This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer (raw, json) Hash identifier: WygRZTyqfrKsfbybX9bpcSAsclVlygknK7dI6uMfSRs= Subject key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC36918D0B41B106A61D1961C4F45B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204068 IP: 193.243.183.64/26 IP: 2001:7f8:53::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:36:91:8d:0b:41:b1:06:a6:1d:19:61:c4:f4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:87:3e:0b:8c:a4:73:e4:a2:e3:c2:c9:50: b9:de:0d:12:1e:4a:ce:7d:a2:49:43:3c:f3:36:79: a4:cd:3d:17:4e:7a:1f:dd:3c:41:bf:c5:f2:90:6e: ab:24:e1:53:93:d4:63:b4:cd:67:af:5a:dd:bb:1d: 01:f8:8e:24:0f:9c:6e:06:92:f4:41:83:67:94:e6: 38:1c:1e:88:54:7e:3e:a0:fc:0e:7c:7c:17:1c:14: 40:5f:f8:e9:da:6d:2c:9b:4a:e8:68:94:ab:b2:a2: de:d6:d1:7d:84:1c:c4:2e:17:91:1c:a5:a5:12:e9: 03:c5:71:d4:74:6d:fc:46:0a:31:2e:f8:56:82:b2: 21:53:b2:2d:14:47:e7:19:98:11:c6:6c:a6:aa:22: 25:79:66:60:8a:47:ba:c7:f5:5d:cf:a6:1f:31:9c: 26:90:4a:2d:60:2f:a8:bd:ad:de:f6:72:1e:9e:72: 7a:98:0e:3a:06:63:73:2c:bc:53:2a:27:e1:4c:dd: a3:04:2e:58:e2:0f:ed:86:9c:df:ea:7f:04:8f:8f: e7:d4:55:10:63:04:44:84:b9:71:ed:13:77:b9:d3: 83:1d:ea:ef:4b:2b:f4:f4:8f:10:5c:fb:2f:6e:6e: 79:20:1c:f7:c4:15:7f:85:db:94:62:01:2d:e2:c4: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.243.183.64/26 IPv6: 2001:7f8:53::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204068 Signature Algorithm: sha256WithRSAEncryption 6e:5e:8e:93:c2:1c:1f:fb:2a:3c:83:98:9a:2c:28:f3:96:10: 5d:54:72:5e:28:14:e8:70:cb:a8:60:12:d9:7d:2c:60:7f:c9: 6f:a5:9d:ce:39:e0:36:e3:e1:45:85:f2:36:fe:6b:d5:ad:4c: d2:39:0b:5b:23:95:f4:41:79:09:6a:b2:36:c6:42:77:0a:4c: 41:49:dd:2f:29:7b:87:13:86:c7:29:81:e6:f1:b5:30:dc:02: 00:da:3c:a2:5f:ea:f0:68:43:c2:36:31:9c:f5:83:df:ed:a4: de:c0:ee:f0:b1:a5:ea:ca:51:68:9f:4c:65:0f:2a:97:eb:05: 3d:0f:03:24:ad:74:02:6c:26:48:52:70:9f:9b:6a:0d:53:67: 79:3d:6f:e4:ef:98:aa:37:75:96:5d:c2:4b:5a:c8:7e:ed:5b: ab:7d:5c:c0:bb:42:75:05:2f:69:c1:16:e8:cd:1a:81:82:80: 62:75:d0:7e:f7:ac:1c:c3:17:48:2b:ad:0c:c7:2c:62:78:82: 22:7c:52:f5:03:ed:bf:80:bf:68:94:45:48:78:fd:48:47:83: f2:fd:de:09:c5:18:87:f0:83:56:60:88:18:03:a6:85:72:42: e7:7e:a8:06:3c:17:42:aa:d9:d2:50:4c:a0:ee:78:84:96:34: 62:93:c8:75 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt57DaRjQtBsQamHRlhxPRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmYwN2Y1MDllOTQ3YjI2N2Y4N2JhMGFkZTg5ZWM0ZDNhZTU2YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0GHPguMpHPkouPCyVC53g0SHkrO faJJQzzzNnmkzT0XTnof3TxBv8XykG6rJOFTk9RjtM1nr1rdux0B+I4kD5xuBpL0 QYNnlOY4HB6IVH4+oPwOfHwXHBRAX/jp2m0sm0roaJSrsqLe1tF9hBzELheRHKWl EukDxXHUdG38RgoxLvhWgrIhU7ItFEfnGZgRxmymqiIleWZgike6x/Vdz6YfMZwm kEotYC+ova3e9nIennJ6mA46BmNzLLxTKifhTN2jBC5Y4g/thpzf6n8Ej4/n1FUQ YwREhLlx7RN3udODHervSyv09I8QXPsvbm55IBz3xBV/hduUYgEt4sQ0KQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFJ/wf1CelHsmf4e6Ct6J7E065Wo+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzQxOTUz YS03OWJhLTQ0MDItYmNkZS04OTk4YWFhN2YzMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvNDE5NTNh LTc5YmEtNDQwMi1iY2RlLTg5OThhYWE3ZjMxNS8xL25fQl9VSjZVZXlaX2g3b0sz b25zVFRybGFqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDANBAIAATAHAwUGwfO3QDAPBAIAAjAJAwcAIAEH+ABTMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwMdJDANBgkqhkiG9w0BAQsFAAOCAQEAbl6Ok8Ic H/sqPIOYmiwo85YQXVRyXigU6HDLqGAS2X0sYH/Jb6WdzjngNuPhRYXyNv5r1a1M 0jkLWyOV9EF5CWqyNsZCdwpMQUndLyl7hxOGxymB5vG1MNwCANo8ol/q8GhDwjYx nPWD3+2k3sDu8LGl6spRaJ9MZQ8ql+sFPQ8DJK10AmwmSFJwn5tqDVNneT1v5O+Y qjd1ll3CS1rIfu1bq31cwLtCdQUvacEW6M0agYKAYnXQfvesHMMXSCutDMcsYniC InxS9QPtv4C/aJRFSHj9SEeD8v3eCcUYh/CDVmCIGAOmhXJC536oBjwXQqrZ0lBM oO54hJY0YpPIdQ== -----END CERTIFICATE-----Generated at Wed Jan 7 07:18:45 2026 by rpki-client