This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer File: NZpLbG03E8_zY2IH3pg5BYtRgVs.cer (raw, json) Hash identifier: T5P3jwFBMk9qIfEgt7kWMuJD0iT20M9CBtCcBeAlJTs= Subject key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F84E852F04654885B8637B9B9A04 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft caRepository: rsync://rsync.rp.ki/repo/misakaio/2/ Notify URL: https://rrdp.rp.ki/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35487 AS: 47553 AS: 48386 AS: 50069 AS: 57578 AS: 57695 AS: 58313 AS: 58342 IP: 45.11.104.0/22 IP: 45.131.68.0/22 IP: 45.142.244.0/22 IP: 45.150.240.0/22 IP: 93.93.244.0/22 IP: 146.19.3.0/24 IP: 185.189.72.0/24 IP: 185.209.84.0/22 IP: 185.234.212.0/22 IP: 188.244.96.0/22 IP: 194.45.101.0/24 IP: 194.156.154.0/23 IP: 194.156.162.0/23 IP: 2a0b:4340::/29 IP: 2a0d:2900::/29 IP: 2a0d:5640::/29 IP: 2a0e:5c40::/29 IP: 2a0e:6900::/29 IP: 2a0f:3b00::/29 IP: 2a11:6e00::/29 IP: 2a12:1700::/29 IP: 2a12:8d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f8:4e:85:2f:04:65:48:85:b8:63:7b:9b:9a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=359a4b6c6d3713cff3636207de9839058b51815b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:9b:ff:b7:6a:1b:60:50:19:be:18:8c:21: 45:e9:8d:92:42:dc:58:af:e9:03:ab:06:86:b5:bb: 98:98:ac:b5:5d:50:6e:12:2f:b4:63:77:5d:b7:90: e9:b0:12:1e:25:38:33:47:92:37:61:ee:97:e2:6e: a0:d0:20:11:67:b4:72:59:82:ff:6e:f3:30:5a:a5: 5a:f9:02:23:9a:29:e8:72:12:01:e7:36:60:55:19: f3:8f:c2:c9:67:6f:82:66:0e:6d:a8:cf:58:0f:e5: d3:01:12:88:36:29:94:86:c4:9d:6a:5e:54:04:9b: 2c:6b:fc:a6:90:3e:62:11:80:2c:95:d3:f2:ec:04: a5:eb:55:6f:2c:90:e8:19:3b:b7:8d:48:be:29:25: a2:a8:3e:ac:cc:2d:63:ba:06:6e:b7:65:b1:5c:1d: 6a:8c:a8:4a:2e:a7:d6:9f:f5:92:8d:2d:7c:fc:c3: 15:e8:82:be:59:c5:2c:1d:c6:58:d3:0d:3a:7b:f9: eb:20:7b:9e:8a:c8:e2:ea:be:53:ec:91:bd:c5:83: b1:6f:33:ef:52:72:86:e2:78:e4:11:26:41:46:d4: 7b:5c:f9:1c:6f:eb:cd:74:1f:e7:54:41:a4:72:65: f7:33:3d:91:b9:23:5d:c5:5e:0b:af:cb:52:2e:ee: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.rp.ki/repo/misakaio/2/ RPKI Manifest - URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft RPKI Notify - URI:https://rrdp.rp.ki/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.104.0/22 45.131.68.0/22 45.142.244.0/22 45.150.240.0/22 93.93.244.0/22 146.19.3.0/24 185.189.72.0/24 185.209.84.0/22 185.234.212.0/22 188.244.96.0/22 194.45.101.0/24 194.156.154.0/23 194.156.162.0/23 IPv6: 2a0b:4340::/29 2a0d:2900::/29 2a0d:5640::/29 2a0e:5c40::/29 2a0e:6900::/29 2a0f:3b00::/29 2a11:6e00::/29 2a12:1700::/29 2a12:8d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35487 47553 48386 50069 57578 57695 58313 58342 Signature Algorithm: sha256WithRSAEncryption 24:44:fc:fc:2a:24:34:79:64:e7:cf:bb:9c:38:f0:3f:c2:ee: a5:0c:3d:d6:9e:10:ac:c5:25:ef:51:01:a6:6e:2b:85:05:f8: bf:54:19:e7:00:44:59:a8:b6:1f:05:a8:bf:c2:6a:9d:da:ef: 86:bb:7b:ba:5a:dc:fe:ab:1d:50:39:ca:56:58:b9:ce:5d:fa: d1:69:e1:a5:a9:af:60:2f:f6:3f:3b:ce:21:58:16:f0:c1:fe: 50:38:f0:85:03:10:1d:58:c1:61:cb:df:04:81:02:c3:81:3d: 53:57:40:cb:2e:5f:fb:55:e9:03:00:ab:cb:a4:56:fb:bc:c6: 43:40:b8:42:6f:04:2d:59:e6:a9:57:ac:94:c9:8b:13:4a:c8: a1:ec:f7:5f:e0:51:a7:17:ac:be:ad:b7:e4:5c:fa:48:3e:bc: 24:e1:5e:63:c3:4b:00:ff:1c:40:c6:62:36:06:7e:9c:c5:9d: 78:77:e0:8c:32:fe:ca:69:78:09:3c:f3:0e:86:2f:e2:de:75: f5:1f:71:31:19:f7:58:03:7b:54:cf:1e:89:a7:28:8f:56:ba: 29:b0:a1:10:15:9c:ee:0e:bd:db:ef:29:bd:68:39:dd:ae:83: a9:2d:33:e1:b5:51:06:e2:1e:7a:18:55:f4:b2:c2:cf:82:e9: 7f:af:59:42 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgISAZt4NPhOhS8EZUiFuGN7m5oEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTlhNGI2YzZkMzcxM2NmZjM2MzYyMDdkZTk4MzkwNThiNTE4MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOCb/7dqG2BQGb4YjCFF6Y2SQtxY r+kDqwaGtbuYmKy1XVBuEi+0Y3ddt5DpsBIeJTgzR5I3Ye6X4m6g0CARZ7RyWYL/ bvMwWqVa+QIjminochIB5zZgVRnzj8LJZ2+CZg5tqM9YD+XTARKINimUhsSdal5U BJssa/ymkD5iEYAsldPy7ASl61VvLJDoGTu3jUi+KSWiqD6szC1jugZut2WxXB1q jKhKLqfWn/WSjS18/MMV6IK+WcUsHcZY0w06e/nrIHueisji6r5T7JG9xYOxbzPv UnKG4njkESZBRtR7XPkcb+vNdB/nVEGkcmX3Mz2RuSNdxV4Lr8tSLu4DiwIDAQAB o4IDAjCCAv4wHQYDVR0OBBYEFDWaS2xtNxPP82NiB96YOQWLUYFbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgdEGCCsGAQUFBwELBIHEMIHBMDAGCCsGAQUFBzAFhiRyc3lu YzovL3JzeW5jLnJwLmtpL3JlcG8vbWlzYWthaW8vMi8wXAYIKwYBBQUHMAqGUHJz eW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8yLzM1OUE0QjZDNkQzNzEz Q0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIubWZ0MC8GCCsGAQUFBzANhiNodHRw czovL3JyZHAucnAua2kvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBK hkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28z VlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjCBsAYIKwYBBQUHAQcBAf8EgaAwgZ0wVAQCAAEwTgMEAi0LaAMEAi2DRAME Ai2O9AMEAi2W8AMEAl1d9AMEAJITAwMEALm9SAMEArnRVAMEArnq1AMEArz0YAME AMItZQMEAcKcmgMEAcKcojBFBAIAAjA/AwUDKgtDQAMFAyoNKQADBQMqDVZAAwUD Kg5cQAMFAyoOaQADBQMqDzsAAwUDKhFuAAMFAyoSFwADBQMqEo0AMD0GCCsGAQUF BwEIAQH/BC4wLKAqMCgCAwCKnwIDALnBAgMAvQICAwDDlQIDAODqAgMA4V8CAwDj yQIDAOPmMA0GCSqGSIb3DQEBCwUAA4IBAQAkRPz8KiQ0eWTnz7ucOPA/wu6lDD3W nhCsxSXvUQGmbiuFBfi/VBnnAERZqLYfBai/wmqd2u+Gu3u6Wtz+qx1QOcpWWLnO XfrRaeGlqa9gL/Y/O84hWBbwwf5QOPCFAxAdWMFhy98EgQLDgT1TV0DLLl/7VekD AKvLpFb7vMZDQLhCbwQtWeapV6yUyYsTSsih7Pdf4FGnF6y+rbfkXPpIPrwk4V5j w0sA/xxAxmI2Bn6cxZ14d+CMMv7KaXgJPPMOhi/i3nX1H3ExGfdYA3tUzx6JpyiP VropsKEQFZzuDr3b7ym9aDndroOpLTPhtVEG4h56GFX0ssLPgul/r1lC -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:16 2026 by rpki-client