This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer File: NPFybqS9bTyAka4MitGgPpHjWaI.cer (raw, json) Hash identifier: KkoJLjMlaZHUbsoTOqgA4qplJVoxXsCOS9C3LLBRt8Q= Subject key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82E43579B17B9CFED931DED5CA2A5A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.52.52.0/22 IP: 2a01:b960::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e4:35:79:b1:7b:9c:fe:d9:31:de:d5:ca:2a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:6f:f7:32:df:af:ab:d1:44:33:2f:cb:94: 2a:3c:d4:3c:a5:a1:36:76:a1:32:78:71:a3:a9:1d: 48:a2:1c:ef:93:23:d3:6e:8c:c0:2e:49:c0:a0:8a: b6:7a:93:6c:1f:d0:ba:b2:2c:57:25:31:a9:6c:a9: a4:a2:93:7e:c6:46:8d:18:83:99:28:c6:7a:73:c1: 01:81:9a:26:43:e0:4d:e7:85:43:32:48:f9:a4:3e: c5:a3:83:44:6a:9a:94:75:0d:68:84:c0:49:87:96: 43:2c:3c:e1:34:16:d4:92:01:cb:87:21:c2:20:03: 82:3a:ab:48:88:22:dd:4f:d1:fa:d2:ef:4e:3d:2a: 1e:93:50:82:a4:c2:05:2d:00:f9:32:68:1d:0d:3e: a6:4c:47:2b:ef:f8:2e:5d:9b:c6:26:b4:01:e6:55: 90:47:e5:25:00:f3:87:07:aa:02:f4:f8:1c:25:e8: 50:a7:d4:e1:17:b7:25:e4:34:a0:1e:1c:4c:9a:90: bc:c6:62:38:d6:82:72:84:1e:a7:db:8b:51:c7:bf: e5:7a:70:ce:f2:03:d5:37:f8:31:ce:fb:48:db:cf: 04:58:d1:8e:84:2c:08:d7:9b:64:68:49:7f:48:eb: f2:a1:de:73:d4:a9:18:65:5d:91:50:5c:a8:43:fd: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.52.0/22 IPv6: 2a01:b960::/32 Signature Algorithm: sha256WithRSAEncryption 9d:cf:21:9a:83:a5:58:46:22:89:dc:af:59:fa:54:a3:aa:d1: 16:0e:cf:cf:5c:a6:f3:4e:ed:63:a2:63:67:61:84:99:59:27: 69:95:3b:68:b5:e1:ac:be:57:3a:00:4f:a1:cf:36:52:c6:a3: 91:64:99:f5:ba:e0:bc:4e:d6:f0:31:53:f8:b6:cb:37:1f:f2: f4:81:ed:48:2e:f2:e3:bb:03:1a:d7:f8:e3:92:c4:b5:c7:f9: 89:53:34:7a:a7:10:a9:ed:c7:63:9f:6c:b8:2d:52:1c:53:29: 34:a8:91:83:8f:b1:0f:d2:8f:c5:fa:bf:23:54:88:6d:11:06: 9d:ee:a7:72:68:02:89:9b:60:21:9f:ca:77:4e:2c:ea:45:d1: ed:ff:2d:0e:d6:64:6b:0e:a5:2e:45:5e:de:f2:10:7d:7a:71: 4a:c9:14:50:c8:83:31:7e:fc:c5:5a:2a:fa:36:e9:7a:de:4f: 02:96:c7:1f:57:f5:73:31:26:59:4d:f4:98:00:6c:4a:c8:2b: e9:7b:15:45:da:c4:eb:3c:92:91:e9:ea:aa:ae:ee:13:9b:dc: c6:97:25:2d:21:6a:0a:58:b2:06:28:d2:5e:c1:bf:2f:fe:8c: 7d:17:56:cd:0a:3a:f7:3c:5a:34:d0:b5:79:c2:98:0b:b8:d6: 82:76:ea:36 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/guQ1ebF7nP7ZMd7VyipaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGYxNzI2ZWE0YmQ2ZDNjODA5MWFlMGM4YWQxYTAzZTkxZTM1OWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX1v9zLfr6vRRDMvy5QqPNQ8paE2 dqEyeHGjqR1IohzvkyPTbozALknAoIq2epNsH9C6sixXJTGpbKmkopN+xkaNGIOZ KMZ6c8EBgZomQ+BN54VDMkj5pD7Fo4NEapqUdQ1ohMBJh5ZDLDzhNBbUkgHLhyHC IAOCOqtIiCLdT9H60u9OPSoek1CCpMIFLQD5MmgdDT6mTEcr7/guXZvGJrQB5lWQ R+UlAPOHB6oC9PgcJehQp9ThF7cl5DSgHhxMmpC8xmI41oJyhB6n24tRx7/lenDO 8gPVN/gxzvtI288EWNGOhCwI15tkaEl/SOvyod5z1KkYZV2RUFyoQ/2oAwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDTxcm6kvW08gJGuDIrRoD6R41miMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2VmOGU4 NC05MTYxLTQwMmMtODFhZC1lOGU4ZDJmZTcwZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZWY4ZTg0 LTkxNjEtNDAyYy04MWFkLWU4ZThkMmZlNzBmZS8xL05QRnlicVM5YlR5QWthNE1p dEdnUHBIaldhSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTQ0MA0EAgACMAcDBQAqAblgMA0GCSqGSIb3 DQEBCwUAA4IBAQCdzyGag6VYRiKJ3K9Z+lSjqtEWDs/PXKbzTu1jomNnYYSZWSdp lTtoteGsvlc6AE+hzzZSxqORZJn1uuC8TtbwMVP4tss3H/L0ge1ILvLjuwMa1/jj ksS1x/mJUzR6pxCp7cdjn2y4LVIcUyk0qJGDj7EP0o/F+r8jVIhtEQad7qdyaAKJ m2Ahn8p3TizqRdHt/y0O1mRrDqUuRV7e8hB9enFKyRRQyIMxfvzFWir6Nul63k8C lscfV/VzMSZZTfSYAGxKyCvpexVF2sTrPJKR6eqqru4Tm9zGlyUtIWoKWLIGKNJe wb8v/ox9F1bNCjr3PFo00LV5wpgLuNaCduo2 -----END CERTIFICATE-----Generated at Mon Jan 26 01:54:58 2026 by rpki-client