This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer File: nz-YcVNtYL90vfaQYMkNVBB9jjg.cer (raw, json) Hash identifier: aMRoHfg5y0RHIWOG0OTHiUcsXQEHBAuS2jRJmexSkTo= Subject key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E439F1AEAF4E781F7C4EE213E2204 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.254.128.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:43:9f:1a:ea:f4:e7:81:f7:c4:ee:21:3e:22:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:ba:e1:66:b4:13:16:00:8d:b0:01:e6:ba: 5b:ec:0b:35:95:93:b8:c6:d2:72:22:6e:34:36:2b: 65:cd:e0:81:b4:d4:d4:9f:1e:12:3a:fd:17:31:94: 79:e9:76:95:e2:07:6d:d7:6a:94:b0:76:10:e3:27: 36:a6:ac:30:5e:6d:42:c6:7a:70:44:5c:f7:d6:76: f8:29:06:f0:67:13:b5:00:c6:6e:f5:b1:68:f0:d0: 91:9a:24:32:b9:a4:f0:2c:20:4c:01:63:40:60:7b: d6:d9:29:2e:4f:24:50:b7:e0:79:b1:d1:d0:d1:22: 5f:05:3d:1e:36:04:7d:e8:3d:84:e0:fb:f4:78:2d: 63:af:22:78:8a:a5:7c:81:20:5b:f0:7e:42:6c:b0: 83:c0:6d:8e:78:92:5b:1b:ee:52:57:f9:3d:8c:22: 3c:25:ab:35:6d:90:bf:51:75:ee:ba:9c:8d:d0:dc: 3d:6d:23:97:ce:29:65:77:bf:21:91:54:7b:cc:5c: 19:ef:a0:de:59:df:8f:33:c6:2a:b4:71:0e:43:3a: 5e:ee:71:99:47:10:6c:22:51:3c:da:fc:af:79:41: 9a:c8:21:30:e8:36:0b:b3:34:cd:0c:5d:9c:a8:50: 2d:1c:e9:8e:30:2c:12:36:2a:49:19:a2:b8:96:b5: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.128.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:ea:c5:a6:34:4b:4d:1f:48:20:c9:dc:8a:1d:00:e4:6f:b6: 5d:cf:86:04:5b:6e:00:8b:ab:e2:d7:51:7d:ce:2d:7b:51:27: e2:bc:6c:ee:ec:49:0f:6a:dd:67:c1:27:3a:f2:ff:a5:00:90: 4e:cd:43:58:07:02:27:c7:68:6f:cb:c3:7b:16:d2:49:a9:87: 93:8f:36:db:98:f2:c3:c3:cc:88:8e:81:96:65:eb:cb:70:ce: 0a:17:ac:4b:c1:d3:be:99:00:e1:d6:6a:84:84:07:53:f4:86: 01:57:82:a9:c6:5c:52:2e:a1:e2:c8:15:e4:43:87:bd:8f:f7: bf:dc:ad:05:99:5e:1c:6e:60:da:e8:ea:a0:4c:09:5f:bd:dc: 2c:e8:31:ba:24:dd:75:8a:97:ca:a5:81:e8:e5:0a:fd:c8:34: 72:ec:7e:b8:c3:60:c1:4b:58:12:c3:10:60:3b:e0:82:8b:99: 5f:27:c0:25:d3:45:03:00:fa:e0:a1:19:8e:43:ab:cc:9d:c0: f7:f6:9b:e2:07:82:dd:81:51:e3:35:a6:be:65:e0:6a:62:17: 8c:ad:04:23:e8:27:3e:68:96:ee:2a:b8:04:99:f0:10:3f:e7: 74:1d:50:a8:e3:a5:ab:3c:1c:30:96:f7:1c:db:fc:ae:6f:19: 9b:9e:36:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fkOfGur054H3xO4hPiIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjNmOTg3MTUzNmQ2MGJmNzRiZGY2OTA2MGM5MGQ1NDEwN2Q4ZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi664Wa0ExYAjbAB5rpb7As1lZO4 xtJyIm40NitlzeCBtNTUnx4SOv0XMZR56XaV4gdt12qUsHYQ4yc2pqwwXm1Cxnpw RFz31nb4KQbwZxO1AMZu9bFo8NCRmiQyuaTwLCBMAWNAYHvW2SkuTyRQt+B5sdHQ 0SJfBT0eNgR96D2E4Pv0eC1jryJ4iqV8gSBb8H5CbLCDwG2OeJJbG+5SV/k9jCI8 Jas1bZC/UXXuupyN0Nw9bSOXzilld78hkVR7zFwZ76DeWd+PM8YqtHEOQzpe7nGZ RxBsIlE82vyveUGayCEw6DYLszTNDF2cqFAtHOmOMCwSNipJGaK4lrXMdQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJ8/mHFTbWC/dL32kGDJDVQQfY44MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2Y2YmJk My1hZTI3LTRkYzctYjY2OS1jNTI2M2IzMzAzYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZjZiYmQz LWFlMjctNGRjNy1iNjY5LWM1MjYzYjMzMDNiOS8xL256LVljVk50WUw5MHZmYVFZ TWtOVkJCOWpqZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuf6AMA0GCSqGSIb3DQEBCwUAA4IBAQB66sWm NEtNH0ggydyKHQDkb7Zdz4YEW24Ai6vi11F9zi17USfivGzu7EkPat1nwSc68v+l AJBOzUNYBwInx2hvy8N7FtJJqYeTjzbbmPLDw8yIjoGWZevLcM4KF6xLwdO+mQDh 1mqEhAdT9IYBV4KpxlxSLqHiyBXkQ4e9j/e/3K0FmV4cbmDa6OqgTAlfvdws6DG6 JN11ipfKpYHo5Qr9yDRy7H64w2DBS1gSwxBgO+CCi5lfJ8Al00UDAPrgoRmOQ6vM ncD39pviB4LdgVHjNaa+ZeBqYheMrQQj6Cc+aJbuKrgEmfAQP+d0HVCo46WrPBww lvcc2/yubxmbnjZF -----END CERTIFICATE-----Generated at Mon Jan 12 07:42:37 2026 by rpki-client