This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer (raw, json) Hash identifier: YfnktPW2xfzZMqMsCzCqmHFU3MU2H/i7Of/4F4zXgq4= Subject key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED50F2BF60AC5DDB26FADCAE052829 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.56.204.0/22 IP: 2a0c:8f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:f2:bf:60:ac:5d:db:26:fa:dc:ae:05:28:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:f8:ca:93:2c:d1:c6:40:d2:e2:4d:49:06: d1:5e:f2:57:57:3f:9e:c5:26:49:4c:02:7d:f8:5b: e2:93:50:f4:e9:41:8a:d5:e9:c4:0f:a4:55:af:36: ba:92:83:cd:5a:70:83:46:fa:61:5b:fe:aa:91:36: 23:21:6e:5a:0a:49:bd:01:52:28:1f:e7:c0:be:31: 4d:13:04:e1:34:78:e8:51:a0:df:ee:53:ed:e6:64: 92:b9:eb:8a:5c:77:1d:0e:50:85:2e:58:ad:9e:80: 68:e8:fd:a9:37:2c:0d:c8:76:3f:92:8f:94:03:ca: 79:32:6f:5e:7c:00:4e:52:bd:c4:f2:8b:78:f0:2e: 87:c9:6b:e5:9a:1e:01:5b:08:8f:a8:03:bc:a9:42: 10:e2:13:df:15:c8:53:a6:06:bd:f5:bc:f4:df:83: e6:3d:9d:ef:6a:1f:90:f7:d5:64:70:d3:22:a0:ce: 8c:01:68:37:54:00:9f:d8:79:90:65:dd:61:4d:9e: 50:1b:33:7f:5c:c3:ef:ff:45:b7:8a:a4:4e:a5:ba: 1f:33:83:5a:cb:f6:45:b6:ab:2e:83:90:d1:41:af: c7:92:7d:04:94:5a:d7:f6:8e:5f:79:26:ee:af:98: 75:1b:2a:0e:05:4c:4d:cd:20:c3:5f:2a:5b:6d:6c: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.204.0/22 IPv6: 2a0c:8f40::/29 Signature Algorithm: sha256WithRSAEncryption 52:3f:2c:87:e6:99:ce:3f:43:fc:74:3e:3a:06:da:dc:7e:b2: a7:62:44:c2:89:dc:ac:1d:d5:c9:3a:25:ed:5c:fb:da:25:b1: 23:55:9b:72:d9:f4:f2:51:bf:e7:fa:f2:3a:a9:c3:71:6c:9b: d2:5c:1f:23:17:85:08:16:3a:10:8c:42:34:bb:5b:9c:e3:d3: 1c:c8:66:e9:f6:bb:09:e1:09:ea:22:2f:a9:1e:06:74:ce:40: 89:56:24:ca:94:8d:01:d6:58:c0:1e:5f:7c:59:f4:b3:b7:51: fd:df:fb:3f:ad:da:b9:92:38:ca:c7:fe:76:ab:05:4f:88:28: 41:92:6b:52:09:4e:b9:08:99:2e:18:a9:75:72:5c:c7:7c:11: 72:f7:90:9c:46:64:83:b2:69:0e:e5:b7:1f:58:c2:97:05:b0: 48:04:50:49:c2:2c:28:de:07:80:38:b4:b1:03:b3:71:52:05: 24:12:c0:fb:f6:84:f0:9d:86:2a:68:31:3e:7a:cd:00:54:91: c6:a2:c1:b8:b0:88:ec:03:c1:ab:fd:b6:95:4c:a6:28:9d:9c: 86:7e:20:e6:da:ce:1b:43:aa:8f:c5:22:40:3e:ef:5d:f2:44: e8:88:87:4c:e3:58:3f:fc:32:13:47:a7:87:74:99:cf:83:86: 78:eb:2d:f9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57VDyv2CsXdsm+tyuBSgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGY0ODFhOWRkY2ZiNDg1OTFmNzg5MzhjNGZjYzdiOGI2N2M2MzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAj4ypMs0cZA0uJNSQbRXvJXVz+e xSZJTAJ9+Fvik1D06UGK1enED6RVrza6koPNWnCDRvphW/6qkTYjIW5aCkm9AVIo H+fAvjFNEwThNHjoUaDf7lPt5mSSueuKXHcdDlCFLlitnoBo6P2pNywNyHY/ko+U A8p5Mm9efABOUr3E8ot48C6HyWvlmh4BWwiPqAO8qUIQ4hPfFchTpga99bz034Pm PZ3vah+Q99VkcNMioM6MAWg3VACf2HmQZd1hTZ5QGzN/XMPv/0W3iqROpbofM4Na y/ZFtqsug5DRQa/Hkn0ElFrX9o5feSbur5h1GyoOBUxNzSDDXypbbWyeowIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDT0gandz7SFkfeJOMT8x7i2fGMCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzNhZDlj MS0zZTA5LTQxYWMtYWNjYS1kMTEzMzlmZTdkZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvM2FkOWMx LTNlMDktNDFhYy1hY2NhLWQxMTMzOWZlN2RmMC8xL05QU0JxZDNQdElXUjk0azR4 UHpIdUxaOFl3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwTjMMA0EAgACMAcDBQMqDI9AMA0GCSqGSIb3 DQEBCwUAA4IBAQBSPyyH5pnOP0P8dD46BtrcfrKnYkTCidysHdXJOiXtXPvaJbEj VZty2fTyUb/n+vI6qcNxbJvSXB8jF4UIFjoQjEI0u1uc49McyGbp9rsJ4QnqIi+p HgZ0zkCJViTKlI0B1ljAHl98WfSzt1H93/s/rdq5kjjKx/52qwVPiChBkmtSCU65 CJkuGKl1clzHfBFy95CcRmSDsmkO5bcfWMKXBbBIBFBJwiwo3geAOLSxA7NxUgUk EsD79oTwnYYqaDE+es0AVJHGosG4sIjsA8Gr/baVTKYonZyGfiDm2s4bQ6qPxSJA Pu9d8kToiIdM41g//DITR6eHdJnPg4Z46y35 -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:11 2026 by rpki-client