This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer File: nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer (raw, json) Hash identifier: PswwfaJRFwgaKH6kWtrnBaj8zKb1rqOtDEqXEX1FS4k= Subject key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36D2C2BBFC82772C53D60497567E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5464 IP: 62.112.128.0/19 IP: 109.95.240.0/21 IP: 185.2.160.0/22 IP: 193.37.236.0/24 IP: 194.0.229.0/24 IP: 195.184.92.0/23 IP: 2001:67c:33c::/48 IP: 2a00:1df0::/32 IP: 2a02:d000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6d:2c:2b:bf:c8:27:72:c5:3d:60:49:75:67:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1f:bc:4c:2e:63:9b:20:9e:d1:02:5f:fd:77: 40:8f:34:ac:5c:5a:48:b2:5c:9c:7f:68:5b:80:18: 94:5a:0f:2c:24:44:f0:bc:ad:54:d1:4d:92:45:e7: 3f:64:87:b3:e2:1e:8c:bb:3f:70:45:04:4b:62:7a: 07:41:5f:9f:96:fc:e7:8c:22:a3:83:bb:fa:03:a3: 33:6b:09:9e:96:65:92:09:3a:59:64:1c:98:05:29: 41:71:bf:89:ea:6e:95:62:c3:bc:f3:59:f4:22:55: 9a:0c:0c:68:46:30:42:ea:ac:fc:b0:d5:72:16:8f: 44:f6:ee:fa:c4:64:f3:f1:1e:54:cc:ad:5d:f4:1c: 46:b5:17:e9:ec:6d:bf:77:8d:f6:00:36:77:2c:c7: 49:eb:00:2f:0d:4d:00:96:f6:36:da:6d:2c:25:88: 8a:c3:3a:10:99:93:06:1f:68:31:a9:5e:ed:e2:38: 1b:de:c5:6d:18:24:76:f0:fe:44:9e:82:fb:82:35: 25:ea:9c:a5:5e:25:4f:c0:df:11:37:69:3f:92:fa: 7b:e0:9f:29:3a:d2:79:73:22:6c:1c:50:e0:af:6b: 4e:36:65:cd:54:b0:2b:95:ec:7f:da:ef:9d:17:bf: 40:1a:26:b6:d0:64:08:d9:a5:72:88:b2:a1:67:5f: 88:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.128.0/19 109.95.240.0/21 185.2.160.0/22 193.37.236.0/24 194.0.229.0/24 195.184.92.0/23 IPv6: 2001:67c:33c::/48 2a00:1df0::/32 2a02:d000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5464 Signature Algorithm: sha256WithRSAEncryption 4b:1c:47:57:24:54:59:36:26:88:14:42:49:03:49:cb:a3:55: 98:57:18:a6:6f:4c:24:93:33:90:57:aa:dd:df:45:24:f1:ed: 96:4e:fb:2d:56:00:3c:02:2d:b0:51:bd:15:56:f8:e5:e5:fb: 36:96:69:9f:6f:9a:b9:ce:13:68:44:98:23:8c:35:f4:40:9b: 9e:24:0e:bc:75:6c:a3:67:b3:e8:bb:5e:18:07:d2:15:de:2a: a2:43:7e:fc:77:56:ef:5a:1b:90:6b:17:82:60:00:a0:a2:a6: ef:05:b0:b3:d4:a8:64:cf:13:34:cf:f4:ff:6c:8e:12:16:b8: 75:89:d2:fb:a7:9e:09:f8:da:1d:df:ea:f4:e9:b0:75:c8:7c: cb:aa:af:c1:50:21:94:df:b7:95:4a:35:65:64:98:aa:bf:5d: cf:69:9f:57:db:61:7d:27:45:c6:6f:35:12:a6:21:ea:54:b5: 84:81:46:e8:b2:cb:7d:98:8e:49:bf:f3:06:3b:fa:81:04:da: 98:1e:8d:da:3c:34:12:3b:63:d1:3c:5c:fd:31:d7:56:01:79: 8d:38:83:36:6d:74:35:1e:34:37:f0:8f:d8:fb:bc:78:c7:76: ab:9a:9e:15:aa:81:36:62:ee:a1:53:3d:c1:f9:ba:c9:f1:75: 0d:4d:31:bb -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgISAZt4o20sK7/IJ3LFPWBJdWfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjBkMjRjODU1ZWVlMDBmZTRhYmYzOTAzYzZlOGZjYzcwODNlZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh+8TC5jmyCe0QJf/XdAjzSsXFpI slycf2hbgBiUWg8sJETwvK1U0U2SRec/ZIez4h6Muz9wRQRLYnoHQV+flvznjCKj g7v6A6MzawmelmWSCTpZZByYBSlBcb+J6m6VYsO881n0IlWaDAxoRjBC6qz8sNVy Fo9E9u76xGTz8R5UzK1d9BxGtRfp7G2/d432ADZ3LMdJ6wAvDU0AlvY22m0sJYiK wzoQmZMGH2gxqV7t4jgb3sVtGCR28P5EnoL7gjUl6pylXiVPwN8RN2k/kvp74J8p OtJ5cyJsHFDgr2tONmXNVLArlex/2u+dF79AGia20GQI2aVyiLKhZ1+ImQIDAQAB o4IC+DCCAvQwHQYDVR0OBBYEFJ8NJMhV7uAP5KvzkDxuj8xwg+1NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FmMzE3 NjhkLTQyYjEtNGU5Mi1iODNmLWJlZjdlZTAxNzgxMy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYz MTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvOUYwRDI0Qzg1NUVF RTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBcBggrBgEFBQcBBwEB/wRNMEswKgQCAAEwJAME BT5wgAMEA21f8AMEArkCoAMEAMEl7AMEAMIA5QMEAcO4XDAdBAIAAjAXAwcAIAEG fAM8AwUAKgAd8AMFAyoC0AAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICFVgwDQYJ KoZIhvcNAQELBQADggEBAEscR1ckVFk2JogUQkkDScujVZhXGKZvTCSTM5BXqt3f RSTx7ZZO+y1WADwCLbBRvRVW+OXl+zaWaZ9vmrnOE2hEmCOMNfRAm54kDrx1bKNn s+i7XhgH0hXeKqJDfvx3Vu9aG5BrF4JgAKCipu8FsLPUqGTPEzTP9P9sjhIWuHWJ 0vunngn42h3f6vTpsHXIfMuqr8FQIZTft5VKNWVkmKq/Xc9pn1fbYX0nRcZvNRKm IepUtYSBRuiyy32Yjkm/8wY7+oEE2pgejdo8NBI7Y9E8XP0x11YBeY04gzZtdDUe NDfwj9j7vHjHdquanhWqgTZi7qFTPcH5usnxdQ1NMbs= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:29 2026 by rpki-client