This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer File: NLQZ-koKFgUYgxjN9KIESZKFO5U.cer (raw, json) Hash identifier: 4zPTYzvfzxMHSMwyzsHmvXY80+oOuMFWytCws5J1b2s= Subject key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78347991EA996F99500D7F24ED04A334 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41655 IP: 37.153.80.0/21 IP: 185.224.180.0/22 IP: 195.8.198.0/23 IP: 2a00:adc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:79:91:ea:99:6f:99:50:0d:7f:24:ed:04:a3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34b419fa4a0a1605188318cdf4a2044992853b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:0f:d7:c2:88:8b:d1:f0:01:d5:e6:db:9a: d1:04:85:9f:c1:d9:38:7b:40:de:59:35:e6:b6:07: 4f:50:d2:79:cc:78:20:e1:dd:c8:85:df:8e:15:f2: b1:98:a3:a6:58:22:28:ec:bc:8b:51:20:33:85:30: 14:5a:67:91:f2:72:8e:84:46:1f:e9:f9:43:bd:8f: 33:e4:01:2d:02:d5:6c:56:1e:96:85:58:dd:ab:67: 1c:cb:d9:07:4c:f5:f1:0a:f6:c9:a9:94:f1:81:9f: f2:65:f1:75:a9:dd:46:a6:0e:27:5f:d4:53:06:c9: 11:1b:ff:bd:62:c7:77:ce:77:1d:64:fd:07:2f:ce: c8:2a:61:f7:b3:f6:4c:fc:36:fd:c5:6d:6c:c2:c2: 0a:75:c9:aa:2e:c4:1c:37:5a:ae:3f:d2:45:73:47: 39:b1:9d:9a:7c:fc:93:4d:83:e4:09:c3:04:8a:08: 50:cf:9d:c0:2f:0a:23:6a:8c:f2:b6:f5:d2:34:40: 1a:3f:69:8b:d4:2d:2c:f7:47:d8:ed:16:b4:c6:2f: 68:27:39:ff:3d:59:a8:3f:9c:de:53:21:43:8d:c9: 5f:dd:d2:61:84:45:88:9a:b0:a8:1e:94:0e:08:e6: e9:be:c8:b2:7d:b5:16:59:ce:76:d4:b7:79:74:2e: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.80.0/21 185.224.180.0/22 195.8.198.0/23 IPv6: 2a00:adc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41655 Signature Algorithm: sha256WithRSAEncryption 65:a4:10:d7:f5:79:5d:a2:f8:52:2f:32:de:cf:ef:c2:4f:0a: 6b:68:bf:da:ea:16:57:7e:52:82:e4:2a:1e:b0:76:a4:2f:a6: 6e:99:ba:ab:5a:d6:00:9a:a1:e6:22:3f:e3:13:41:cb:45:e0: 16:7e:cc:79:69:8f:7b:bf:82:e2:10:d6:9a:32:80:e2:d4:66: d4:db:d7:a9:79:31:b9:09:5e:59:c6:7c:c3:c8:2e:5a:94:eb: ac:80:99:be:18:c9:c8:11:4f:b3:68:69:38:ab:75:6b:cf:a3: 89:49:7d:99:42:99:c0:b4:84:2e:63:49:00:ce:e3:01:23:f3: 93:66:6f:35:18:85:65:ac:7a:f7:0f:4e:81:c1:63:dd:68:03: 64:b8:22:2a:aa:f5:4d:c4:83:e0:b1:eb:f3:a2:0c:a6:de:3f: 0b:3e:84:be:f2:ca:bb:bf:5e:16:e4:93:28:92:99:1a:8f:62: 6a:fd:2e:3f:37:f6:0e:13:fb:cb:2b:c8:fc:e3:61:6f:f1:6c: d7:09:57:c6:a4:54:1d:c3:f9:84:9e:5d:e0:8f:bf:37:27:58: e9:65:31:33:61:db:79:af:ed:55:fb:65:78:94:aa:eb:38:f6: 19:24:9f:91:d2:cf:df:b9:67:16:ef:ab:69:32:06:4d:54:23: a9:69:55:0d -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4NHmR6plvmVANfyTtBKM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGI0MTlmYTRhMGExNjA1MTg4MzE4Y2RmNGEyMDQ0OTkyODUzYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0wP18KIi9HwAdXm25rRBIWfwdk4 e0DeWTXmtgdPUNJ5zHgg4d3Ihd+OFfKxmKOmWCIo7LyLUSAzhTAUWmeR8nKOhEYf 6flDvY8z5AEtAtVsVh6WhVjdq2ccy9kHTPXxCvbJqZTxgZ/yZfF1qd1Gpg4nX9RT BskRG/+9Ysd3zncdZP0HL87IKmH3s/ZM/Db9xW1swsIKdcmqLsQcN1quP9JFc0c5 sZ2afPyTTYPkCcMEighQz53ALwojaozytvXSNEAaP2mL1C0s90fY7Ra0xi9oJzn/ PVmoP5zeUyFDjclf3dJhhEWImrCoHpQOCObpvsiyfbUWWc521Ld5dC4FDwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFDS0GfpKChYFGIMYzfSiBEmShTuVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzhjNzlm Yi03YTU3LTQyOWQtOWMzMy04Nzc3NTQ0YzkyNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvOGM3OWZi LTdhNTctNDI5ZC05YzMzLTg3Nzc1NDRjOTI3NS8xL05MUVota29LRmdVWWd4ak45 S0lFU1pLRk81VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJZlQAwQCueC0AwQBwwjGMA0EAgACMAcDBQAq AK3AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCitzANBgkqhkiG9w0BAQsFAAOC AQEAZaQQ1/V5XaL4Ui8y3s/vwk8Ka2i/2uoWV35SguQqHrB2pC+mbpm6q1rWAJqh 5iI/4xNBy0XgFn7MeWmPe7+C4hDWmjKA4tRm1NvXqXkxuQleWcZ8w8guWpTrrICZ vhjJyBFPs2hpOKt1a8+jiUl9mUKZwLSELmNJAM7jASPzk2ZvNRiFZax69w9OgcFj 3WgDZLgiKqr1TcSD4LHr86IMpt4/Cz6EvvLKu79eFuSTKJKZGo9iav0uPzf2DhP7 yyvI/ONhb/Fs1wlXxqRUHcP5hJ5d4I+/NydY6WUxM2Hbea/tVftleJSq6zj2GSSf kdLP37lnFu+raTIGTVQjqWlVDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:06:37 2026 by rpki-client