This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer (raw, json) Hash identifier: UIwLXDb3w/kpKH1gsXW5PcWEEU/adkdyDOnw9uHZWUw= Subject key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E3D29C8B9E2CA9025A196E810DA1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47232 AS: 52084 AS: 57158 AS: 197393 AS: 200059 AS: 200717 AS: 200848 AS: 201464 AS: 201476 AS: 201761 AS: 202131 AS: 202774 AS: 203342 AS: 203743 AS: 206270 AS: 210325 AS: 210712 IP: 5.39.200.0/22 IP: 5.183.12.0/22 IP: 37.221.240.0/20 IP: 45.153.192.0/22 IP: 46.29.224.0/21 IP: 46.255.8.0/21 IP: 78.111.112.0/20 IP: 85.255.88.0/22 IP: 91.192.32.0/22 IP: 93.91.144.0/20 IP: 109.235.0.0/21 IP: 185.15.108.0/22 IP: 185.19.0.0/22 IP: 185.40.80.0/22 IP: 185.52.172.0/23 IP: 185.64.220.0/22 IP: 185.73.100.0 -- 185.73.111.255 IP: 185.74.60.0/23 IP: 185.94.4.0/22 IP: 185.97.24.0/22 IP: 185.125.128.0/22 IP: 185.138.68.0/22 IP: 185.155.32.0/22 IP: 185.167.184.0/22 IP: 185.188.100.0/22 IP: 185.207.168.0/22 IP: 193.104.7.0/24 IP: 193.104.12.0/24 IP: 193.104.41.0/24 IP: 193.104.67.0/24 IP: 193.138.152.0/22 IP: 195.12.39.0/24 IP: 213.108.162.0/23 IP: 213.109.172.0/22 IP: 217.75.208.0/20 IP: 2a02:17a0::/29 IP: 2a03:2a80::/29 IP: 2a03:4260::/29 IP: 2a03:9200::/32 IP: 2a03:d840::/29 IP: 2a04:7bc0::/29 IP: 2a04:c740::/29 IP: 2a04:f940::/29 IP: 2a06:400::/29 IP: 2a06:bac0::/29 IP: 2a07:bc0::/29 IP: 2a07:9100::/29 IP: 2a09:fc00::/29 IP: 2a0a:10c0::/29 IP: 2a0a:ddc0::/29 IP: 2a0d:3140::/29 IP: 2a0e:3c00::/29 IP: 2a0f:9300::/29 IP: 2a10:8140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3d:29:c8:b9:e2:ca:90:25:a1:96:e8:10:da:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:9e:21:08:9f:1d:e3:17:3b:08:32:21:d7: 6a:20:09:92:52:a4:03:33:3a:18:fb:9c:ea:64:3e: a2:e2:ed:f5:68:2b:59:04:cf:96:d1:05:96:25:3e: c5:52:88:db:76:68:9e:ae:25:54:8e:b1:27:6e:15: 67:d1:49:49:10:8c:d4:26:b3:d5:d5:96:78:d7:1f: 94:08:1c:ce:2c:c3:36:5f:30:f6:e8:08:5a:1d:c7: 19:16:5b:7d:6d:82:35:87:50:2a:e2:c8:bb:6a:82: b4:5a:81:6b:cd:67:39:bc:07:8d:75:bf:5f:1d:91: a9:95:a3:d3:53:96:1a:34:72:6f:f8:fb:a9:e2:6c: 65:50:f8:0b:8e:1c:b4:67:69:78:b8:1e:10:58:07: 01:16:5a:a9:37:02:81:bb:aa:75:0e:38:41:6b:35: f5:d4:a3:48:b3:32:ec:0e:96:dc:20:70:69:9b:2b: 31:ab:9e:73:93:ac:69:31:46:1a:dc:2d:a1:81:9b: 73:61:52:9c:51:c7:d3:80:0b:fd:b6:c2:43:20:0b: 05:2e:9b:b1:e2:d9:65:38:48:e6:42:fc:34:79:97: 6e:30:5a:5c:3a:e0:3d:57:72:f1:c1:98:61:79:d3: 50:f0:dc:33:28:1d:cf:8f:04:18:68:f2:62:14:95: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.200.0/22 5.183.12.0/22 37.221.240.0/20 45.153.192.0/22 46.29.224.0/21 46.255.8.0/21 78.111.112.0/20 85.255.88.0/22 91.192.32.0/22 93.91.144.0/20 109.235.0.0/21 185.15.108.0/22 185.19.0.0/22 185.40.80.0/22 185.52.172.0/23 185.64.220.0/22 185.73.100.0-185.73.111.255 185.74.60.0/23 185.94.4.0/22 185.97.24.0/22 185.125.128.0/22 185.138.68.0/22 185.155.32.0/22 185.167.184.0/22 185.188.100.0/22 185.207.168.0/22 193.104.7.0/24 193.104.12.0/24 193.104.41.0/24 193.104.67.0/24 193.138.152.0/22 195.12.39.0/24 213.108.162.0/23 213.109.172.0/22 217.75.208.0/20 IPv6: 2a02:17a0::/29 2a03:2a80::/29 2a03:4260::/29 2a03:9200::/32 2a03:d840::/29 2a04:7bc0::/29 2a04:c740::/29 2a04:f940::/29 2a06:400::/29 2a06:bac0::/29 2a07:bc0::/29 2a07:9100::/29 2a09:fc00::/29 2a0a:10c0::/29 2a0a:ddc0::/29 2a0d:3140::/29 2a0e:3c00::/29 2a0f:9300::/29 2a10:8140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47232 52084 57158 197393 200059 200717 200848 201464 201476 201761 202131 202774 203342 203743 206270 210325 210712 Signature Algorithm: sha256WithRSAEncryption a6:db:68:d6:8c:2f:e0:70:b3:b0:1b:0e:e0:92:d9:c9:18:c5: eb:07:53:f4:e8:d4:75:5a:23:af:cd:59:ef:2c:2b:ba:e4:1e: 51:eb:61:46:97:59:31:dd:5e:8a:cc:a4:bc:58:48:05:99:64: cd:16:e2:6f:aa:2d:c7:38:60:9d:10:5b:43:b0:95:d8:51:84: 2f:86:8a:dd:40:fa:1c:80:45:98:74:58:a1:e2:cc:62:c2:9d: f4:30:35:7a:ee:f3:fc:13:c5:4f:2c:32:e5:f2:58:17:ff:0e: 41:0d:9f:1f:fb:e7:1d:bd:e3:b4:73:12:9d:90:54:96:61:ab: ae:66:f0:9f:78:7d:a6:91:d2:56:a9:63:41:95:dc:96:04:c3: 1d:c7:34:4c:10:94:2e:e8:8c:f4:3e:43:f1:24:02:12:63:cf: 27:07:70:ce:fd:86:57:ee:cc:a0:6d:bb:ba:45:5c:50:05:92: 6d:9d:1f:6f:0d:8d:4d:cb:c6:51:a9:7f:31:2d:5c:50:3c:05: 6f:c0:b5:88:43:cf:b4:f6:f6:4a:6e:cc:70:3b:12:98:66:91: e2:73:01:05:d5:72:34:cf:db:d8:14:f1:18:ab:ae:91:76:2b: 0d:c9:95:1d:62:62:e3:27:c5:a2:7e:43:ac:ce:12:67:c7:55: 25:c8:71:f5 -----BEGIN CERTIFICATE----- MIIHTzCCBjegAwIBAgISAZt5fj0pyLniypAloZboENodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTlmMGY1ZmY2MjBlMGRiNTMxMWY2NDczNjkwOTk3M2FjNjBmNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoWeIQifHeMXOwgyIddqIAmSUqQD MzoY+5zqZD6i4u31aCtZBM+W0QWWJT7FUojbdmieriVUjrEnbhVn0UlJEIzUJrPV 1ZZ41x+UCBzOLMM2XzD26AhaHccZFlt9bYI1h1Aq4si7aoK0WoFrzWc5vAeNdb9f HZGplaPTU5YaNHJv+Pup4mxlUPgLjhy0Z2l4uB4QWAcBFlqpNwKBu6p1DjhBazX1 1KNIszLsDpbcIHBpmysxq55zk6xpMUYa3C2hgZtzYVKcUcfTgAv9tsJDIAsFLpux 4tllOEjmQvw0eZduMFpcOuA9V3LxwZhhedNQ8NwzKB3PjwQYaPJiFJV45wIDAQAB o4IEWzCCBFcwHQYDVR0OBBYEFDWfD1/2IODbUxH2RzaQmXOsYPbzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzQwZDlh NS0yNTY2LTQ5ZTEtYTU3Yi1kMWFiZjRlZTMyY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvNDBkOWE1 LTI1NjYtNDllMS1hNTdiLWQxYWJmNGVlMzJjYi8xL05aOFBYX1lnNE50VEVmWkhO cENaYzZ4Zzl2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBiAYIKwYB BQUHAQcBAf8EggF3MIIBczCB4QQCAAEwgdoDBAIFJ8gDBAIFtwwDBAQl3fADBAIt mcADBAMuHeADBAMu/wgDBAROb3ADBAJV/1gDBAJbwCADBARdW5ADBANt6wADBAK5 D2wDBAK5EwADBAK5KFADBAG5NKwDBAK5QNwwDAMEArlJZAMEBLlJYAMEAblKPAME ArleBAMEArlhGAMEArl9gAMEArmKRAMEArmbIAMEArmnuAMEArm8ZAMEArnPqAME AMFoBwMEAMFoDAMEAMFoKQMEAMFoQwMEAsGKmAMEAMMMJwMEAdVsogMEAtVtrAME BNlL0DCBjAQCAAIwgYUDBQMqAhegAwUDKgMqgAMFAyoDQmADBQAqA5IAAwUDKgPY QAMFAyoEe8ADBQMqBMdAAwUDKgT5QAMFAyoGBAADBQMqBrrAAwUDKgcLwAMFAyoH kQADBQMqCfwAAwUDKgoQwAMFAyoK3cADBQMqDTFAAwUDKg48AAMFAyoPkwADBQMq EIFAMGoGCCsGAQUFBwEIAQH/BFswWaBXMFUCAwC4gAIDAMt0AgMA30YCAwMDEQID Aw17AgMDEA0CAwMQkAIDAxL4AgMDEwQCAwMUIQIDAxWTAgMDGBYCAwMaTgIDAxvf AgMDJb4CAwM1lQIDAzcYMA0GCSqGSIb3DQEBCwUAA4IBAQCm22jWjC/gcLOwGw7g ktnJGMXrB1P06NR1WiOvzVnvLCu65B5R62FGl1kx3V6KzKS8WEgFmWTNFuJvqi3H OGCdEFtDsJXYUYQvhordQPocgEWYdFih4sxiwp30MDV67vP8E8VPLDLl8lgX/w5B DZ8f++cdveO0cxKdkFSWYauuZvCfeH2mkdJWqWNBldyWBMMdxzRMEJQu6Iz0PkPx JAISY88nB3DO/YZX7sygbbu6RVxQBZJtnR9vDY1Ny8ZRqX8xLVxQPAVvwLWIQ8+0 9vZKbsxwOxKYZpHicwEF1XI0z9vYFPEYq66RdisNyZUdYmLjJ8WifkOszhJnx1Ul yHH1 -----END CERTIFICATE-----Generated at Sun Jan 25 17:18:43 2026 by rpki-client