:d9:74:0a:f2:7f:24:7d:cb:96:06:93:35:02:f0:be: 4b:b3:b8:38:95:c4:b6:7e:0a:b1:1d:b4:77:91:bf:d3:e0:6b: 24:01:5f:6d:6f:c4:66:28:d7:8b:ff:93:46:d7:b9:90:11:0d: 8e:01:db:2d:bb:02:d7:e5:1b:bd:af:b3:25:83:e0:90:55:71: ca:e8:64:e2:2d:4a:07:d5:36:24:14:12:3c:51:da:20:97:7b: eb:05:d2:19 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5EG/c35IIP48dahnUfnp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWJjYmZlYjhmYTg5NzM3NDcxOGE5MTAyYTRhNzA2NzFlMmFhYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBDOKScORm/3hxsFxPzqFqL2j8VT STFtRxmGBbjImie3k5a01T41kAHDsXdiEAwxK8uiXKkTdgIu3pj+ycv0xHCkB2t+ LYBDdZxvxnbIdfASMFRJ+zDptD4KZuvxF/eYZccL9+dOBW96TiPLsArnol30zmh/ Bqmk4rGocoLubsZoaMg+XLMRSAHl9kd6WahNnRzHF1cxdoBRvR+Xts9+x/jxkRRf clOIIvq0r2rfzzOVSDv07HjlTeSjdIOPf3UXIieZYqi6aH9WreYOgpggy87kC0Vt TovG1wkx+6byBK5HCiCQmXf5G2x2dRYdold22fIcksqAO3fVWsRGzKaBLwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFJ68v+uPqJc3RxipECpKcGceKqv5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzEzOGNl My1mMzhmLTQzZTktOGRjOS05Y2QwY2FlMDYyOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMTM4Y2Uz LWYzOGYtNDNlOS04ZGM5LTljZDBjYWUwNjI5Mi8xL25yeV82NC1vbHpkSEdLa1FL a3B3Wng0cXFfay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDTUjoAwQE2ZEgMA0EAgACMAcDBQAqAQA4MBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAlCqMA0GCSqGSIb3DQEBCwUAA4IBAQBvnzu1 2NQZqRKm7xFgY8eOEXJKvQ1XCnfiewzow5Jmc87/8rXoR0K/xtqxdvXDulIIYENQ LcwV+86+E+lf7dFalwK0DvUivxDl7EZUK/SQcrSTQhlo/bhWzuDQ27crYbosk0cB sBYuvJbrKFmO8BTQuORdSDfHZnO+l/wuy3Vzz8w6fINh7eepbez4GMHXqg0FO3Kz 7cJWceriPfeKJq8+AU8ec+DZdAryfyR9y5YGkzUC8L5Ls7g4lcS2fgqxHbR3kb/T 4GskAV9tb8RmKNeL/5NG17mQEQ2OAdstuwLX5Ru9r7Mlg+CQVXHK6GTiLUoH1TYk FBI8Udogl3vrBdIZ -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:21 2026 by rpki-client