This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer File: nNZ9EDPKRytbuA_VlruDbRLiImE.cer (raw, json) Hash identifier: YgE3cGNRFnZBtjMKfsNr3yXOf5nC29m7BOJ/mOscyQI= Subject key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A236663118E5C6842D086D54578677 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208710 IP: 45.66.0.0/22 IP: 2a0e:2480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:36:66:31:18:e5:c6:84:2d:08:6d:54:57:86:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:d7:99:b6:0c:b0:88:70:da:1b:d5:64:a3: c3:a4:03:f0:76:4a:43:c7:4e:ef:23:38:d1:ff:61: 09:d3:03:cd:d9:18:1c:05:40:c4:21:c5:83:bb:42: 8c:2c:cb:3b:2f:50:bb:b8:6b:ae:9e:c0:7f:1f:ca: 6a:bf:6a:f8:dc:bb:94:ad:75:dc:6f:31:e9:0b:13: 35:a2:a5:74:18:d6:9b:88:28:30:59:31:4d:79:bc: 00:17:75:2e:bb:09:80:1e:45:cd:95:87:9b:7f:ad: ed:02:92:81:d1:ba:25:c0:f2:c4:28:68:7f:e2:01: f4:5a:ac:10:02:b0:57:6b:a7:d2:02:03:8e:24:a5: 21:88:9e:24:b6:7b:de:f4:91:4e:ce:89:32:e2:6d: 53:a4:86:ae:63:1a:c6:2b:01:2c:77:4c:da:eb:a3: 1d:c2:17:0a:f1:bd:44:f5:5e:2b:d3:d8:e1:9b:9b: 73:4a:78:f6:9b:6a:e7:1b:d6:39:a9:db:b3:e9:39: ee:b8:7c:42:30:09:76:e0:40:3b:96:e2:69:b3:c6: 6a:ee:aa:f7:47:03:fe:40:84:18:7c:29:5d:4b:e9: 2f:86:6c:96:2f:33:d0:bf:f5:4f:73:33:99:3e:30: d8:c6:f5:05:dd:10:cd:4a:8c:21:93:33:79:ec:2b: cf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.0.0/22 IPv6: 2a0e:2480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208710 Signature Algorithm: sha256WithRSAEncryption 6d:50:91:d7:d7:fa:3e:ae:41:3e:40:c8:6a:76:85:53:80:4a: 34:d2:a1:64:eb:0b:04:06:0b:e2:67:a3:20:71:87:07:e0:b7: 7b:96:da:90:8d:5c:1b:07:48:e5:9d:f6:9b:84:d0:81:5e:34: 4e:83:ce:e9:1c:2f:8a:fb:44:a5:3e:68:b4:32:4d:e2:bd:7e: a0:2e:82:ce:1f:37:77:cb:1c:4b:b9:43:f7:59:01:6c:c0:50: b4:a9:5f:ab:a7:27:ac:23:2a:05:5b:af:ef:a2:9c:b6:82:0d: 88:26:5d:2c:7c:1e:8f:29:66:4d:23:14:60:34:b2:5e:e1:57: 03:4f:4b:da:95:2f:31:40:3b:f4:9e:66:bc:8b:c6:92:b4:c6: 9e:3f:8e:64:e1:26:e0:6f:b0:f9:ab:0e:bd:cf:74:bc:4d:0e: 20:75:1e:7d:a9:a7:35:f9:8e:f5:a6:4f:f2:b9:f4:e2:60:1a: 17:ab:dc:fe:32:06:67:0c:13:4e:00:b7:bd:16:85:7e:37:06: c8:91:d2:69:66:da:53:a9:46:63:51:d5:80:69:8c:75:7a:35: 38:74:f1:20:d9:2d:a8:1f:75:45:32:c0:09:2a:7a:59:f6:d8: 99:d8:52:7e:ef:ef:71:9b:11:09:4d:43:69:5f:ca:9d:4b:5a: 15:67:fb:1e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ojZmMRjlxoQtCG1UV4Z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2Q2N2QxMDMzY2E0NzJiNWJiODBmZDU5NmJiODM2ZDEyZTIyMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI/XmbYMsIhw2hvVZKPDpAPwdkpD x07vIzjR/2EJ0wPN2RgcBUDEIcWDu0KMLMs7L1C7uGuunsB/H8pqv2r43LuUrXXc bzHpCxM1oqV0GNabiCgwWTFNebwAF3UuuwmAHkXNlYebf63tApKB0bolwPLEKGh/ 4gH0WqwQArBXa6fSAgOOJKUhiJ4ktnve9JFOzoky4m1TpIauYxrGKwEsd0za66Md whcK8b1E9V4r09jhm5tzSnj2m2rnG9Y5qduz6TnuuHxCMAl24EA7luJps8Zq7qr3 RwP+QIQYfCldS+kvhmyWLzPQv/VPczOZPjDYxvUF3RDNSowhkzN57CvPMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJzWfRAzykcrW7gP1Za7g20S4iJhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2YxNzcy Mi1lNThiLTQ0NTItODEzNS1lYWE1YWNmMzVmZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvZjE3NzIy LWU1OGItNDQ1Mi04MTM1LWVhYTVhY2YzNWZkMS8xL25OWjlFRFBLUnl0YnVBX1Zs cnVEYlJMaUltRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLUIAMA0EAgACMAcDBQMqDiSAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvRjANBgkqhkiG9w0BAQsFAAOCAQEAbVCR19f6Pq5B PkDIanaFU4BKNNKhZOsLBAYL4mejIHGHB+C3e5bakI1cGwdI5Z32m4TQgV40ToPO 6RwvivtEpT5otDJN4r1+oC6Czh83d8scS7lD91kBbMBQtKlfq6cnrCMqBVuv76Kc toINiCZdLHwejylmTSMUYDSyXuFXA09L2pUvMUA79J5mvIvGkrTGnj+OZOEm4G+w +asOvc90vE0OIHUefamnNfmO9aZP8rn04mAaF6vc/jIGZwwTTgC3vRaFfjcGyJHS aWbaU6lGY1HVgGmMdXo1OHTxINktqB91RTLACSp6WfbYmdhSfu/vcZsRCU1DaV/K nUtaFWf7Hg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:53 2026 by rpki-client