This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer File: 9NCKHhy8kJJU6ea5yTn9haJoseE.cer (raw, json) Hash identifier: JT/8okwiCXV9mazDpksWPfYNb+kBTyIn+dj+MdlmLGE= Subject key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA6B0C935933D4D0AF8FCC9D9BFEBA3D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 13:53:15 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 45.95.16.0/22 IP: 45.133.192.0/22 IP: 45.138.84.0/22 IP: 45.146.220.0/22 IP: 45.155.36.0/22 IP: 78.142.216.0/22 IP: 85.155.112.0/22 IP: 94.124.160.0/23 IP: 109.104.106.0/23 IP: 141.98.212.0/22 IP: 168.222.248.0/22 IP: 185.93.220.0/22 IP: 193.17.56.0/22 IP: 193.36.116.0/22 IP: 193.160.8.0/24 IP: 193.160.21.0/24 IP: 193.160.32.0/24 IP: 193.160.96.0/24 IP: 195.80.148.0/22 IP: 213.108.246.0/23 IP: 213.139.204.0/22 IP: 217.195.152.0/22 IP: 2a0d:9ec0::/29 IP: 2a0d:d8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:b0:c9:35:93:3d:4d:0a:f8:fc:c9:d9:bf:eb:a3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 13:53:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:97:8c:bd:38:1f:e4:22:b7:d0:e7:45:e4: 44:34:0d:72:10:62:48:69:7b:b3:5a:b8:ed:6c:2e: 61:e7:fe:9a:f8:2c:55:4c:c7:7c:ba:1b:d6:54:09: b0:02:85:48:49:34:c8:f2:ec:01:50:bd:b0:e3:a6: d3:a2:59:72:bd:9e:c2:73:4d:36:73:76:07:a2:4a: 52:7c:19:72:35:b0:9b:4e:d3:f8:ed:f1:1b:d8:31: 99:28:d1:f4:1e:1d:b9:39:25:34:76:e8:ae:90:bb: 57:22:27:36:ed:99:e0:e1:cc:07:9d:40:dc:7d:91: af:d5:d3:6a:d3:68:4f:22:c3:70:52:8c:9e:5d:95: 92:29:17:27:0e:f8:bd:7e:eb:c8:0a:de:35:06:3f: eb:80:8b:5a:ed:74:34:18:dc:97:fe:1b:f0:f4:1b: 9c:c0:e1:32:d9:4d:de:b7:36:78:ea:db:11:63:05: df:89:ee:af:0c:2a:e9:2a:fe:e1:12:ef:25:64:dd: d8:00:7f:67:0f:ec:4c:30:a2:1c:14:64:46:64:c6: 7b:17:94:bd:af:cd:39:4b:36:ed:c9:65:f1:c5:29: 2e:4c:2b:d5:28:dc:cc:ba:0d:ba:1e:ac:72:04:6c: 8c:ac:4d:ad:2b:08:b1:87:53:f4:52:21:67:99:48: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.16.0/22 45.133.192.0/22 45.138.84.0/22 45.146.220.0/22 45.155.36.0/22 78.142.216.0/22 85.155.112.0/22 94.124.160.0/23 109.104.106.0/23 141.98.212.0/22 168.222.248.0/22 185.93.220.0/22 193.17.56.0/22 193.36.116.0/22 193.160.8.0/24 193.160.21.0/24 193.160.32.0/24 193.160.96.0/24 195.80.148.0/22 213.108.246.0/23 213.139.204.0/22 217.195.152.0/22 IPv6: 2a0d:9ec0::/29 2a0d:d8c0::/29 Signature Algorithm: sha256WithRSAEncryption 31:73:ac:8f:11:dd:6d:87:8c:9b:be:c8:ec:9a:f3:36:85:ec: 65:dd:8a:df:b1:24:39:22:1e:20:8c:da:d4:41:16:72:9d:aa: ab:fc:e3:0a:63:e3:d4:93:1d:42:8d:a5:7d:24:5d:d7:bf:3c: 60:22:1a:ef:0c:6a:d7:6b:12:5a:b2:c5:d7:fc:af:cb:99:c3: d3:1f:31:9e:d2:ba:cb:8d:37:52:43:e3:7d:a7:d2:1d:54:09: 5b:6e:46:20:e0:a3:10:3e:d5:5f:c8:bc:62:1f:ba:29:43:b5: b8:e8:85:28:77:0f:87:9d:ed:d4:32:56:8a:06:f0:88:be:f4: 8b:d2:2d:a9:dc:13:29:97:9e:8d:6d:45:2b:a8:56:38:5f:14: bc:13:32:40:39:64:cd:22:d2:19:ea:42:64:80:a6:c2:14:5a: 5d:19:7d:23:73:4b:71:ca:7f:f8:05:89:4d:34:3c:61:a9:8d: 3a:29:ba:df:f3:6a:4b:69:fc:74:73:4b:8a:fd:2f:9f:5a:32: be:cf:5d:da:96:7a:3e:8a:1a:b6:13:d5:ab:88:a1:59:76:55: a9:d8:d7:61:59:b8:30:95:a9:3c:d7:d0:3a:79:45:1a:d9:c3: 89:2e:eb:fa:3a:78:b6:03:d7:37:ba:46:97:39:42:1e:5d:0d: ce:8b:c7:39 -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgISAZqmsMk1kz1NCvj8ydm/66PYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMTM1MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGQwOGExZTFjYmM5MDkyNTRlOWU2YjljOTM5ZmQ4NWEyNjhiMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN+XjL04H+Qit9DnReRENA1yEGJI aXuzWrjtbC5h5/6a+CxVTMd8uhvWVAmwAoVISTTI8uwBUL2w46bTollyvZ7Cc002 c3YHokpSfBlyNbCbTtP47fEb2DGZKNH0Hh25OSU0duiukLtXIic27Zng4cwHnUDc fZGv1dNq02hPIsNwUoyeXZWSKRcnDvi9fuvICt41Bj/rgIta7XQ0GNyX/hvw9Buc wOEy2U3etzZ46tsRYwXfie6vDCrpKv7hEu8lZN3YAH9nD+xMMKIcFGRGZMZ7F5S9 r805SzbtyWXxxSkuTCvVKNzMug26HqxyBGyMrE2tKwixh1P0UiFnmUjBRQIDAQAB o4IDHTCCAxkwHQYDVR0OBBYEFPTQih4cvJCSVOnmuck5/YWiaLHhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzY0OWZk Yy0wZDNhLTQxZWMtYTFjZS1kY2U5NDdlMjk0YjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNjQ5ZmRj LTBkM2EtNDFlYy1hMWNlLWRjZTk0N2UyOTRiNi8xLzlOQ0tIaHk4a0pKVTZlYTV5 VG45aGFKb3NlRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG3BggrBgEF BQcBBwEB/wSBpzCBpDCBiwQCAAEwgYQDBAItXxADBAIthcADBAItilQDBAItktwD BAItmyQDBAJOjtgDBAJVm3ADBAFefKADBAFtaGoDBAKNYtQDBAKo3vgDBAK5XdwD BALBETgDBALBJHQDBADBoAgDBADBoBUDBADBoCADBADBoGADBALDUJQDBAHVbPYD BALVi8wDBALZw5gwFAQCAAIwDgMFAyoNnsADBQMqDdjAMA0GCSqGSIb3DQEBCwUA A4IBAQAxc6yPEd1th4ybvsjsmvM2hexl3YrfsSQ5Ih4gjNrUQRZynaqr/OMKY+PU kx1CjaV9JF3XvzxgIhrvDGrXaxJassXX/K/LmcPTHzGe0rrLjTdSQ+N9p9IdVAlb bkYg4KMQPtVfyLxiH7opQ7W46IUodw+Hne3UMlaKBvCIvvSL0i2p3BMpl56NbUUr qFY4XxS8EzJAOWTNItIZ6kJkgKbCFFpdGX0jc0txyn/4BYlNNDxhqY06Kbrf82pL afx0c0uK/S+fWjK+z13alno+ihq2E9WriKFZdlWp2NdhWbgwlak819A6eUUa2cOJ Luv6Oni2A9c3ukaXOUIeXQ3Oi8c5 -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:42 2025 by rpki-client