This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer File: NJHAkpom6NmRn0lXz3p2RPaA3So.cer (raw, json) Hash identifier: Mtx51hVVlVNZtSw9PyWfaZLjhNgjpVm2cpoEv+wJrUU= Subject key identifier: 34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7D3A41A029D0C1B3105E478A716C2A68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 13 Nov 2025 12:39:21 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 49823 IP: 109.72.208.0/20 IP: 194.1.180.0/24 IP: 2a07:840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:3a:41:a0:29:d0:c1:b3:10:5e:47:8a:71:6c:2a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 13 12:39:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:ae:00:36:05:58:0f:3c:88:bc:a9:b1:33: 87:80:b6:8a:3b:13:30:bd:a6:1b:bb:3b:f2:f4:a2: 82:90:5b:ed:42:f4:9d:e1:46:57:a6:d6:e5:f9:65: d4:3a:ba:08:be:7b:9b:03:9c:8b:fd:20:b1:b7:1e: 67:74:e3:64:2c:ff:3a:32:1b:99:ca:44:e6:ec:89: cd:56:e0:a4:50:6d:e6:f4:01:12:47:03:21:df:5e: 68:1d:e2:d3:27:33:8b:32:61:8a:71:cb:12:ad:f3: ed:82:1b:3b:5b:ed:db:ee:61:51:30:ac:b6:d5:4d: c0:4b:29:eb:99:80:0c:79:68:f5:be:4a:1b:c7:70: 8a:81:47:77:56:74:78:25:fe:34:8e:84:be:d2:7b: 50:15:06:6c:ac:1f:56:6d:78:af:59:d2:4f:7e:f4: b9:c1:c9:c3:fa:29:a3:a8:80:4a:b9:d6:e2:a9:1d: b8:4c:25:88:7a:01:a2:cc:38:4f:ba:3a:9f:a4:21: dc:5e:77:dc:f3:4b:55:1a:8b:b6:32:29:84:4a:f7: 25:f8:14:57:a9:8a:48:43:40:01:11:a7:e5:fe:19: 73:36:4b:75:1a:4a:6a:6a:70:62:81:a8:1b:ac:59: 5f:66:81:67:8b:4b:2e:69:f3:6f:a3:54:a4:5e:19: 8b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.208.0/20 194.1.180.0/24 IPv6: 2a07:840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49823 Signature Algorithm: sha256WithRSAEncryption 24:59:95:76:7d:f5:bc:b3:32:a3:77:8a:aa:6d:1c:31:ce:05: aa:02:5b:c8:40:39:c4:8e:01:5b:6f:6b:0b:76:e2:ca:6f:5b: 91:ff:d8:7b:6f:98:ea:72:2f:d8:4c:ed:0e:35:5d:69:03:53: a4:b2:41:78:b1:06:fb:74:d3:04:b2:93:0e:94:31:c9:09:04: 4e:ba:d5:f6:4b:c9:37:f6:86:a4:ba:7f:a7:6f:ec:a9:c9:08: d7:ad:18:20:90:f9:c8:d0:de:9a:1d:e0:1c:38:29:0e:5f:53: 8b:51:1b:93:67:f8:46:9b:71:b1:51:ae:69:69:97:23:f4:f3: a2:b0:be:bc:08:28:5a:fc:74:50:18:a8:2c:15:ea:ae:2f:f2: c6:14:e5:50:db:e6:68:f9:2c:fb:35:64:b9:80:11:b3:db:39: bd:72:f4:f0:95:70:fa:0d:c8:92:bc:42:86:96:30:e5:b7:9a: ae:0f:5d:f3:8c:0c:38:cf:0e:99:08:29:f6:42:65:59:24:61: db:29:b1:06:37:01:3e:1b:f5:3a:71:02:0f:9d:b4:a5:71:90: b0:8d:4b:be:4b:59:2c:f7:93:ec:af:8f:a0:59:0e:db:41:30: f3:b0:89:63:21:52:e7:c2:29:0e:1b:b3:bf:ee:e4:dd:f2:00: 38:25:dd:40 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZp9OkGgKdDBsxBeR4pxbCpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEzMTIzOTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDkxYzA5MjlhMjZlOGQ5OTE5ZjQ5NTdjZjdhNzY0NGY2ODBkZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgeuADYFWA88iLypsTOHgLaKOxMw vaYbuzvy9KKCkFvtQvSd4UZXptbl+WXUOroIvnubA5yL/SCxtx5ndONkLP86MhuZ ykTm7InNVuCkUG3m9AESRwMh315oHeLTJzOLMmGKccsSrfPtghs7W+3b7mFRMKy2 1U3ASynrmYAMeWj1vkobx3CKgUd3VnR4Jf40joS+0ntQFQZsrB9WbXivWdJPfvS5 wcnD+imjqIBKudbiqR24TCWIegGizDhPujqfpCHcXnfc80tVGou2MimESvcl+BRX qYpIQ0ABEafl/hlzNkt1GkpqanBigagbrFlfZoFni0suafNvo1SkXhmLUwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDSRwJKaJujZkZ9JV896dkT2gN0qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzE3NWJm Ny02MTQ3LTQzODktOGFmYy02OTEwOGY3ZTY3NzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvMTc1YmY3 LTYxNDctNDM4OS04YWZjLTY5MTA4ZjdlNjc3MS8xL05KSEFrcG9tNk5tUm4wbFh6 M3AyUlBhQTNTby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEbUjQAwQAwgG0MA0EAgACMAcDBQMqBwhAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDCnzANBgkqhkiG9w0BAQsFAAOCAQEAJFmV dn31vLMyo3eKqm0cMc4FqgJbyEA5xI4BW29rC3biym9bkf/Ye2+Y6nIv2EztDjVd aQNTpLJBeLEG+3TTBLKTDpQxyQkETrrV9kvJN/aGpLp/p2/sqckI160YIJD5yNDe mh3gHDgpDl9Ti1Ebk2f4RptxsVGuaWmXI/TzorC+vAgoWvx0UBioLBXqri/yxhTl UNvmaPks+zVkuYARs9s5vXL08JVw+g3IkrxChpYw5bearg9d84wMOM8OmQgp9kJl WSRh2ymxBjcBPhv1OnECD520pXGQsI1LvktZLPeT7K+PoFkO20Ew87CJYyFS58Ip Dhuzv+7k3fIAOCXdQA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:25 2025 by rpki-client