This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer File: NharGOa87eCFC8quvZWZk-hAhus.cer (raw, json) Hash identifier: o9tCUeHkKDUN1wojW4Mdc82HBq+1uXpQIVwa6FYCh74= Subject key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E380C358128EDB34B27A2AA646632DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216241 IP: 158.196.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0c:35:81:28:ed:b3:4b:27:a2:aa:64:66:32:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3616ab18e6bcede0850bcaaebd959993e84086eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:0e:55:73:0f:57:82:01:ea:da:b0:69:dc: e3:a1:74:71:bd:82:62:fc:5c:b5:7b:c8:da:73:c7: 00:99:7d:0c:53:79:77:33:b2:1d:19:09:07:0e:5d: cb:6d:be:60:81:43:9c:1f:26:dc:50:cc:df:a9:8a: ab:b8:ca:b3:24:b9:96:11:b7:19:a0:10:97:81:be: c5:4f:00:bc:5e:a0:7a:27:a6:21:69:ba:ef:97:4a: 28:e5:39:c5:94:fd:d2:a4:fa:05:a2:d8:eb:35:db: e8:08:ce:9d:b5:5c:39:e6:33:f9:5f:3e:bc:6d:f8: da:3b:cf:3e:cf:8a:4e:93:7b:8d:ce:29:ab:34:38: 8a:5d:f4:ed:ef:be:11:29:86:52:9f:6c:7d:a2:69: be:d7:ce:16:52:b8:05:a5:18:f1:bf:9f:d6:dc:92: b3:85:32:64:54:43:8c:07:88:d7:c3:d3:97:f7:bb: 8b:25:b6:6c:8e:19:ab:01:74:a9:f8:9f:09:4a:76: 23:dd:ca:77:89:66:13:89:8a:17:14:3f:72:62:61: 25:54:6b:45:56:1d:3e:a7:f1:ad:8d:fe:e6:0c:f8: 5d:42:d4:7b:4f:3d:a7:e8:c4:a3:6e:8d:b5:8c:f7: b0:52:8b:ed:54:2d:c7:06:0a:49:c3:e1:1b:69:c5: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.196.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216241 Signature Algorithm: sha256WithRSAEncryption 78:09:44:38:27:5e:bc:dc:1b:d6:15:a8:b6:5a:c7:81:49:29: 3e:a2:73:3b:ea:a9:b6:b2:da:fc:6a:94:81:6c:ba:32:8c:9a: 16:fc:21:96:e2:3e:0e:11:7f:e1:be:bf:ba:4a:56:b7:79:0c: 13:fa:6a:77:6d:98:ff:36:b9:c1:a1:d6:d5:0a:bc:e2:da:88: cd:39:dd:0a:79:ba:79:61:bf:5a:56:7a:9b:c6:9d:ed:b0:86: 45:e9:e0:12:8b:67:0f:33:93:9b:79:ad:a3:c8:81:f7:61:3b: fd:e9:63:98:d7:bf:60:b1:9a:56:00:e7:34:62:a9:fa:de:26: 02:a5:e0:79:1b:38:44:a8:5e:d4:ba:14:a9:8f:84:07:1f:38: b0:57:ba:74:7c:d1:2d:31:bc:b1:a9:1f:46:84:45:e1:4a:d9: 46:c0:fd:51:73:f6:37:ba:4c:a3:03:0f:16:3c:bd:14:b5:7b: df:c1:67:2e:3f:f2:30:63:cd:e7:c7:2e:57:5f:e2:d1:15:df: 22:47:57:25:2e:21:fb:66:85:26:c1:01:2f:e4:1d:8c:17:fa: 93:de:6c:f4:e9:8d:b7:48:1e:6b:28:4e:f1:e8:46:98:b8:71: 6a:1d:c7:f4:93:6b:98:52:0f:74:94:0b:f4:b9:05:f1:fe:c5: d1:08:13:0e -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+OAw1gSjts0snoqpkZjLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjE2YWIxOGU2YmNlZGUwODUwYmNhYWViZDk1OTk5M2U4NDA4NmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorcOVXMPV4IB6tqwadzjoXRxvYJi /Fy1e8jac8cAmX0MU3l3M7IdGQkHDl3Lbb5ggUOcHybcUMzfqYqruMqzJLmWEbcZ oBCXgb7FTwC8XqB6J6Yhabrvl0oo5TnFlP3SpPoFotjrNdvoCM6dtVw55jP5Xz68 bfjaO88+z4pOk3uNzimrNDiKXfTt774RKYZSn2x9omm+184WUrgFpRjxv5/W3JKz hTJkVEOMB4jXw9OX97uLJbZsjhmrAXSp+J8JSnYj3cp3iWYTiYoXFD9yYmElVGtF Vh0+p/Gtjf7mDPhdQtR7Tz2n6MSjbo21jPewUovtVC3HBgpJw+EbacUwfQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFDYWqxjmvO3ghQvKrr2VmZPoQIbrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzdkMmYz NC1hZmZkLTRkMWMtYjQxNi1hYWMyZWJjYmY1ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvN2QyZjM0 LWFmZmQtNGQxYy1iNDE2LWFhYzJlYmNiZjVkNC8xL05oYXJHT2E4N2VDRkM4cXV2 Wldaay1oQWh1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAnsQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID A0yxMA0GCSqGSIb3DQEBCwUAA4IBAQB4CUQ4J1683BvWFai2WseBSSk+onM76qm2 str8apSBbLoyjJoW/CGW4j4OEX/hvr+6Sla3eQwT+mp3bZj/NrnBodbVCrzi2ojN Od0Kebp5Yb9aVnqbxp3tsIZF6eASi2cPM5Obea2jyIH3YTv96WOY179gsZpWAOc0 Yqn63iYCpeB5GzhEqF7UuhSpj4QHHziwV7p0fNEtMbyxqR9GhEXhStlGwP1Rc/Y3 ukyjAw8WPL0UtXvfwWcuP/IwY83nxy5XX+LRFd8iR1clLiH7ZoUmwQEv5B2MF/qT 3mz06Y23SB5rKE7x6EaYuHFqHcf0k2uYUg90lAv0uQXx/sXRCBMO -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:35 2026 by rpki-client