This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer File: nwM4t9tUQAKUEDl1Fckw60UtdbA.cer (raw, json) Hash identifier: g8gMPtH6Tt/0S1ugY+PbPRCSRe5pSWYfzSIZ6ExebWQ= Subject key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758DC4D9A59D2F2541A43D50ED236AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199753 IP: 91.223.151.0/24 IP: 185.89.56.0/22 IP: 194.117.254.0/23 IP: 2a05:d580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dc:4d:9a:59:d2:f2:54:1a:43:d5:0e:d2:36:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f0338b7db5440029410397515c930eb452d75b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f5:d9:d5:9b:21:fd:4b:bd:44:72:9a:ae:07: ab:64:46:bf:8e:1d:6a:d8:52:b9:ab:b9:cb:c7:a6: 92:ca:ee:a4:1f:b9:29:b1:0b:58:0c:15:6b:e7:5f: ea:47:ce:cb:d3:a0:7b:50:4d:33:40:c9:ea:dc:6e: 57:7e:da:d7:7d:25:cc:1e:ba:e2:ce:a5:c4:d3:7b: 06:5a:aa:64:e7:6c:e8:5d:4f:e6:ba:d2:d3:1c:34: ac:3e:da:d1:a5:df:a2:69:6e:1c:b5:52:bb:b4:4a: 19:60:2a:32:96:cc:5f:fe:ac:2f:be:53:57:56:9f: 2f:5a:ff:34:1f:62:8e:19:30:a7:5f:20:11:18:60: 9b:9e:ab:94:aa:73:d3:68:fb:a3:25:9a:3f:01:be: 67:fc:23:21:81:4d:7c:08:db:28:1e:6e:9b:1e:47: e4:35:d0:83:58:cf:86:f9:dc:83:77:ba:11:60:59: 39:f2:6a:d1:22:39:44:1b:1a:40:ea:c4:fb:d5:a5: 2d:1b:e4:78:32:6b:16:e5:e7:23:44:40:f8:e4:0c: e2:f7:1a:5c:37:51:9b:83:5c:1b:f7:6b:33:24:44: 27:e3:ae:ca:66:c6:f4:a2:a1:a4:4e:82:d9:eb:50: 09:d3:57:f3:77:45:22:ae:93:f8:a1:f6:2c:44:fc: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.151.0/24 185.89.56.0/22 194.117.254.0/23 IPv6: 2a05:d580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199753 Signature Algorithm: sha256WithRSAEncryption 80:c2:3f:27:87:de:04:34:5f:68:aa:c8:f3:5b:f5:f5:35:3e: a5:7a:a6:48:0f:cd:6e:15:c6:7d:8d:36:8e:a1:5c:66:da:66: 50:4e:16:ca:31:14:3a:51:1b:80:93:37:20:77:3b:0e:cb:0b: 42:b9:13:b4:1b:dc:2b:f0:2b:d4:1f:4c:55:dd:13:5d:14:65: 80:ed:cd:0f:ee:a7:3e:e8:c1:1b:d8:4d:cf:57:cf:ee:ac:24: eb:50:46:b9:f7:47:2e:3b:3c:64:ba:49:e4:a8:97:7f:68:d9: 98:f5:ca:ef:8f:6b:01:ef:42:70:f4:af:84:b8:98:df:83:6a: 98:e4:3f:f4:82:c1:4c:63:90:49:6e:1e:78:de:00:7a:33:2f: f6:11:38:b3:34:1e:4c:d1:fe:ff:c1:38:4a:aa:82:fa:de:b0: fe:fd:36:c3:a4:ae:3f:be:f6:44:11:d8:d2:74:fd:2e:f7:47: ff:6b:0d:90:1a:6a:26:4f:c1:62:c0:5c:aa:ce:57:eb:ea:81: e0:77:32:29:52:11:6a:72:3d:d7:2b:e4:6b:85:59:f3:23:f7: 3b:d7:51:2b:87:d2:41:86:84:b4:24:e8:b9:81:45:eb:ae:b8: dd:7a:79:26:0d:34:c1:b9:49:85:59:5c:8d:9d:48:5e:8b:ff: 71:dd:c7:15 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt3WNxNmlnS8lQaQ9UO0jarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjAzMzhiN2RiNTQ0MDAyOTQxMDM5NzUxNWM5MzBlYjQ1MmQ3NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvXZ1Zsh/Uu9RHKargerZEa/jh1q 2FK5q7nLx6aSyu6kH7kpsQtYDBVr51/qR87L06B7UE0zQMnq3G5XftrXfSXMHrri zqXE03sGWqpk52zoXU/mutLTHDSsPtrRpd+iaW4ctVK7tEoZYCoylsxf/qwvvlNX Vp8vWv80H2KOGTCnXyARGGCbnquUqnPTaPujJZo/Ab5n/CMhgU18CNsoHm6bHkfk NdCDWM+G+dyDd7oRYFk58mrRIjlEGxpA6sT71aUtG+R4MmsW5ecjRED45Azi9xpc N1Gbg1wb92szJEQn467KZsb0oqGkToLZ61AJ01fzd0UirpP4ofYsRPzDXQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFJ8DOLfbVEAClBA5dRXJMOtFLXWwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzE2NjYx Yy1lNzdiLTQxYzMtODBlNC0xNGVlMzJmYzVkMDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMTY2NjFj LWU3N2ItNDFjMy04MGU0LTE0ZWUzMmZjNWQwNi8xL253TTR0OXRVUUFLVUVEbDFG Y2t3NjBVdGRiQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW9+XAwQCuVk4AwQBwnX+MA0EAgACMAcDBQMq BdWAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMMSTANBgkqhkiG9w0BAQsFAAOC AQEAgMI/J4feBDRfaKrI81v19TU+pXqmSA/NbhXGfY02jqFcZtpmUE4WyjEUOlEb gJM3IHc7DssLQrkTtBvcK/Ar1B9MVd0TXRRlgO3ND+6nPujBG9hNz1fP7qwk61BG ufdHLjs8ZLpJ5KiXf2jZmPXK749rAe9CcPSvhLiY34NqmOQ/9ILBTGOQSW4eeN4A ejMv9hE4szQeTNH+/8E4SqqC+t6w/v02w6SuP772RBHY0nT9LvdH/2sNkBpqJk/B YsBcqs5X6+qB4HcyKVIRanI91yvka4VZ8yP3O9dRK4fSQYaEtCTouYFF66643Xp5 Jg00wblJhVlcjZ1IXov/cd3HFQ== -----END CERTIFICATE-----Generated at Thu Jan 1 09:11:06 2026 by rpki-client