This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer File: n0XrWiiMaO1g29m4fk6CBsqckz8.cer (raw, json) Hash identifier: V11GuYyYVW65O8A5Sz4YTG21hpt4s1RepUVppuUs90c= Subject key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596B293D5DB576802B123EBE00A0CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211307 IP: 193.3.26.0/24 IP: 213.17.64.0/18 IP: 2a06:6340::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6b:29:3d:5d:b5:76:80:2b:12:3e:be:00:a0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:8c:09:a1:c7:e0:21:e3:16:8d:29:1c:a1: c5:04:10:3b:68:b5:81:20:ee:e0:3b:41:d1:77:23: 4f:e7:8f:8e:ff:9d:aa:28:28:61:8f:21:f0:e0:00: cd:dd:2f:f9:69:8e:3f:d0:62:f5:17:19:f7:70:01: 66:d6:b4:c1:05:6a:7c:7b:31:d2:ef:ef:32:1d:99: 78:b2:1f:b3:74:43:ca:75:02:0c:23:76:87:b3:d7: 90:90:93:44:31:31:cb:94:a3:e5:96:f8:b3:01:36: ae:a1:7d:81:77:dd:02:59:25:d6:b6:f0:d4:13:33: 50:2c:d7:78:68:da:6c:28:b5:a3:30:1f:ad:fc:e6: e4:2f:98:a2:f6:e6:bc:83:47:6e:67:89:70:28:11: a9:a9:d7:d0:47:de:0b:33:d4:6e:7d:bc:0a:b5:cb: 99:2f:62:8f:f2:ee:96:f7:e6:c6:4a:12:30:7b:aa: b5:ef:80:2a:b2:44:4b:07:a9:eb:66:08:fe:53:0a: dd:57:a3:e9:be:12:11:37:7a:6f:7e:32:52:c3:75: 51:76:38:cb:0d:d1:e2:48:8c:e6:d5:e5:b9:df:93: 21:11:85:c9:26:a1:ff:e8:1b:7b:da:b7:2b:26:40: a1:cb:53:ad:86:55:5d:c6:3e:a6:81:e2:63:a6:65: 17:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.26.0/24 213.17.64.0/18 IPv6: 2a06:6340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211307 Signature Algorithm: sha256WithRSAEncryption 30:35:dc:ea:df:e5:29:9c:99:53:ac:5d:26:62:83:1f:49:ca: ec:36:97:cf:b4:ef:ce:04:1f:3e:5f:29:90:98:e1:2a:ad:5c: 9a:cb:c9:7c:ac:97:32:c2:48:a2:cb:b6:7b:ec:ca:43:3d:0b: f0:74:49:8a:48:f8:58:07:39:ba:03:eb:af:27:34:6d:37:70: 13:65:2e:b5:5d:91:ed:cc:68:f5:19:3a:d4:cc:f8:56:64:87: c6:66:ba:c8:e4:d3:5c:0a:ed:f2:96:94:be:5f:65:0a:36:55: 70:71:23:5d:b6:fe:cb:24:aa:61:49:34:4d:79:c4:ae:32:20: 02:35:31:16:9a:2f:ff:8d:2e:8e:c2:06:30:70:72:04:2a:ce: 76:bb:54:6c:b4:b9:a6:cd:57:f9:f4:a4:c3:ef:c6:4a:70:6b: 32:ab:8d:10:09:32:27:b4:4b:db:b2:5c:ad:a9:e4:8a:41:45: 99:33:35:df:7a:1a:fb:7a:0e:4c:9d:32:2f:fc:5c:86:41:10: 9a:d8:ed:5f:5c:27:63:ce:53:3e:29:4e:5e:0f:6e:8c:39:77: c5:ef:78:8f:93:0a:54:5d:c8:b0:60:62:97:a9:de:5f:7c:34: 19:77:a0:bc:ec:fb:32:3c:e0:a1:8d:a3:4a:d1:c9:a5:f9:c0: 82:b4:6d:4f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WWspPV21doArEj6+AKDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjQ1ZWI1YTI4OGM2OGVkNjBkYmQ5Yjg3ZTRlODIwNmNhOWM5MzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzruMCaHH4CHjFo0pHKHFBBA7aLWB IO7gO0HRdyNP54+O/52qKChhjyHw4ADN3S/5aY4/0GL1Fxn3cAFm1rTBBWp8ezHS 7+8yHZl4sh+zdEPKdQIMI3aHs9eQkJNEMTHLlKPllvizATauoX2Bd90CWSXWtvDU EzNQLNd4aNpsKLWjMB+t/ObkL5ii9ua8g0duZ4lwKBGpqdfQR94LM9RufbwKtcuZ L2KP8u6W9+bGShIwe6q174AqskRLB6nrZgj+UwrdV6PpvhIRN3pvfjJSw3VRdjjL DdHiSIzm1eW535MhEYXJJqH/6Bt72rcrJkChy1OthlVdxj6mgeJjpmUXCwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJ9F61oojGjtYNvZuH5OggbKnJM/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2U0MjMz Ni1lYjc3LTQ1NDAtYmU0MS01NWZkNmRjMWExZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZTQyMzM2 LWViNzctNDU0MC1iZTQxLTU1ZmQ2ZGMxYTFkOC8xL24wWHJXaWlNYU8xZzI5bTRm azZDQnNxY2t6OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwQMaAwQG1RFAMA0EAgACMAcDBQAqBmNAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5azANBgkqhkiG9w0BAQsFAAOCAQEAMDXc 6t/lKZyZU6xdJmKDH0nK7DaXz7TvzgQfPl8pkJjhKq1cmsvJfKyXMsJIosu2e+zK Qz0L8HRJikj4WAc5ugPrryc0bTdwE2UutV2R7cxo9Rk61Mz4VmSHxma6yOTTXArt 8paUvl9lCjZVcHEjXbb+yySqYUk0TXnErjIgAjUxFpov/40ujsIGMHByBCrOdrtU bLS5ps1X+fSkw+/GSnBrMquNEAkyJ7RL27JcrankikFFmTM133oa+3oOTJ0yL/xc hkEQmtjtX1wnY85TPilOXg9ujDl3xe94j5MKVF3IsGBil6neX3w0GXegvOz7Mjzg oY2jStHJpfnAgrRtTw== -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:52 2026 by rpki-client