This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer File: nu5GafwIpNQzdQkRBhOGKzFPGsc.cer (raw, json) Hash identifier: hU3ZQ46cvWkNhyWVi6NUCrbLlLFPyTerhq4Qu9Eln2M= Subject key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED4F3A9C2783BE414C2A4CB62A7BD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60475 IP: 37.202.16.0/21 IP: 45.10.84.0/22 IP: 185.241.200.0/22 IP: 2a02:ff00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:3a:9c:27:83:be:41:4c:2a:4c:b6:2a:7b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eee4669fc08a4d4337509110613862b314f1ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:6f:8b:c6:90:88:43:0f:22:92:98:6a:79: c6:49:01:0e:0c:a4:c2:dc:b9:8c:da:be:76:51:78: bc:2a:56:5f:ff:d7:5f:21:6d:0e:4a:a7:fd:d1:e5: 14:5f:ee:ca:98:4e:b1:3b:97:1d:83:9b:86:ae:bf: 13:d5:84:40:1b:2b:f6:5b:ac:79:03:a5:fa:3e:63: 4c:a7:92:a1:72:f3:fb:85:9f:3e:24:0c:72:a1:b2: e7:dd:33:db:de:69:68:ce:37:77:2c:fb:ab:14:53: 70:b0:4b:24:a0:38:61:21:91:51:ff:3f:67:25:96: df:2f:58:2d:53:54:a3:66:17:f1:0a:ab:55:11:26: ff:66:56:03:81:42:d2:c5:f4:6e:2d:a4:27:34:fc: 95:d6:3e:9b:dd:35:40:fb:2b:d0:23:1c:2f:83:f6: 6c:3e:2d:d7:0d:db:d5:e7:01:ac:91:ff:2f:e4:3c: 9d:66:94:86:16:82:87:b1:fa:c5:3a:43:e5:fa:32: 7d:c8:e2:be:99:f7:35:37:ee:26:b9:1a:0c:19:ac: ff:dc:fc:c4:cf:de:59:5b:4e:02:c7:a0:ae:6d:b9: 99:44:c1:cf:58:36:8d:22:6d:87:d7:75:7d:a8:1b: 5d:2c:65:d9:1a:17:d1:3a:91:da:52:e0:d4:c4:a4: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.16.0/21 45.10.84.0/22 185.241.200.0/22 IPv6: 2a02:ff00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60475 Signature Algorithm: sha256WithRSAEncryption 4c:15:a2:e9:9b:f8:96:58:7d:42:94:25:96:0e:f2:92:98:1e: ff:a0:14:d7:74:b2:2f:be:ef:bf:54:df:66:96:04:75:f3:00: 76:30:2a:99:a0:21:0f:2a:2b:a6:10:ae:5c:99:fd:a9:2a:76: ab:9c:de:df:79:ae:28:52:09:63:d8:a3:86:7a:7e:fe:44:74: 65:de:ca:a7:06:1b:5d:3e:df:0a:dc:57:a4:ec:8e:6e:2f:fa: d4:ef:23:aa:fc:46:24:b6:3b:04:77:fb:4b:b3:7a:d7:05:77: fb:5d:37:cf:41:02:91:f1:fe:97:6c:9b:6c:5d:39:e8:67:76: 9b:44:c3:ad:05:8c:83:0a:b6:6c:84:92:b3:18:f2:75:41:58: 11:9a:ce:db:81:2c:d1:74:85:62:01:6c:84:e6:7a:18:32:b2: ab:00:69:3f:e1:a2:5a:e5:38:71:d7:f4:c3:84:1e:1b:2e:ac: 6d:f7:32:8a:3f:72:90:60:28:5d:b4:98:aa:3d:4f:37:32:e4: 0a:c7:0c:38:9f:a5:e4:2a:d7:e5:db:3f:b7:56:33:4f:58:41: bb:26:bd:e8:11:98:4f:e2:98:a1:f3:e7:a6:c7:c4:ff:07:8c: 6f:0c:53:9c:a5:b7:27:9f:b3:04:1c:95:db:10:3a:14:ee:31: f6:25:36:f6 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt57U86nCeDvkFMKky2KnvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWVlNDY2OWZjMDhhNGQ0MzM3NTA5MTEwNjEzODYyYjMxNGYxYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntZvi8aQiEMPIpKYannGSQEODKTC 3LmM2r52UXi8KlZf/9dfIW0OSqf90eUUX+7KmE6xO5cdg5uGrr8T1YRAGyv2W6x5 A6X6PmNMp5KhcvP7hZ8+JAxyobLn3TPb3mlozjd3LPurFFNwsEskoDhhIZFR/z9n JZbfL1gtU1SjZhfxCqtVESb/ZlYDgULSxfRuLaQnNPyV1j6b3TVA+yvQIxwvg/Zs Pi3XDdvV5wGskf8v5DydZpSGFoKHsfrFOkPl+jJ9yOK+mfc1N+4muRoMGaz/3PzE z95ZW04Cx6CubbmZRMHPWDaNIm2H13V9qBtdLGXZGhfROpHaUuDUxKS8rQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFJ7uRmn8CKTUM3UJEQYThisxTxrHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2I5NDY3 Yy04NGFmLTQ5M2EtOWRiOS00ZGQ1OWM3YzYzMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYjk0Njdj LTg0YWYtNDkzYS05ZGI5LTRkZDU5YzdjNjMwNS8xL251NUdhZndJcE5RemRRa1JC aE9HS3pGUEdzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJcoQAwQCLQpUAwQCufHIMA0EAgACMAcDBQMq Av8AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsOzANBgkqhkiG9w0BAQsFAAOC AQEATBWi6Zv4llh9QpQllg7ykpge/6AU13SyL77vv1TfZpYEdfMAdjAqmaAhDyor phCuXJn9qSp2q5ze33muKFIJY9ijhnp+/kR0Zd7KpwYbXT7fCtxXpOyObi/61O8j qvxGJLY7BHf7S7N61wV3+103z0ECkfH+l2ybbF056Gd2m0TDrQWMgwq2bISSsxjy dUFYEZrO24Es0XSFYgFshOZ6GDKyqwBpP+GiWuU4cdf0w4QeGy6sbfcyij9ykGAo XbSYqj1PNzLkCscMOJ+l5CrX5ds/t1YzT1hBuya96BGYT+KYofPnpsfE/weMbwxT nKW3J5+zBByV2xA6FO4x9iU29g== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:00 2026 by rpki-client