This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer (raw, json) Hash identifier: 4bxn2BZYdMI1r5y6oGDXCe4kCS4lp7nk+VlsHbWmDOU= Subject key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F152D0743F23E7CB0D2F3DD9324D880 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.156.16.0/22 IP: 2a07:9800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2d:07:43:f2:3e:7c:b0:d2:f3:dd:93:24:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:75:ac:0e:c7:c0:c8:2a:ba:90:21:3e:1c: d0:b3:84:f6:4b:9d:52:3c:69:e9:53:a5:89:59:37: 3e:e1:dd:0a:15:b0:ca:80:fd:c6:9e:4d:39:d2:57: 99:33:4b:39:5c:0a:9f:3a:55:6c:d9:bb:36:73:f4: d2:98:fe:ca:8c:b7:dd:69:2e:16:6b:4c:1d:e8:4f: 0e:07:5b:68:99:06:90:60:a6:bb:fd:eb:be:8b:7a: 86:5e:e2:62:a9:f1:bb:35:f0:65:7d:30:23:df:c4: f0:02:64:37:fd:ea:a7:db:83:9a:53:34:07:d6:27: 3f:16:51:2d:8d:73:d3:95:a0:b1:35:db:3b:88:9b: cb:ee:e1:5b:89:49:14:67:09:68:24:23:02:b9:f3: c0:db:23:52:64:ed:60:d0:0c:b1:b3:d1:fc:d6:17: 3b:4a:23:cd:47:b0:75:7f:1f:18:90:1b:d2:98:c8: 79:d0:b0:12:60:46:a1:1e:f3:d5:4d:b4:9f:88:3e: 93:71:29:32:a4:7d:1f:62:a0:25:3d:e6:21:b5:4f: d0:21:fe:14:9a:bf:f3:30:c6:b6:c9:dc:76:cf:a7: b9:70:97:e1:9a:5a:22:7c:33:f7:05:5a:93:ca:17: 57:0c:f6:70:e3:45:ac:38:ab:46:68:48:b2:d5:d6: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.16.0/22 IPv6: 2a07:9800::/29 Signature Algorithm: sha256WithRSAEncryption 1d:2d:18:fc:6f:7b:4e:5b:57:af:2e:83:82:a2:f0:40:c8:2e: 36:f8:ef:b9:1f:c9:7d:ab:68:a6:7c:ba:76:a1:5d:7c:e7:2b: 2c:fd:5c:8a:96:06:9b:e8:da:6f:22:13:b0:03:92:6a:14:88: 8d:91:7b:a1:d9:ee:cb:d6:5e:18:af:b8:7d:86:47:70:18:96: 17:af:a5:f3:49:b5:f1:eb:52:6a:cd:83:05:ad:cb:03:73:83: 1e:27:92:85:cb:27:92:b8:77:7d:d3:a0:8f:56:4f:6f:fd:bb: 58:58:18:b0:dc:79:a9:02:0f:54:1b:81:e8:bf:6f:eb:1c:2d: 79:92:d1:77:d6:65:6c:81:b0:eb:91:f8:a8:94:04:71:c1:2d: d3:cd:a4:1c:07:91:b5:b2:a6:5b:10:49:5d:4a:89:3e:71:09: 8a:45:61:19:d4:82:9b:27:79:3a:5c:27:85:dd:44:66:d1:31: 28:4a:21:4b:15:89:ca:51:7e:bc:89:d7:40:7b:59:c3:ad:b2: a7:6e:21:cc:0c:94:2d:ce:7e:a2:da:d3:2e:95:21:52:65:4b: d4:d7:50:15:5b:ae:6d:19:89:66:c5:00:51:a4:67:af:45:23: 08:bf:83:98:b9:59:cc:e6:1e:ec:d1:33:90:95:32:28:5c:ea: ca:05:0a:e9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FS0HQ/I+fLDS892TJNiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGZlNmI5ZDBjYzFlN2Y2ZTE2YjJhNDZiNDJjYTVlMDFjNzAwMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAh1rA7HwMgqupAhPhzQs4T2S51S PGnpU6WJWTc+4d0KFbDKgP3Gnk050leZM0s5XAqfOlVs2bs2c/TSmP7KjLfdaS4W a0wd6E8OB1tomQaQYKa7/eu+i3qGXuJiqfG7NfBlfTAj38TwAmQ3/eqn24OaUzQH 1ic/FlEtjXPTlaCxNds7iJvL7uFbiUkUZwloJCMCufPA2yNSZO1g0Ayxs9H81hc7 SiPNR7B1fx8YkBvSmMh50LASYEahHvPVTbSfiD6TcSkypH0fYqAlPeYhtU/QIf4U mr/zMMa2ydx2z6e5cJfhmloifDP3BVqTyhdXDPZw40WsOKtGaEiy1dYJWQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDT+a50Mwef24WsqRrQspeAccANGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzYyZGYz Ni1mZDM2LTRiYWYtOWQyZS0xMThhZmVkN2E1YWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvNjJkZjM2 LWZkMzYtNGJhZi05ZDJlLTExOGFmZWQ3YTVhZS8xL05QNXJuUXpCNV9iaGF5cEd0 Q3lsNEJ4d0EwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZwQMA0EAgACMAcDBQMqB5gAMA0GCSqGSIb3 DQEBCwUAA4IBAQAdLRj8b3tOW1evLoOCovBAyC42+O+5H8l9q2imfLp2oV185yss /VyKlgab6NpvIhOwA5JqFIiNkXuh2e7L1l4Yr7h9hkdwGJYXr6XzSbXx61JqzYMF rcsDc4MeJ5KFyyeSuHd906CPVk9v/btYWBiw3HmpAg9UG4Hov2/rHC15ktF31mVs gbDrkfiolARxwS3TzaQcB5G1sqZbEEldSok+cQmKRWEZ1IKbJ3k6XCeF3URm0TEo SiFLFYnKUX68iddAe1nDrbKnbiHMDJQtzn6i2tMulSFSZUvU11AVW65tGYlmxQBR pGevRSMIv4OYuVnM5h7s0TOQlTIoXOrKBQrp -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:23 2026 by rpki-client