This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer (raw, json) Hash identifier: d5zLfpT1kLqlhrMSXh1k5wASHrX1m4/DTjbeTPDNAfY= Subject key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D6EDA56C6CBC0DFFCF5974A46AF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42170 AS: 43395 AS: 47162 AS: 47990 IP: 185.145.184.0/22 IP: 185.186.48.0/22 IP: 2a09:2a00::/29 IP: 2a09:2e00::/29 IP: 2a0a:2440::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d6:ed:a5:6c:6c:bc:0d:ff:cf:59:74:a4:6a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344fdad10ee55b3282a64246a41dc61a8922d25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:73:4f:0a:fa:f0:86:aa:27:ca:72:f9:a7: d3:ff:5d:73:c5:32:8c:99:ef:84:c4:b6:04:0b:ca: 71:57:ea:58:8a:22:12:55:bc:32:c2:53:44:0b:3a: c3:1d:31:31:cc:ec:40:a2:00:34:23:6c:4c:0e:28: 7c:9c:c3:de:84:9e:a4:c2:01:b3:47:4a:51:78:c7: d3:cf:a5:9b:f9:e4:91:46:db:b0:1c:56:e5:1e:56: 59:9c:61:29:b2:26:c1:17:f3:43:92:95:2e:4b:bf: 6c:d1:5e:86:80:dc:a5:f1:c1:b9:3d:37:e2:ec:b0: 9b:bb:81:1f:fa:1d:ae:90:05:6d:bc:f8:b2:09:63: 55:97:33:45:65:bd:dd:95:59:c9:0e:17:b3:3d:25: d2:e7:13:51:eb:02:a1:5a:9c:0e:4e:79:32:21:8e: 73:18:67:5e:7a:f0:73:d0:4c:9c:19:b4:49:a1:59: 78:f8:19:14:a7:b5:2b:c1:dd:4d:36:a2:ca:7a:6c: e0:f8:5d:da:8e:34:ff:59:62:97:35:d7:73:f9:00: e5:15:96:e7:08:b7:88:f1:5c:3e:95:bb:f9:e8:05: 0c:58:06:31:3d:e1:77:fa:37:24:88:e7:05:01:66: 99:47:fe:a6:f2:dc:0e:31:30:9b:49:48:e9:d8:41: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.184.0/22 185.186.48.0/22 IPv6: 2a09:2a00::/29 2a09:2e00::/29 2a0a:2440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42170 43395 47162 47990 Signature Algorithm: sha256WithRSAEncryption 23:6b:77:0c:77:09:63:f4:e4:7d:7c:02:a3:21:16:86:d9:7e: 05:cb:7a:39:3f:58:81:24:8d:38:e1:e3:a5:aa:b3:28:6a:f2: 14:8a:ce:cc:48:76:d3:7b:7f:2c:00:11:ef:ef:cf:82:1a:71: c9:a7:0c:94:a1:c5:25:6e:ca:99:1a:22:ef:cc:3f:40:54:49: 42:1b:48:67:27:8b:55:7b:a8:33:14:e4:d8:e5:f0:13:84:34: 27:27:79:7a:8e:58:50:1f:f2:b2:29:f0:f0:44:ee:22:45:fa: 72:4f:7c:8f:5b:1e:f3:8c:ea:98:7b:e9:d8:2b:16:8f:fa:a6: d9:32:a4:3c:56:cd:6f:6b:2c:b2:19:a8:ae:bb:71:7b:f8:ca: 23:84:5e:d8:ec:8e:53:5a:1b:51:dc:e0:67:99:67:39:e5:fc: 57:dd:4c:37:3f:43:9a:f5:bb:a9:c7:57:aa:2e:11:8d:cb:af: 2b:94:33:30:a5:64:fc:a5:30:dd:35:15:26:a8:4f:cc:65:10: af:fd:5b:c2:a1:e4:ff:cf:47:e5:47:d5:5b:64:3a:10:70:fe: 13:00:44:2c:65:66:13:2a:20:57:63:3e:15:2a:85:c5:2b:6d: 30:8c:5a:ae:5b:23:cf:6a:0e:9d:b3:35:4a:10:fa:be:cb:aa: e7:3d:cc:0f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt3WNbtpWxsvA3/z1l0pGrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRmZGFkMTBlZTU1YjMyODJhNjQyNDZhNDFkYzYxYTg5MjJkMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoglzTwr68IaqJ8py+afT/11zxTKM me+ExLYEC8pxV+pYiiISVbwywlNECzrDHTExzOxAogA0I2xMDih8nMPehJ6kwgGz R0pReMfTz6Wb+eSRRtuwHFblHlZZnGEpsibBF/NDkpUuS79s0V6GgNyl8cG5PTfi 7LCbu4Ef+h2ukAVtvPiyCWNVlzNFZb3dlVnJDhezPSXS5xNR6wKhWpwOTnkyIY5z GGdeevBz0EycGbRJoVl4+BkUp7Urwd1NNqLKemzg+F3ajjT/WWKXNddz+QDlFZbn CLeI8Vw+lbv56AUMWAYxPeF3+jckiOcFAWaZR/6m8twOMTCbSUjp2EG7YwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFDRP2tEO5VsygqZCRqQdxhqJItJdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzA2NzYz MC0zMDZlLTRjMzctOGJjYy00ZjAyMWM3M2VmNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvMDY3NjMw LTMwNmUtNGMzNy04YmNjLTRmMDIxYzczZWY3NC8xL05FX2EwUTdsV3pLQ3BrSkdw QjNHR29raTBsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTASBAIAATAMAwQCuZG4AwQCubowMBsEAgACMBUDBQMqCSoAAwUD KgkuAAMFACoKJEAwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAIDAKS6AgMAqYMCAwC4 OgIDALt2MA0GCSqGSIb3DQEBCwUAA4IBAQAja3cMdwlj9OR9fAKjIRaG2X4Fy3o5 P1iBJI044eOlqrMoavIUis7MSHbTe38sABHv78+CGnHJpwyUocUlbsqZGiLvzD9A VElCG0hnJ4tVe6gzFOTY5fAThDQnJ3l6jlhQH/KyKfDwRO4iRfpyT3yPWx7zjOqY e+nYKxaP+qbZMqQ8Vs1vayyyGaiuu3F7+MojhF7Y7I5TWhtR3OBnmWc55fxX3Uw3 P0Oa9bupx1eqLhGNy68rlDMwpWT8pTDdNRUmqE/MZRCv/VvCoeT/z0flR9VbZDoQ cP4TAEQsZWYTKiBXYz4VKoXFK20wjFquWyPPag6dszVKEPq+y6rnPcwP -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:52 2026 by rpki-client