This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer File: nlf4Q7F__OqpuGNlgf5NVONG3cw.cer (raw, json) Hash identifier: WSIwqBQtv0q1T58hgtP5KX5Ohch/Ky8PPEgh0tFgLwU= Subject key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6F3C8F6462E9F0A81B3E9C55D9B4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34399 IP: 195.114.120.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f3:c8:f6:46:2e:9f:0a:81:b3:e9:c5:5d:9b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:38:52:83:10:71:a2:6b:c5:75:d5:42:7b: 76:fd:56:ab:4c:8b:64:c2:49:40:2b:63:95:c3:a8: 47:b9:48:6f:f0:63:d8:45:d7:25:76:98:9d:6a:50: 8b:df:a8:f4:f5:b0:cf:84:e0:a1:42:f7:a1:e9:c1: 14:9b:fb:68:a2:bb:7b:35:cf:df:1b:d8:1b:3a:ef: 4e:1d:47:17:90:21:0f:de:8a:87:bd:f8:dc:50:13: 14:94:78:8c:fc:cf:26:49:c7:19:92:13:e7:4d:8b: 3b:53:6d:bc:d1:79:7a:bd:aa:ac:3f:e4:90:b7:71: 27:0c:74:e5:86:ec:3b:57:50:4f:b2:50:1f:68:e6: 7d:5b:e7:01:04:55:b0:66:77:fa:40:58:26:4d:d5: e6:95:02:4d:00:64:55:bd:69:81:cc:31:0f:c0:3d: 32:e5:a1:ae:bd:99:31:99:99:2d:14:6e:26:90:cb: f9:5f:8b:90:25:93:ba:6d:cb:c6:db:15:ef:30:8f: 49:f6:66:fe:bd:75:b4:2a:43:0f:06:0e:c3:2d:7c: 3d:c6:90:d3:1c:4d:9d:7d:01:c6:ef:0d:e7:9b:f9: a1:89:c1:b1:7e:5e:bd:17:d3:a2:3d:7f:88:09:66: de:00:f9:4b:33:24:62:7a:4b:41:80:29:a2:e1:37: 4b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.120.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34399 Signature Algorithm: sha256WithRSAEncryption 99:36:b3:31:aa:10:af:16:4a:58:b1:fa:52:d2:dc:56:6d:23: a8:7f:dc:d5:4e:ce:c3:79:e4:7f:0e:f0:3c:e5:af:67:06:a7: 9d:43:18:36:71:35:e2:79:9f:52:a2:84:10:c0:ef:4b:51:f5: d6:13:a1:66:f2:4b:5f:88:3f:07:63:c4:6c:71:5b:5a:a1:2c: e4:23:cf:01:f5:5c:47:a2:1e:73:27:fa:6c:69:27:38:fb:c9: 37:58:1b:44:ea:c4:a1:b9:8b:e4:63:81:ad:0d:aa:80:56:52: d2:af:65:55:e1:90:b2:a0:07:6f:f1:93:f6:1b:4d:11:d1:06: ed:ef:6b:d2:cd:ed:d6:f4:99:3c:de:51:c4:f0:94:06:d2:e5: f9:fd:09:c6:1d:b0:e8:f9:da:f5:e3:b1:00:8f:ff:21:02:ce: 42:dc:19:41:fc:18:a3:2d:81:60:a5:21:f1:2c:0a:4b:b8:88: 09:3a:9e:e9:15:81:d4:9b:0b:18:95:41:5d:36:30:cf:af:d9: 45:ef:52:3c:f8:df:6f:7c:3e:fe:5d:f1:a4:55:8b:5e:6b:32: 92:56:d5:3b:3b:de:3b:4f:1d:df:22:74:b0:61:c8:4b:a9:21: 13:0a:92:e4:1b:6b:1a:9e:a6:72:3c:eb:70:c1:1a:c5:da:74: e5:e2:62:81 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pvPI9kYunwqBs+nFXZtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTU3Zjg0M2IxN2ZmY2VhYTliODYzNjU4MWZlNGQ1NGUzNDZkZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nw4UoMQcaJrxXXVQnt2/VarTItk wklAK2OVw6hHuUhv8GPYRdcldpidalCL36j09bDPhOChQveh6cEUm/toort7Nc/f G9gbOu9OHUcXkCEP3oqHvfjcUBMUlHiM/M8mSccZkhPnTYs7U2280Xl6vaqsP+SQ t3EnDHTlhuw7V1BPslAfaOZ9W+cBBFWwZnf6QFgmTdXmlQJNAGRVvWmBzDEPwD0y 5aGuvZkxmZktFG4mkMv5X4uQJZO6bcvG2xXvMI9J9mb+vXW0KkMPBg7DLXw9xpDT HE2dfQHG7w3nm/mhicGxfl69F9OiPX+ICWbeAPlLMyRiektBgCmi4TdL3QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ5X+EOxf/zqqbhjZYH+TVTjRt3MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzdkMGVm ZS03MDlkLTRkMTEtYjY5Mi0wZTIzMDgwNmI1NzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvN2QwZWZl LTcwOWQtNGQxMS1iNjkyLTBlMjMwODA2YjU3OS8xL25sZjRRN0ZfX09xcHVHTmxn ZjVOVk9ORzNjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw3J4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCGXzANBgkqhkiG9w0BAQsFAAOCAQEAmTazMaoQrxZKWLH6UtLcVm0jqH/c1U7O w3nkfw7wPOWvZwannUMYNnE14nmfUqKEEMDvS1H11hOhZvJLX4g/B2PEbHFbWqEs 5CPPAfVcR6Iecyf6bGknOPvJN1gbROrEobmL5GOBrQ2qgFZS0q9lVeGQsqAHb/GT 9htNEdEG7e9r0s3t1vSZPN5RxPCUBtLl+f0Jxh2w6Pna9eOxAI//IQLOQtwZQfwY oy2BYKUh8SwKS7iICTqe6RWB1JsLGJVBXTYwz6/ZRe9SPPjfb3w+/l3xpFWLXmsy klbVOzveO08d3yJ0sGHIS6khEwqS5BtrGp6mcjzrcMEaxdp05eJigQ== -----END CERTIFICATE-----Generated at Sat Jan 3 02:32:27 2026 by rpki-client