This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer File: nYnnxT6SR534EXHrqvI2CgN8Mkg.cer (raw, json) Hash identifier: GRtzfqTio/5od+nd5Zs3AJH0tibIUDdH8r66eDr80Fg= Subject key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ECC02E487E52FBB98AEFD0ABACB45 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209923 IP: 213.190.8.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cc:02:e4:87:e5:2f:bb:98:ae:fd:0a:ba:cb:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:47:84:08:63:c7:cb:8c:76:f7:81:77:fa:c8: 06:1f:58:2d:30:5b:5b:fd:fa:59:89:57:33:fc:51: ae:9e:46:63:5c:b8:ba:79:c4:29:21:83:dd:9e:fb: b8:10:73:7f:c9:69:f5:59:27:f3:c1:8e:af:36:50: bb:4e:3d:b1:f9:35:32:82:17:cd:a9:e1:a9:e1:e8: 4c:6d:41:5a:5e:fa:03:52:ae:19:a4:3a:36:ec:d8: ab:74:f7:1d:84:5c:56:f2:5a:4b:a4:1f:40:c7:44: 1f:08:bb:eb:e1:62:83:09:da:bf:bc:5c:95:93:4d: 20:33:9f:49:39:96:8a:43:db:1f:be:c6:5f:ff:7c: bf:9d:88:45:84:e3:56:c3:32:8d:3c:bd:1c:d9:7d: ce:46:90:9c:84:fe:bb:a5:c6:48:ca:59:a6:a1:d3: 3c:4c:79:0a:7d:4e:e6:f7:0a:94:d3:c8:e7:28:51: 18:3b:30:61:57:12:19:a7:c6:e3:7b:9c:a6:8a:7e: 62:28:4d:90:58:d4:b8:58:6e:74:ec:28:8d:a9:e7: 24:f9:f5:a7:4e:ad:6c:40:19:55:27:5e:2c:68:3c: 5c:9b:73:6a:19:1c:61:a1:ac:d4:46:24:a9:48:49: f9:7d:1f:74:7f:86:70:57:67:2e:e4:fb:ad:90:a4: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.8.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209923 Signature Algorithm: sha256WithRSAEncryption 9e:88:69:89:be:ce:32:d5:bd:1c:10:be:2e:20:42:93:7e:ef: 24:d2:64:b0:32:11:4f:a8:e6:c4:bf:68:b3:e2:6f:ab:a9:1c: bd:ff:d1:21:75:5c:60:ee:c7:64:b6:ab:5f:f9:10:67:1f:f0: ca:80:00:89:b4:7b:84:92:67:f4:4b:4f:b8:bd:84:0a:70:cc: 64:bc:2b:c2:ef:24:7e:04:2d:ed:af:e0:1b:f4:3a:36:77:22: 7a:21:b0:57:ce:51:7a:b5:67:f7:8e:3c:86:27:14:02:25:ca: bd:15:6e:41:31:ef:80:f0:8c:99:34:25:b0:83:59:fa:ed:b7: 9e:c1:ad:e6:87:e7:1b:c5:c2:68:32:fe:31:06:d2:10:75:e4: a9:db:18:67:62:73:fe:d1:96:e0:8c:2f:46:e8:2d:b8:98:23: dd:7b:8c:3d:6b:e5:9a:84:b7:a2:f2:02:d0:33:31:53:9e:fc: 54:6d:eb:59:10:f6:e1:44:64:0b:c0:16:83:4d:4f:81:bd:b3: ad:27:09:6f:ba:35:21:e8:cc:b0:1c:86:2a:c4:ab:9f:bf:6f: 43:1a:fb:9b:de:2c:e6:41:70:df:5b:c5:de:7d:aa:06:9b:ee: 28:5a:7f:8b:be:e2:8d:8c:65:fc:7b:12:6b:1a:f3:e2:86:c0: 47:e0:b6:fa -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fswC5IflL7uYrv0KustFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDg5ZTdjNTNlOTI0NzlkZjgxMTcxZWJhYWYyMzYwYTAzN2MzMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EeECGPHy4x294F3+sgGH1gtMFtb /fpZiVcz/FGunkZjXLi6ecQpIYPdnvu4EHN/yWn1WSfzwY6vNlC7Tj2x+TUyghfN qeGp4ehMbUFaXvoDUq4ZpDo27NirdPcdhFxW8lpLpB9Ax0QfCLvr4WKDCdq/vFyV k00gM59JOZaKQ9sfvsZf/3y/nYhFhONWwzKNPL0c2X3ORpCchP67pcZIylmmodM8 THkKfU7m9wqU08jnKFEYOzBhVxIZp8bje5ymin5iKE2QWNS4WG507CiNqeck+fWn Tq1sQBlVJ14saDxcm3NqGRxhoazURiSpSEn5fR90f4ZwV2cu5PutkKQqwQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ2J58U+kked+BFx66ryNgoDfDJIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzMwNGM3 Ni05OTYwLTQ5NzktODYwYy04OWE2OGU1YTIxMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvMzA0Yzc2 LTk5NjAtNDk3OS04NjBjLTg5YTY4ZTVhMjExMC8xL25Zbm54VDZTUjUzNEVYSHJx dkkyQ2dOOE1rZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQC1b4IMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM0AzANBgkqhkiG9w0BAQsFAAOCAQEAnohpib7OMtW9HBC+LiBCk37vJNJksDIR T6jmxL9os+Jvq6kcvf/RIXVcYO7HZLarX/kQZx/wyoAAibR7hJJn9EtPuL2ECnDM ZLwrwu8kfgQt7a/gG/Q6NncieiGwV85RerVn9448hicUAiXKvRVuQTHvgPCMmTQl sINZ+u23nsGt5ofnG8XCaDL+MQbSEHXkqdsYZ2Jz/tGW4IwvRugtuJgj3XuMPWvl moS3ovIC0DMxU578VG3rWRD24URkC8AWg01Pgb2zrScJb7o1IejMsByGKsSrn79v Qxr7m94s5kFw31vF3n2qBpvuKFp/i77ijYxl/HsSaxrz4obAR+C2+g== -----END CERTIFICATE-----Generated at Sun Jan 11 23:39:35 2026 by rpki-client