This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer (raw, json) Hash identifier: KSzFii/F14DUOFw0FzEq72psz9H9d5Sy3wKxykd+NcE= Subject key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A35D8F847B1772A437181AAE4310DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.5.144.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5d:8f:84:7b:17:72:a4:37:18:1a:ae:43:10:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3763c7106a5f2640162e7980583eab5bd8008c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:fb:57:a8:86:58:f5:c3:0c:f9:3d:d6:ef: 46:0d:8a:60:8a:f1:7b:8f:8c:bd:90:aa:00:b5:93: c0:98:8e:f9:f9:11:83:1d:9c:8d:6c:2e:1f:9e:a0: 9d:20:62:a8:38:f1:b4:4e:1d:c3:7a:f3:ae:22:38: 54:8a:2f:5a:b6:64:df:16:b8:5a:1b:73:90:7f:17: f5:d4:5a:da:49:3d:f1:86:4c:80:f0:72:72:21:9a: 57:88:31:d4:a5:cd:cb:33:6c:e1:28:87:c0:6d:34: 8e:19:47:62:4a:5c:dc:35:94:04:82:d9:de:63:6a: 42:80:67:6e:5d:08:3f:83:49:ee:74:d3:af:8e:d9: d6:70:c3:f3:5f:84:dc:7a:95:1a:3b:bf:58:05:62: 8b:6a:cd:9d:d6:0b:4a:65:ba:b6:56:cb:d9:5a:5b: 55:5a:2c:16:c5:6f:f4:70:fa:7d:cb:5a:af:98:2b: 22:b7:75:e2:50:f6:b1:fc:b0:09:31:d1:d5:07:d8: 48:bc:cd:ef:0e:e6:93:be:28:6c:ca:32:01:f1:48: d8:f5:3e:ba:a2:aa:c2:6e:27:94:b2:ae:80:5b:62: d0:75:af:8d:b0:38:cc:09:78:c5:e4:00:3c:f6:0c: f3:07:d8:5e:af:67:c0:66:95:df:c9:ce:8a:c5:46: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.144.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:a2:94:43:01:85:93:ea:b7:90:c5:80:8f:63:c4:23:bb:3f: ac:aa:50:83:e8:57:cb:83:eb:e8:6c:ee:99:3d:ba:51:f2:76: a9:61:93:c9:d0:0d:98:00:c1:dd:0d:45:b8:8c:42:52:19:bc: 53:39:0e:3b:62:13:19:96:fa:63:80:f6:20:4f:51:32:b0:4f: d8:4f:19:84:9d:85:76:fb:40:13:4d:38:a7:cc:42:13:df:7e: cc:79:b8:89:70:a2:e3:54:80:40:1a:2b:2e:ba:82:95:ad:4a: 91:ae:c9:4c:c7:7c:8c:ee:ad:73:5e:bf:55:37:b5:f5:ca:38: 7e:5b:8a:b7:f8:bf:50:c8:11:8f:7d:01:a6:3a:49:c1:8c:b5: 4c:78:74:35:bd:de:e0:f1:89:43:39:22:b3:73:de:41:12:dd: 23:ae:11:bb:8c:25:00:fb:a3:d8:de:dc:41:78:0a:4b:78:e1: b4:2e:a4:dc:ff:93:e2:8d:99:bf:5c:7b:02:c4:be:af:ea:15: 82:43:37:b4:7e:b2:db:21:2a:ab:df:95:18:2b:8e:fd:94:73: c3:52:b7:15:b6:95:ba:fe:33:2f:a2:f9:55:b4:48:14:e6:97: fe:2e:cc:03:e4:8c:63:d9:f5:d5:72:8f:b5:af:e9:ab:97:52: df:5d:ff:0e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o12PhHsXcqQ3GBquQxDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzYzYzcxMDZhNWYyNjQwMTYyZTc5ODA1ODNlYWI1YmQ4MDA4YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyX7V6iGWPXDDPk91u9GDYpgivF7 j4y9kKoAtZPAmI75+RGDHZyNbC4fnqCdIGKoOPG0Th3DevOuIjhUii9atmTfFrha G3OQfxf11FraST3xhkyA8HJyIZpXiDHUpc3LM2zhKIfAbTSOGUdiSlzcNZQEgtne Y2pCgGduXQg/g0nudNOvjtnWcMPzX4TcepUaO79YBWKLas2d1gtKZbq2VsvZWltV WiwWxW/0cPp9y1qvmCsit3XiUPax/LAJMdHVB9hIvM3vDuaTvihsyjIB8UjY9T66 oqrCbieUsq6AW2LQda+NsDjMCXjF5AA89gzzB9her2fAZpXfyc6KxUbvswIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDdjxxBqXyZAFi55gFg+q1vYAIxFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzMzNTQx YS1mOWFjLTQ3NWEtYjI5Ny04OGEwZTQ1MGExN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMzM1NDFh LWY5YWMtNDc1YS1iMjk3LTg4YTBlNDUwYTE3Yi8xL04yUEhFR3BmSmtBV0xubUFX RDZyVzlnQWpFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQWQMA0GCSqGSIb3DQEBCwUAA4IBAQBLopRD AYWT6reQxYCPY8Qjuz+sqlCD6FfLg+vobO6ZPbpR8napYZPJ0A2YAMHdDUW4jEJS GbxTOQ47YhMZlvpjgPYgT1EysE/YTxmEnYV2+0ATTTinzEIT337MebiJcKLjVIBA GisuuoKVrUqRrslMx3yM7q1zXr9VN7X1yjh+W4q3+L9QyBGPfQGmOknBjLVMeHQ1 vd7g8YlDOSKzc95BEt0jrhG7jCUA+6PY3txBeApLeOG0LqTc/5PijZm/XHsCxL6v 6hWCQze0frLbISqr35UYK479lHPDUrcVtpW6/jMvovlVtEgU5pf+LswD5Ixj2fXV co+1r+mrl1LfXf8O -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:39 2026 by rpki-client