This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer (raw, json) Hash identifier: HxSdfvJ0FebcNF8CpQgcjHq+dZ79lUTec4d7pdjR2pg= Subject key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12E5AEFBAAF559494FB5BF9FD99352 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49263 AS: 56726 AS: 57014 AS: 59816 IP: 185.70.132.0/22 IP: 185.241.36.0/22 IP: 185.251.224.0/22 IP: 185.254.88.0/22 IP: 194.147.120.0/22 IP: 2a05:2a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e5:ae:fb:aa:f5:59:49:4f:b5:bf:9f:d9:93:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:02:f9:1f:d1:4c:60:41:7d:98:00:67:fc: e2:e8:d9:75:ec:11:6a:c4:a3:ac:bd:5b:ff:d7:d2: db:8c:51:40:39:5a:06:2a:db:39:2a:8c:99:6d:23: c4:2a:56:e2:18:ba:49:32:76:3b:44:a7:98:54:34: 4d:28:64:35:50:3e:ee:64:75:1a:f4:7b:00:37:36: 7e:b2:47:e8:68:5b:be:58:28:65:71:b7:94:07:c9: 4e:d8:c4:21:73:5c:71:4c:68:e3:f3:e5:26:f5:b3: cb:16:50:b0:94:25:b3:b2:31:0f:48:5f:54:5e:7d: 13:8e:6d:63:33:61:8b:68:3f:2d:89:0a:a7:aa:a3: 9c:18:54:4b:db:d4:e6:94:4e:e9:cc:f7:a5:d8:41: da:42:e7:72:ed:d4:41:2f:36:35:31:77:65:f4:94: c5:7b:ae:75:76:ce:0b:9e:ec:c4:0d:42:87:c5:71: c8:2f:95:b3:27:48:7e:83:2a:4f:c5:8d:2e:f9:55: be:2b:f4:aa:99:5a:c9:fb:5c:48:6b:a8:3d:e1:92: 48:df:5b:e6:3e:ee:3c:f6:28:86:ef:d2:52:56:10: 8b:46:02:a2:55:95:2b:b1:f3:7a:02:11:9d:bc:58: 63:f6:d5:d9:fe:1b:0d:3b:8a:6f:81:98:ce:ee:45: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.132.0/22 185.241.36.0/22 185.251.224.0/22 185.254.88.0/22 194.147.120.0/22 IPv6: 2a05:2a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49263 56726 57014 59816 Signature Algorithm: sha256WithRSAEncryption 56:24:5a:22:33:0f:bf:52:4c:75:82:dc:57:f2:f9:dc:16:eb: 5a:a4:d9:e1:33:be:b0:61:6a:63:7e:85:3a:0e:6b:cc:2e:56: 14:b1:2b:8d:49:ad:68:cd:aa:26:dd:07:5c:d6:3d:5f:c6:39: 4f:d3:e6:3a:b4:af:8f:37:57:30:02:63:19:53:c2:29:75:93: 6b:a6:a9:dd:52:f0:b4:57:c2:6a:80:d9:cc:69:b0:88:61:67: 16:d1:69:f9:fc:e7:31:f4:e2:38:3d:48:26:af:16:06:3e:a6: 08:03:f0:1d:d0:84:35:f1:39:a1:ee:4f:91:bc:f3:1b:0d:5d: 0d:c9:32:90:08:95:56:8a:2f:6a:95:1c:b1:c5:e5:16:e4:7d: b1:69:ac:cb:90:4c:ee:ea:7b:d0:09:49:a6:ed:88:e7:14:6d: 13:1a:5b:73:e1:00:62:1a:15:a1:8f:b2:bf:1c:89:89:fa:25: a1:3f:c4:d0:07:29:9a:3e:f2:9f:8e:9b:a0:a2:bf:57:04:88: ad:ca:b6:98:b2:77:3c:71:e7:1c:08:f6:97:84:d1:e4:ae:d7: 1e:04:dc:be:d0:62:5d:b8:99:4f:b3:7c:2d:49:fa:8b:fd:96: dc:28:88:1f:f9:a5:51:e9:32:c8:82:e6:55:e9:d2:1d:1d:d3: a6:db:32:a8 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt8EuWu+6r1WUlPtb+f2ZNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDJlNjUzNmIyZTc0MjIwZWY0YjA5MmJjMDkwY2M0YzI1MGYzZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM8C+R/RTGBBfZgAZ/zi6Nl17BFq xKOsvVv/19LbjFFAOVoGKts5KoyZbSPEKlbiGLpJMnY7RKeYVDRNKGQ1UD7uZHUa 9HsANzZ+skfoaFu+WChlcbeUB8lO2MQhc1xxTGjj8+Um9bPLFlCwlCWzsjEPSF9U Xn0Tjm1jM2GLaD8tiQqnqqOcGFRL29TmlE7pzPel2EHaQudy7dRBLzY1MXdl9JTF e651ds4LnuzEDUKHxXHIL5WzJ0h+gypPxY0u+VW+K/SqmVrJ+1xIa6g94ZJI31vm Pu489iiG79JSVhCLRgKiVZUrsfN6AhGdvFhj9tXZ/hsNO4pvgZjO7kXz0wIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFDQuZTay50Ig70sJK8CQzEwlDz7WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2Y5NDYy Yi0zNzQ5LTQ0YmItODRlZS1lY2Q4YTI0NzRhMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjk0NjJi LTM3NDktNDRiYi04NGVlLWVjZDhhMjQ3NGEwMi8xL05DNWxOckxuUWlEdlN3a3J3 SkRNVENVUFB0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCuUaEAwQCufEkAwQCufvgAwQCuf5YAwQCwpN4 MA0EAgACMAcDBQMqBSoAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwDAbwIDAN2W AgMA3rYCAwDpqDANBgkqhkiG9w0BAQsFAAOCAQEAViRaIjMPv1JMdYLcV/L53Bbr WqTZ4TO+sGFqY36FOg5rzC5WFLErjUmtaM2qJt0HXNY9X8Y5T9PmOrSvjzdXMAJj GVPCKXWTa6ap3VLwtFfCaoDZzGmwiGFnFtFp+fznMfTiOD1IJq8WBj6mCAPwHdCE NfE5oe5PkbzzGw1dDckykAiVVoovapUcscXlFuR9sWmsy5BM7up70AlJpu2I5xRt Expbc+EAYhoVoY+yvxyJifoloT/E0Acpmj7yn46boKK/VwSIrcq2mLJ3PHHnHAj2 l4TR5K7XHgTcvtBiXbiZT7N8LUn6i/2W3CiIH/mlUekyyILmVenSHR3TptsyqA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:54 2026 by rpki-client