This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.cer (raw, json) Hash identifier: tny8z1DhchCS7/EXmGPJynJSx6edrCiAr2MkCjdwMVI= Subject key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB1110361EC368EC45094CF3A5793A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59421 IP: 91.240.236.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:11:10:36:1e:c3:68:ec:45:09:4c:f3:a5:79:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6a:36:0a:37:80:8b:c1:a7:c0:25:42:73:a7: f8:90:92:57:dc:0e:03:d4:0a:10:f5:44:20:59:91: 0d:33:80:25:81:b0:74:74:d2:53:70:c7:88:e9:6f: d5:70:17:75:8e:c5:bf:8f:3d:23:79:79:95:5c:26: 30:8e:1b:87:49:78:2b:a9:c4:b2:6a:05:1c:51:c4: 4d:01:71:7d:6c:f7:ff:a1:18:94:a0:aa:55:84:dc: bd:52:a8:d4:ae:65:3c:aa:b4:47:b5:93:45:66:dd: 84:4b:5c:60:8b:a3:49:a0:80:be:60:61:d8:e2:ba: b7:50:88:2c:98:44:59:99:59:b7:c2:5d:a9:65:41: e1:40:fe:06:c2:69:97:33:87:54:15:4c:a8:6b:3a: 9c:af:d9:80:09:67:bb:18:ab:88:10:09:93:c2:60: 0b:ae:26:c1:3e:3b:57:33:39:7a:21:35:bb:94:12: 00:bc:2a:98:bd:77:52:ef:99:75:7a:68:80:e4:19: 4f:63:77:6d:dd:db:64:c9:d6:c3:a8:ba:92:82:06: 3f:36:c6:9e:53:bf:f9:ee:f0:48:5a:75:9c:8f:c5: 03:bd:77:9a:e9:5d:53:5b:ba:cb:20:c0:b9:50:3e: ab:91:6f:f8:64:ee:48:46:e6:d8:08:46:20:6f:04: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.236.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59421 Signature Algorithm: sha256WithRSAEncryption 04:e5:c4:06:5f:e2:12:5a:77:2a:48:d3:b4:92:2f:2d:ca:22: 3c:84:be:79:af:9a:10:19:dd:f1:a1:f9:b3:f3:a3:df:8e:09: 30:ba:9d:1a:db:29:41:91:04:ad:13:d0:30:2b:17:da:c0:b8: 8b:1c:30:5c:2e:1f:13:cc:95:25:ca:59:3c:a0:99:3e:f1:06: 31:22:94:35:fe:e8:b6:c3:68:1c:5b:02:a2:71:67:f3:4a:b6: aa:cc:f7:b6:a8:9f:90:49:2c:1b:48:e2:b1:5f:55:47:09:06: 9b:1d:1b:73:36:9f:8a:11:7f:d3:fc:23:a2:da:8f:f7:09:64: a4:40:cc:4a:63:5c:2b:24:54:50:07:df:d7:68:28:e5:03:ec: 0e:52:95:34:00:16:dc:3d:4d:33:90:51:c4:29:db:bc:b6:94: 18:65:f3:df:e7:0c:99:4c:13:f2:1d:1a:8f:d9:95:e9:ae:85: fa:5f:99:58:46:4f:9a:a6:02:48:7c:71:e7:63:b1:f5:44:02: 9e:c9:f3:12:fb:44:ad:34:ec:4d:d1:bb:d5:27:c3:22:f9:a1: 82:dc:9d:d0:45:10:4a:3e:4a:db:68:83:2e:53:3b:0d:8f:a6: cc:44:f4:a7:e9:92:ef:e7:89:90:6e:42:06:87:55:af:a8:58: 9b:44:c8:92 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yxEQNh7DaOxFCUzzpXk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGQ4NmU3ZDA3M2E5ZTRkNjllYzcxNWMzNjIzMTc2ODA1ODk0ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Go2CjeAi8GnwCVCc6f4kJJX3A4D 1AoQ9UQgWZENM4AlgbB0dNJTcMeI6W/VcBd1jsW/jz0jeXmVXCYwjhuHSXgrqcSy agUcUcRNAXF9bPf/oRiUoKpVhNy9UqjUrmU8qrRHtZNFZt2ES1xgi6NJoIC+YGHY 4rq3UIgsmERZmVm3wl2pZUHhQP4GwmmXM4dUFUyoazqcr9mACWe7GKuIEAmTwmAL ribBPjtXMzl6ITW7lBIAvCqYvXdS75l1emiA5BlPY3dt3dtkydbDqLqSggY/Nsae U7/57vBIWnWcj8UDvXea6V1TW7rLIMC5UD6rkW/4ZO5IRubYCEYgbwR/SQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNTYbn0HOp5NaexxXDYjF2gFiU1aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzgyZDY1 YS00NWUyLTRlZmItYjIzYy05NTVhZDc4YmNiMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvODJkNjVh LTQ1ZTItNGVmYi1iMjNjLTk1NWFkNzhiY2IwNy8xLzFOaHVmUWM2bmsxcDdIRmNO aU1YYUFXSlRWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW/DsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDoHTANBgkqhkiG9w0BAQsFAAOCAQEABOXEBl/iElp3KkjTtJIvLcoiPIS+ea+a EBnd8aH5s/Oj344JMLqdGtspQZEErRPQMCsX2sC4ixwwXC4fE8yVJcpZPKCZPvEG MSKUNf7otsNoHFsConFn80q2qsz3tqifkEksG0jisV9VRwkGmx0bczafihF/0/wj otqP9wlkpEDMSmNcKyRUUAff12go5QPsDlKVNAAW3D1NM5BRxCnbvLaUGGXz3+cM mUwT8h0aj9mV6a6F+l+ZWEZPmqYCSHxx52Ox9UQCnsnzEvtErTTsTdG71SfDIvmh gtyd0EUQSj5K22iDLlM7DY+mzET0p+mS7+eJkG5CBodVr6hYm0TIkg== -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:37 2026 by rpki-client