This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer File: NRx7VgfFNmV_1XSPb2WySsEusX0.cer (raw, json) Hash identifier: huW3CeRqlXj/mA2TKG19JRFzLPzmPe0VTwHjOECzJDI= Subject key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B93224C6F4C98A4F18547420DEABEF7F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 11:47:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49581 AS: 213200 IP: 80.91.223.0/24 IP: 91.212.121.0/24 IP: 146.19.191.0/24 IP: 185.91.127.0/24 IP: 193.111.248.0 -- 193.111.250.255 IP: 193.141.60.0/24 IP: 2a12:de40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:22:4c:6f:4c:98:a4:f1:85:47:42:0d:ea:be:f7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 11:47:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:75:77:77:ff:d3:48:d0:11:5b:53:9f:f7: 3e:62:9a:99:23:8c:90:4c:e6:23:99:95:c0:32:90: 0c:50:06:21:c5:38:3e:2d:f5:9b:a8:e7:c5:3c:86: b8:b7:7f:43:06:6d:83:48:dd:f5:66:7e:98:aa:f1: 1e:c0:35:8f:a5:4a:0e:83:01:37:fa:4a:35:e5:e7: e5:5c:e4:b3:8d:22:a3:03:82:d0:a0:95:45:2c:8f: 66:e9:5f:81:29:37:be:a8:4c:4d:6e:29:8f:8a:9c: 69:ef:94:0e:fa:e1:85:e7:3f:c1:3e:ae:ea:f0:b2: 60:cf:8b:92:de:c9:96:e1:b8:5d:41:38:e3:5a:c9: d3:e7:1e:1c:64:0f:08:98:ee:28:f0:b2:f3:be:24: 75:c5:57:89:da:d3:42:03:d8:a3:a7:03:3e:01:cf: 28:62:ee:67:24:fb:ad:35:07:f6:b3:80:f2:74:85: 7d:ee:e9:80:dd:45:e9:93:dc:d0:07:4d:2a:8a:a8: 1a:e1:c5:0e:e7:ba:5f:f3:38:61:fe:fc:49:38:51: 63:0c:d3:76:11:c3:91:77:9f:0f:ea:c2:25:30:92: 53:20:3f:68:54:3d:26:9c:3f:75:13:e8:cb:f4:66: 6a:d1:c5:d4:53:57:90:b2:12:79:9d:55:10:98:be: d4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.223.0/24 91.212.121.0/24 146.19.191.0/24 185.91.127.0/24 193.111.248.0-193.111.250.255 193.141.60.0/24 IPv6: 2a12:de40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49581 213200 Signature Algorithm: sha256WithRSAEncryption 9a:5b:77:82:73:35:64:e4:b7:91:57:f6:08:87:86:02:42:86: 6a:77:88:40:2e:66:44:a6:4b:b9:15:06:c1:c6:32:8e:b9:6b: 91:a3:50:e5:cb:e0:cf:91:f2:b3:c1:42:c4:bc:50:2c:3c:fb: 60:93:f4:fd:43:be:76:8f:ba:af:7b:92:e5:3c:77:81:f6:23: eb:75:7d:c2:60:de:ec:fe:62:68:f5:ab:60:ac:50:48:60:2a: 7e:9d:58:db:12:f8:9b:21:ad:53:40:80:29:26:8c:89:b4:10: c5:7f:86:1e:a3:b8:17:06:75:e7:85:86:5a:d3:a1:dd:6f:50: a4:ea:78:f9:5e:84:45:d8:b9:6f:b1:9d:22:00:2c:9b:a9:89: 5c:6e:36:69:53:74:3c:04:7a:9c:53:3a:07:a3:2b:39:9c:8c: 78:5d:e0:76:6d:03:d8:c6:35:24:f7:e0:fe:e9:4c:3f:c0:05: e2:2e:b3:9f:58:5a:c7:72:75:d4:58:ba:36:fc:8a:41:c9:70: 3d:88:4a:ec:b0:b9:2e:21:45:79:fc:39:0e:5c:13:81:fc:39: a7:d4:86:f2:1f:85:e1:b1:2b:f9:9a:e2:82:91:59:77:47:89: 52:67:80:fe:7d:4e:08:c8:14:53:e6:3b:27:ac:a9:d1:c2:fb: 54:65:84:27 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZuTIkxvTJik8YVHQg3qvvf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MTE0NzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTFjN2I1NjA3YzUzNjY1N2ZkNTc0OGY2ZjY1YjI0YWMxMmViMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltB1d3f/00jQEVtTn/c+YpqZI4yQ TOYjmZXAMpAMUAYhxTg+LfWbqOfFPIa4t39DBm2DSN31Zn6YqvEewDWPpUoOgwE3 +ko15eflXOSzjSKjA4LQoJVFLI9m6V+BKTe+qExNbimPipxp75QO+uGF5z/BPq7q 8LJgz4uS3smW4bhdQTjjWsnT5x4cZA8ImO4o8LLzviR1xVeJ2tNCA9ijpwM+Ac8o Yu5nJPutNQf2s4DydIV97umA3UXpk9zQB00qiqga4cUO57pf8zhh/vxJOFFjDNN2 EcORd58P6sIlMJJTID9oVD0mnD91E+jL9GZq0cXUU1eQshJ5nVUQmL7UJwIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFDUce1YHxTZlf9V0j29lskrBLrF9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2MxZmYy MS01YWMyLTRlNTAtOTM2Yy02NTE3MDdjOTFmZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYzFmZjIx LTVhYzItNGU1MC05MzZjLTY1MTcwN2M5MWZkMy8xL05SeDdWZ2ZGTm1WXzFYU1Bi Mld5U3NFdXNYMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQAUFvfAwQAW9R5AwQAkhO/AwQAuVt/MAwDBAPB b/gDBADBb/oDBADBjTwwDQQCAAIwBwMFAyoS3kAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAMGtAgMDQNAwDQYJKoZIhvcNAQELBQADggEBAJpbd4JzNWTkt5FX9giH hgJChmp3iEAuZkSmS7kVBsHGMo65a5GjUOXL4M+R8rPBQsS8UCw8+2CT9P1DvnaP uq97kuU8d4H2I+t1fcJg3uz+Ymj1q2CsUEhgKn6dWNsS+JshrVNAgCkmjIm0EMV/ hh6juBcGdeeFhlrTod1vUKTqePlehEXYuW+xnSIALJupiVxuNmlTdDwEepxTOgej KzmcjHhd4HZtA9jGNST34P7pTD/ABeIus59YWsdyddRYujb8ikHJcD2ISuywuS4h RXn8OQ5cE4H8OafUhvIfheGxK/ma4oKRWXdHiVJngP59TgjIFFPmOyesqdHC+1Rl hCc= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:39 2026 by rpki-client