This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer File: NIMjF9JURDS2WeVpIHHY5MSTiwY.cer (raw, json) Hash identifier: KYVsGVYxboinzj0He5W2Tw+S/9GMWfOdp4bvXNPdwiw= Subject key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834EE7179C0CA30B5AB6145BB78518A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197893 IP: 176.28.72.0 -- 176.28.76.255 IP: 176.28.79.0/24 IP: 185.58.12.0/22 IP: 2a02:5ee0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ee:71:79:c0:ca:30:b5:ab:61:45:bb:78:51:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34832317d2544434b659e5692071d8e4c4938b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:af:80:fe:30:45:ca:4b:5e:63:94:26:46: 90:12:fa:4c:d9:d2:0a:1d:0f:03:f4:24:be:77:df: bd:8b:7a:7f:2d:81:3c:ac:be:b9:83:d2:cb:0b:69: 48:d0:0f:b4:b5:b2:c9:8c:17:04:5f:fc:f6:17:47: ba:a3:01:1e:16:82:b5:c5:d1:98:4e:45:1d:c2:23: 74:8e:ed:3f:bb:89:d8:44:86:44:e5:d1:95:40:ae: 12:4c:aa:c7:79:2c:e5:f3:59:1d:db:e1:93:05:31: d3:f1:b4:44:13:28:ca:a8:2d:34:52:c2:e7:d7:2e: e1:6b:94:24:6b:ad:bc:cc:a4:fb:a9:58:13:05:a5: 20:02:01:12:70:8c:e6:35:97:2f:a4:02:65:e0:60: 1e:b0:c4:f6:eb:6c:f4:59:23:33:d5:7f:a3:1b:43: b4:c0:c7:70:13:11:df:59:d5:31:0e:be:e8:32:76: 36:65:65:0b:d4:c2:dc:ad:b3:ab:ef:78:fe:82:3d: 4a:b0:53:cd:f2:cc:94:f4:d5:fd:b2:d8:9a:29:05: 71:fc:de:00:0d:69:af:a8:9f:89:96:0b:1f:32:cc: 0c:89:67:d4:7c:43:81:8b:ef:a5:90:02:1a:0c:d6: 6f:5a:8d:bf:30:a7:27:0d:70:7f:d7:cf:b4:53:79: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.28.72.0-176.28.76.255 176.28.79.0/24 185.58.12.0/22 IPv6: 2a02:5ee0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197893 Signature Algorithm: sha256WithRSAEncryption 81:ef:8f:b8:52:56:2c:8b:03:3b:9a:33:05:12:a5:24:26:a1: 04:68:4d:3b:0c:2f:b1:f7:ba:b5:42:6e:92:89:78:36:76:5a: d2:56:5e:f0:f5:ba:44:f5:c6:f9:c5:8f:64:1e:2c:4b:ca:f5: 98:74:4a:24:64:87:2e:ae:a4:2c:7f:f6:a0:1e:91:d2:63:ce: c8:7d:36:9d:d1:ed:48:82:51:d1:65:86:04:f2:73:12:6d:b8: 38:0f:91:e0:e4:21:90:99:6a:a1:05:70:73:c7:46:9c:6c:f4: d0:9b:df:1a:5a:67:34:bb:95:04:a3:a7:6d:74:36:fc:63:11: ef:24:cb:d0:ff:64:29:d3:b7:81:1c:6f:c5:65:f9:66:a3:72: bc:3b:b2:ef:d7:70:24:66:8e:25:e2:ec:37:b6:a9:95:f9:31: a6:38:fb:7f:dc:16:d5:51:b2:5b:a2:cd:14:62:c9:64:f0:d2: 91:94:cf:88:fd:2b:5b:bc:7a:07:d4:17:3d:9d:95:3c:4b:e8: 0e:54:33:4c:79:bb:92:15:a3:93:8f:25:92:3d:9f:02:20:11: 29:b6:a8:98:71:51:e5:4b:c1:cb:a6:c0:42:1e:49:1d:3c:30: 6b:f4:77:e1:49:38:ff:78:1a:b9:6e:f0:be:aa:f0:58:6a:31: 8c:27:41:9c -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt4NO5xecDKMLWrYUW7eFGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDgzMjMxN2QyNTQ0NDM0YjY1OWU1NjkyMDcxZDhlNGM0OTM4YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sOvgP4wRcpLXmOUJkaQEvpM2dIK HQ8D9CS+d9+9i3p/LYE8rL65g9LLC2lI0A+0tbLJjBcEX/z2F0e6owEeFoK1xdGY TkUdwiN0ju0/u4nYRIZE5dGVQK4STKrHeSzl81kd2+GTBTHT8bREEyjKqC00UsLn 1y7ha5Qka628zKT7qVgTBaUgAgEScIzmNZcvpAJl4GAesMT262z0WSMz1X+jG0O0 wMdwExHfWdUxDr7oMnY2ZWUL1MLcrbOr73j+gj1KsFPN8syU9NX9stiaKQVx/N4A DWmvqJ+JlgsfMswMiWfUfEOBi++lkAIaDNZvWo2/MKcnDXB/18+0U3nDiQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFDSDIxfSVEQ0tlnlaSBx2OTEk4sGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzVhMmVk OS04ZjhlLTRjMWQtYWFmMy0zMGM2NWFkODMyOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNWEyZWQ5 LThmOGUtNGMxZC1hYWYzLTMwYzY1YWQ4MzI5MS8xL05JTWpGOUpVUkRTMldlVnBJ SEhZNU1TVGl3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaMAwDBAOwHEgDBACwHEwDBACwHE8DBAK5OgwwDQQC AAIwBwMFACoCXuAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwUFMA0GCSqGSIb3 DQEBCwUAA4IBAQCB74+4UlYsiwM7mjMFEqUkJqEEaE07DC+x97q1Qm6SiXg2dlrS Vl7w9bpE9cb5xY9kHixLyvWYdEokZIcurqQsf/agHpHSY87IfTad0e1IglHRZYYE 8nMSbbg4D5Hg5CGQmWqhBXBzx0acbPTQm98aWmc0u5UEo6dtdDb8YxHvJMvQ/2Qp 07eBHG/FZflmo3K8O7Lv13AkZo4l4uw3tqmV+TGmOPt/3BbVUbJbos0UYslk8NKR lM+I/StbvHoH1Bc9nZU8S+gOVDNMebuSFaOTjyWSPZ8CIBEptqiYcVHlS8HLpsBC HkkdPDBr9HfhSTj/eBq5bvC+qvBYajGMJ0Gc -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:01 2026 by rpki-client