This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer File: nHIayAejJvhxu6oYSWPNYCtcwtY.cer (raw, json) Hash identifier: 9b2rfyqeY/ZDpg3BEGyIs22OjXVVyQSpxbfV4AQuag0= Subject key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80C060C202D71F97D063ABDBE62C47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50877 IP: 159.255.128.0/21 IP: 185.182.208.0/22 IP: 2a0a:f980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c0:60:c2:02:d7:1f:97:d0:63:ab:db:e6:2c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:df:da:23:a2:43:2b:65:43:23:51:0e:b2: e4:b6:eb:21:07:e9:b5:f9:fe:ff:49:ba:13:a7:aa: 1f:02:4e:47:47:a1:dc:ef:34:eb:99:84:3d:83:de: 30:22:fc:e1:01:e9:e9:52:f2:8c:bb:1a:69:09:33: 4c:f2:79:56:63:fa:b6:08:b7:b0:94:50:4e:8d:d4: d9:ef:7f:61:50:db:de:0c:06:1e:cb:94:1d:34:a5: d6:86:3b:d7:b5:8c:e3:29:42:48:3e:f8:b9:77:42: 8c:d9:37:b3:00:ae:5d:e7:7c:df:5a:a3:d5:e0:ec: d8:8f:a1:a4:de:8c:d1:37:0a:26:81:bf:64:f5:27: 56:4a:7a:9f:e9:68:fe:30:b1:e2:7b:54:f6:5f:45: 91:8e:fd:c6:d0:d3:c2:38:e4:e3:f0:cf:54:0a:df: 32:74:66:c8:5b:c2:d9:d7:28:a6:b5:da:77:48:94: e5:c1:60:f7:e4:76:26:ba:e5:90:6f:f9:71:b7:ea: 03:91:f9:fa:f8:4c:a2:6d:f4:a4:0e:45:13:fd:c4: 0b:39:b8:63:98:d3:c0:a3:6e:c8:15:6c:c3:f8:68: 99:4c:f0:ec:6c:e1:cb:4d:83:c3:5d:4a:0f:a9:01: cc:05:32:7e:b2:f8:bd:4e:69:4f:a9:96:5a:8f:6b: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.128.0/21 185.182.208.0/22 IPv6: 2a0a:f980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50877 Signature Algorithm: sha256WithRSAEncryption 1c:ec:35:e2:75:7d:53:4b:11:cc:13:5e:03:28:a8:de:41:0c: af:3f:81:54:d8:b4:c7:8f:6e:39:ce:cd:8a:8f:bb:70:29:56: e1:19:db:e7:0a:8b:ca:9d:e1:d2:ad:d5:07:92:89:90:01:2f: a2:5e:a2:15:2c:08:ff:b5:85:74:de:72:5c:64:f2:e8:9b:b3: da:05:06:63:7e:b5:3f:47:00:f3:1c:3b:c1:78:29:14:95:64: f8:4f:c1:7f:37:cb:39:87:5a:75:c4:bc:5d:5b:93:27:93:c1: d9:23:45:4f:05:b1:3e:d1:5f:c2:8f:b6:3d:73:b6:f3:58:eb: e7:a9:71:34:53:3b:ea:86:1f:4e:4f:45:22:66:be:40:d0:28: 82:85:49:47:d2:85:22:70:20:c2:2c:c2:69:8f:1f:1c:30:ca: 7e:4b:0d:8a:a7:63:43:04:31:47:4d:db:74:d1:26:6a:97:97: ac:20:75:23:86:4f:88:8a:00:5d:0b:6c:f4:42:27:1a:b5:61: 84:55:af:3b:d0:ca:55:8a:a8:3a:09:13:1e:3c:63:80:08:4c: 58:36:3e:7b:3c:60:21:3d:e8:07:2c:23:48:b8:dd:31:61:ba: 1d:c5:a3:53:38:62:b0:23:d1:d8:93:6d:f7:73:b1:a6:c8:d2: d5:69:b1:ed -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8gMBgwgLXH5fQY6vb5ixHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzcyMWFjODA3YTMyNmY4NzFiYmFhMTg0OTYzY2Q2MDJiNWNjMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfDf2iOiQytlQyNRDrLktushB+m1 +f7/SboTp6ofAk5HR6Hc7zTrmYQ9g94wIvzhAenpUvKMuxppCTNM8nlWY/q2CLew lFBOjdTZ739hUNveDAYey5QdNKXWhjvXtYzjKUJIPvi5d0KM2TezAK5d53zfWqPV 4OzYj6Gk3ozRNwomgb9k9SdWSnqf6Wj+MLHie1T2X0WRjv3G0NPCOOTj8M9UCt8y dGbIW8LZ1yimtdp3SJTlwWD35HYmuuWQb/lxt+oDkfn6+EyibfSkDkUT/cQLObhj mNPAo27IFWzD+GiZTPDsbOHLTYPDXUoPqQHMBTJ+svi9TmlPqZZaj2visQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJxyGsgHoyb4cbuqGEljzWArXMLWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzQ2NDI2 MC04ZDdlLTQ1MDctYjQ0Yi0yODY0NzA3YjJiM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNDY0MjYw LThkN2UtNDUwNy1iNDRiLTI4NjQ3MDdiMmIzZi8xL25ISWF5QWVqSnZoeHU2b1lT V1BOWUN0Y3d0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDn/+AAwQCubbQMA0EAgACMAcDBQMqCvmAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDGvTANBgkqhkiG9w0BAQsFAAOCAQEAHOw1 4nV9U0sRzBNeAyio3kEMrz+BVNi0x49uOc7Nio+7cClW4Rnb5wqLyp3h0q3VB5KJ kAEvol6iFSwI/7WFdN5yXGTy6Juz2gUGY361P0cA8xw7wXgpFJVk+E/BfzfLOYda dcS8XVuTJ5PB2SNFTwWxPtFfwo+2PXO281jr56lxNFM76oYfTk9FIma+QNAogoVJ R9KFInAgwizCaY8fHDDKfksNiqdjQwQxR03bdNEmapeXrCB1I4ZPiIoAXQts9EIn GrVhhFWvO9DKVYqoOgkTHjxjgAhMWDY+ezxgIT3oBywjSLjdMWG6HcWjUzhisCPR 2JNt93OxpsjS1Wmx7Q== -----END CERTIFICATE-----Generated at Mon Jan 12 05:54:34 2026 by rpki-client