This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer File: nyvDxVZNQ0OBy3i6R61Yvk096qg.cer (raw, json) Hash identifier: FrRBL1E4PuSKIPgKOyRksKdwHILOZqVkhx1SG8s/CGU= Subject key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CFF9C2F680C269F63E6DC02B90C92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43024 AS: 199231 IP: 77.95.16.0/22 IP: 185.4.228.0/22 IP: 2a02:c5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ff:9c:2f:68:0c:26:9f:63:e6:dc:02:b9:0c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:36:26:a6:d8:c0:a5:27:de:5e:f6:93:ff: ef:9a:31:7e:8b:9f:35:d9:27:b8:d9:38:b6:8a:f2: 4a:62:31:25:2c:e1:33:7a:62:35:6b:78:85:25:f5: f6:9f:f0:d5:eb:8a:41:33:d0:d4:05:48:31:df:ec: 55:2d:d1:f7:b3:fb:9c:ff:03:3d:f7:4d:dd:ac:fc: 4e:5a:7c:bd:00:9f:f7:4b:46:0c:a1:98:5c:32:eb: 9e:f6:d1:76:c6:44:da:04:c2:e8:b3:c5:d2:16:12: 36:23:24:74:f6:eb:c9:03:da:7f:81:9e:9e:d2:29: 60:21:64:17:1f:21:e7:fd:52:f2:75:bc:62:92:51: 6f:a7:3d:9d:08:fc:2b:4e:16:ba:9d:7a:50:74:55: f2:a6:70:1e:e5:ce:20:2c:63:ea:ef:34:3d:4b:f6: 9c:a0:d7:f9:65:19:bc:56:34:c0:da:62:48:b7:40: c3:4d:93:76:eb:a8:64:3a:f5:bb:c1:b5:4d:76:b7: d4:b1:79:35:3b:75:26:37:45:df:89:fb:5a:27:40: 3f:92:54:5f:81:45:a7:b0:3d:d6:26:15:07:37:00: ec:fb:65:36:74:1e:73:4c:bd:9a:11:7a:90:fb:86: 0e:81:49:2a:e8:a1:04:14:ed:1d:df:7e:f1:90:43: e6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.16.0/22 185.4.228.0/22 IPv6: 2a02:c5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43024 199231 Signature Algorithm: sha256WithRSAEncryption 6f:d4:17:95:14:80:fd:ff:5a:42:a2:ee:32:f6:1d:be:b3:fd: bb:e8:87:1d:c4:d9:b1:0e:73:7f:e3:4b:c3:d8:a6:62:dd:06: 7b:20:5c:a6:01:22:f6:58:ac:6b:e5:3a:cb:46:da:57:38:d2: 3f:a4:4c:4f:9f:72:3a:d8:91:64:30:96:28:b0:62:28:cd:63: 2d:dd:19:52:3b:3a:36:55:ff:6e:2b:30:61:96:d6:35:0d:c5: 3e:3f:1f:5f:b2:6a:fa:17:10:a6:38:72:46:be:4f:9e:08:9d: c5:17:54:69:45:81:12:29:33:2c:a9:60:b8:9c:e1:97:c3:b7: 0c:4c:25:92:97:99:ca:aa:40:e1:4e:11:85:ad:c8:a4:ab:fc: ad:ac:e2:cb:7b:a7:0f:9c:12:ff:4c:96:53:7c:d7:f6:bf:e1: 35:7b:c7:5f:07:2c:f6:7f:98:61:e8:62:16:d8:3f:2f:c8:f7: 80:d2:73:27:ac:4c:d2:b5:4e:63:14:64:08:47:0e:85:36:83: e1:43:5e:69:2c:3a:bf:ed:fe:03:3f:1e:8b:16:3c:0d:e5:3a: c5:be:22:31:a4:3e:23:0e:ab:50:91:34:14:30:6a:18:57:70: c3:76:e1:e9:cb:b9:78:70:78:e8:e7:95:2b:49:2a:84:df:b8: ba:15:30:d4 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt9XP+cL2gMJp9j5twCuQySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjJiYzNjNTU2NGQ0MzQzODFjYjc4YmE0N2FkNThiZTRkM2RlYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvc2JqbYwKUn3l72k//vmjF+i581 2Se42Ti2ivJKYjElLOEzemI1a3iFJfX2n/DV64pBM9DUBUgx3+xVLdH3s/uc/wM9 903drPxOWny9AJ/3S0YMoZhcMuue9tF2xkTaBMLos8XSFhI2IyR09uvJA9p/gZ6e 0ilgIWQXHyHn/VLydbxiklFvpz2dCPwrTha6nXpQdFXypnAe5c4gLGPq7zQ9S/ac oNf5ZRm8VjTA2mJIt0DDTZN266hkOvW7wbVNdrfUsXk1O3UmN0XfiftaJ0A/klRf gUWnsD3WJhUHNwDs+2U2dB5zTL2aEXqQ+4YOgUkq6KEEFO0d337xkEPmAwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFJ8rw8VWTUNDgct4uketWL5NPeqoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzM2YmI2 ZC1mYzczLTQ0NDktYTUyNy01NTQyNjM4MTk1M2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMzZiYjZk LWZjNzMtNDQ0OS1hNTI3LTU1NDI2MzgxOTUzYy8xL255dkR4VlpOUTBPQnkzaTZS NjFZdmswOTZxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCTV8QAwQCuQTkMA0EAgACMAcDBQMqAsXAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCoEAIDAwo/MA0GCSqGSIb3DQEBCwUAA4IB AQBv1BeVFID9/1pCou4y9h2+s/276IcdxNmxDnN/40vD2KZi3QZ7IFymASL2WKxr 5TrLRtpXONI/pExPn3I62JFkMJYosGIozWMt3RlSOzo2Vf9uKzBhltY1DcU+Px9f smr6FxCmOHJGvk+eCJ3FF1RpRYESKTMsqWC4nOGXw7cMTCWSl5nKqkDhThGFrcik q/ytrOLLe6cPnBL/TJZTfNf2v+E1e8dfByz2f5hh6GIW2D8vyPeA0nMnrEzStU5j FGQIRw6FNoPhQ15pLDq/7f4DPx6LFjwN5TrFviIxpD4jDqtQkTQUMGoYV3DDduHp y7l4cHjo55UrSSqE37i6FTDU -----END CERTIFICATE-----Generated at Tue Jan 13 03:56:11 2026 by rpki-client