This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer File: nzbQijzYpC9Goslt_XLtjO4nlHc.cer (raw, json) Hash identifier: H5pOOxx/WrKYNjLkG9UVGEBHH/RgriCu3CxIMuLxRZQ= Subject key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1534162DC3CD697860955E41DC6ED5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50467 AS: 50994 AS: 60317 IP: 31.134.48.0/20 IP: 46.151.16.0/21 IP: 87.239.168.0/21 IP: 91.221.88.0/23 IP: 109.95.112.0/21 IP: 109.95.144.0/21 IP: 178.218.224.0/20 IP: 185.235.76.0/24 IP: 193.106.208.0/23 IP: 193.200.133.0/24 IP: 2a0c:db00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:34:16:2d:c3:cd:69:78:60:95:5e:41:dc:6e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:13:ee:44:b6:64:ec:aa:b2:13:4d:5e:1f: 23:65:7d:34:70:80:32:2d:f4:ea:60:79:3f:ed:95: 11:de:cc:e6:6d:74:d5:c4:07:79:23:62:59:5b:6c: 9b:03:40:6f:be:51:2a:f3:62:24:ed:0a:e4:1d:0d: 5e:f1:f7:41:10:84:8e:74:65:4e:8f:64:12:17:bf: 84:77:0b:24:a6:76:bb:0a:0f:c4:47:f1:48:1a:2a: 15:d4:57:6c:b3:da:13:a1:b2:d8:cf:b8:76:82:42: f6:e9:d4:2d:88:27:ae:8d:15:d1:7e:2d:7e:10:d6: 64:20:54:75:63:2b:ad:c0:9d:60:97:0a:b2:a7:bc: 93:4c:57:84:52:ac:77:a2:ee:21:1c:94:24:d6:38: a0:df:7e:49:e2:61:9e:a8:0d:68:99:59:a8:87:36: 34:6e:37:1b:8a:e4:e1:07:36:63:01:66:dc:75:27: ab:ae:e5:d9:93:3f:7a:11:fa:7a:f1:3b:ad:e6:e9: e2:35:ac:ea:17:35:86:96:ca:cf:ee:3f:56:83:e3: e3:9f:d6:d2:de:94:0c:1b:f8:e6:a1:58:c0:20:25: c3:2f:a6:58:2c:17:85:00:fd:f2:66:dc:38:1e:9f: 4e:7c:c4:b8:58:09:c8:dd:bc:ec:ce:72:78:36:78: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.48.0/20 46.151.16.0/21 87.239.168.0/21 91.221.88.0/23 109.95.112.0/21 109.95.144.0/21 178.218.224.0/20 185.235.76.0/24 193.106.208.0/23 193.200.133.0/24 IPv6: 2a0c:db00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50467 50994 60317 Signature Algorithm: sha256WithRSAEncryption 25:f9:62:c2:9e:d0:83:0b:7e:6a:aa:93:a9:54:9a:8e:e7:6e: 9d:4b:b7:6a:78:11:f7:e8:d6:84:0f:14:03:6d:a6:6a:7e:21: f6:00:93:2a:bb:fa:c1:3a:12:17:57:05:de:13:75:33:c6:d5: d2:c5:ab:36:f2:ec:15:7c:f9:9e:a5:ac:a7:eb:77:bb:78:0a: 68:a4:ec:e0:53:84:e6:2a:71:0f:6d:7c:80:55:67:dd:77:ee: 6b:6b:f7:8f:8e:79:39:15:e9:81:30:85:f0:00:3f:43:53:46: 25:45:15:8d:4b:05:7c:5e:4c:c3:07:fa:05:ba:4d:cd:ce:c3: 10:ea:83:73:ba:29:05:f5:98:bc:de:61:23:53:32:81:ce:d3: 40:2a:f5:0c:57:e4:01:2d:46:fd:cb:cd:e7:9a:e3:df:d3:5d: 6a:72:0e:b5:a5:ac:24:4b:d6:c0:4f:f4:67:cb:45:7c:7b:76: b9:88:55:31:cc:2f:57:49:53:39:a5:db:ce:1f:85:95:94:63: 9b:4d:17:f6:d6:f3:fc:0c:d2:54:d7:1a:04:de:bb:8b:0e:1f: 2c:f5:09:b0:c2:53:e1:0c:ed:e6:3b:3f:a0:b8:5c:36:74:f8: fe:fd:ed:60:55:28:fd:de:81:41:dc:49:7c:e3:d0:b5:5f:68: b2:09:62:ec -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZt/FTQWLcPNaXhglV5B3G7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjM2ZDA4YTNjZDhhNDJmNDZhMmM5NmRmZDcyZWQ4Y2VlMjc5NDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQcT7kS2ZOyqshNNXh8jZX00cIAy LfTqYHk/7ZUR3szmbXTVxAd5I2JZW2ybA0BvvlEq82Ik7QrkHQ1e8fdBEISOdGVO j2QSF7+Edwskpna7Cg/ER/FIGioV1Fdss9oTobLYz7h2gkL26dQtiCeujRXRfi1+ ENZkIFR1YyutwJ1glwqyp7yTTFeEUqx3ou4hHJQk1jig335J4mGeqA1omVmohzY0 bjcbiuThBzZjAWbcdSerruXZkz96Efp68Tut5uniNazqFzWGlsrP7j9Wg+Pjn9bS 3pQMG/jmoVjAICXDL6ZYLBeFAP3yZtw4Hp9OfMS4WAnI3bzsznJ4Nni4vQIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFJ820Io82KQvRqLJbf1y7YzuJ5R3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzJmYmJh Ny1lYTBlLTQwODktOTcyNy1jMzMzNzJjOWQ1MDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMmZiYmE3 LWVhMGUtNDA4OS05NzI3LWMzMzM3MmM5ZDUwNy8xL256YlFpanpZcEM5R29zbHRf WEx0ak80bmxIYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQEH4YwAwQDLpcQAwQDV++oAwQBW91YAwQDbV9w AwQDbV+QAwQEstrgAwQAuetMAwQBwWrQAwQAwciFMA0EAgACMAcDBQMqDNsAMCQG CCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDFIwIDAMcyAgMA650wDQYJKoZIhvcNAQEL BQADggEBACX5YsKe0IMLfmqqk6lUmo7nbp1Lt2p4Effo1oQPFANtpmp+IfYAkyq7 +sE6EhdXBd4TdTPG1dLFqzby7BV8+Z6lrKfrd7t4Cmik7OBThOYqcQ9tfIBVZ913 7mtr94+OeTkV6YEwhfAAP0NTRiVFFY1LBXxeTMMH+gW6Tc3OwxDqg3O6KQX1mLze YSNTMoHO00Aq9QxX5AEtRv3Lzeea49/TXWpyDrWlrCRL1sBP9GfLRXx7drmIVTHM L1dJUzml284fhZWUY5tNF/bW8/wM0lTXGgTeu4sOHyz1CbDCU+EM7eY7P6C4XDZ0 +P797WBVKP3egUHcSXzj0LVfaLIJYuw= -----END CERTIFICATE-----Generated at Sun Jan 11 23:39:45 2026 by rpki-client