This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer File: nxvZcy5s3W50lNeRh_yoVbUZmQk.cer (raw, json) Hash identifier: 4OQmoitkO4qlf+7umDsqpHBxbf0Lw4uKzqL2IkVMMk8= Subject key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B229E1DCCF6060BD92E88760236F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49945 IP: 193.33.130.0/23 IP: 193.33.136.0/23 IP: 2a0f:ad80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b2:29:e1:dc:cf:60:60:bd:92:e8:87:60:23:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:eb:e0:8b:75:e6:27:b7:ed:d5:01:ab:76: 70:43:52:ae:b2:c5:87:03:fa:0f:bf:0d:dd:ad:40: 10:22:69:2f:ee:91:e3:ae:70:4b:00:11:8b:31:e2: 4b:59:f2:11:16:f5:4a:6a:22:a1:c7:e3:7e:6b:1f: be:b8:fe:51:3e:e4:b9:bd:b9:95:1c:cb:63:28:f7: 91:72:77:f6:d0:dd:e0:4d:b3:70:d1:35:02:68:8b: 55:79:d2:39:3c:41:60:37:7b:2b:be:23:f0:16:6f: 22:d5:02:05:f5:c7:2d:bc:b8:2c:ab:52:b2:58:83: 05:c9:c0:51:01:10:a7:d8:2f:f2:11:17:4e:f5:61: ce:fa:77:dd:25:c8:5c:7d:1d:b0:9f:40:e9:7e:16: fc:58:87:f8:df:64:d7:8a:7a:97:ca:7b:7a:37:dc: b6:c5:06:fc:ca:51:27:4d:91:73:72:a9:30:c0:70: 39:11:02:19:f5:b8:3b:95:a6:54:1b:8e:8e:b0:2e: a7:7d:5d:69:e2:a2:df:2b:df:1d:7a:46:14:a6:69: 11:0e:88:c3:8e:e7:e3:74:bb:53:ef:5d:c8:c6:f1: 29:91:49:c7:82:a2:5b:49:0b:17:ea:0e:59:79:16: 13:ca:c2:32:b3:08:07:67:8b:46:64:6d:29:94:a2: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.130.0/23 193.33.136.0/23 IPv6: 2a0f:ad80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49945 Signature Algorithm: sha256WithRSAEncryption 2c:a4:ef:59:22:2c:58:a1:19:f8:b4:80:26:5b:cd:28:4b:b6: d2:08:98:5e:eb:ac:1d:d4:4f:d5:05:d1:5e:82:d3:3d:07:64: 0d:25:cc:6f:b7:2d:79:37:fd:1c:22:80:94:cc:e0:b1:10:7c: 52:08:77:41:1b:05:f6:6e:5c:8e:8d:72:47:9e:ae:70:c9:84: 47:58:b1:d2:41:af:9f:b0:11:4f:34:4b:0c:e8:3a:68:da:55: ff:40:21:63:28:a3:62:50:5e:7e:05:3e:35:a1:cb:25:46:05: 9b:7d:4a:1c:c8:af:1b:40:66:e7:f7:ae:35:c3:bb:58:26:fb: 64:e7:6b:16:ae:b0:e2:af:e3:4e:8e:25:59:15:30:55:f7:78: af:a5:22:bd:12:4a:a4:30:0e:61:28:c8:56:0b:1c:8f:13:ed: 67:67:f0:66:aa:a0:e5:02:eb:92:01:0a:82:21:a2:6b:00:42: 28:f9:2f:71:e5:b3:4f:f1:0d:02:0d:b2:6c:09:79:71:ff:64: ed:21:b5:ef:41:a1:f7:21:8b:33:8c:4c:b7:0e:c8:5a:19:45: 64:7e:09:45:11:79:89:3c:49:b3:1b:5d:7b:87:63:9b:51:44: 8f:6d:7f:be:74:b7:6a:0d:6d:5d:d3:a7:ba:60:cb:c7:99:c0: 39:00:ed:33 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xrIp4dzPYGC9kuiHYCNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjFiZDk3MzJlNmNkZDZlNzQ5NGQ3OTE4N2ZjYTg1NWI1MTk5OTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31nr4It15ie37dUBq3ZwQ1KussWH A/oPvw3drUAQImkv7pHjrnBLABGLMeJLWfIRFvVKaiKhx+N+ax++uP5RPuS5vbmV HMtjKPeRcnf20N3gTbNw0TUCaItVedI5PEFgN3srviPwFm8i1QIF9cctvLgsq1Ky WIMFycBRARCn2C/yERdO9WHO+nfdJchcfR2wn0Dpfhb8WIf432TXinqXynt6N9y2 xQb8ylEnTZFzcqkwwHA5EQIZ9bg7laZUG46OsC6nfV1p4qLfK98dekYUpmkRDojD jufjdLtT713IxvEpkUnHgqJbSQsX6g5ZeRYTysIyswgHZ4tGZG0plKLLswIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJ8b2XMubN1udJTXkYf8qFW1GZkJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzE0ZWFk OS1jYmIxLTQ2MzktODFhNy1kOGI4MjAyZDc3ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMTRlYWQ5 LWNiYjEtNDYzOS04MWE3LWQ4YjgyMDJkNzc4Ni8xL254dlpjeTVzM1c1MGxOZVJo X3lvVmJVWm1Ray5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwSGCAwQBwSGIMA0EAgACMAcDBQMqD62AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDDGTANBgkqhkiG9w0BAQsFAAOCAQEALKTv WSIsWKEZ+LSAJlvNKEu20giYXuusHdRP1QXRXoLTPQdkDSXMb7cteTf9HCKAlMzg sRB8Ugh3QRsF9m5cjo1yR56ucMmER1ix0kGvn7ARTzRLDOg6aNpV/0AhYyijYlBe fgU+NaHLJUYFm31KHMivG0Bm5/euNcO7WCb7ZOdrFq6w4q/jTo4lWRUwVfd4r6Ui vRJKpDAOYSjIVgscjxPtZ2fwZqqg5QLrkgEKgiGiawBCKPkvceWzT/ENAg2ybAl5 cf9k7SG170Gh9yGLM4xMtw7IWhlFZH4JRRF5iTxJsxtde4djm1FEj21/vnS3ag1t XdOnumDLx5nAOQDtMw== -----END CERTIFICATE-----Generated at Sun Jan 25 08:02:51 2026 by rpki-client