This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer (raw, json) Hash identifier: dNsCST4brRJsIi1UAOjWeORnmOhSgLHG6uJ5runTOfY= Subject key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2101CC0B6258ADDB054F6D9DE5CD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200373 IP: 45.3.32.0 -- 45.3.55.255 IP: 45.3.62.0/24 IP: 65.111.0.0/19 IP: 95.141.242.0/24 IP: 104.167.19.0/24 IP: 104.167.25.0/24 IP: 104.207.32.0/19 IP: 209.50.160.0/19 IP: 216.26.224.0/19 IP: 2a09:dc00::/29 IP: 2a0a:1f40::/29 IP: 2a0a:da40::/29 IP: 2a0d:c980::/29 IP: 2a13:3f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:10:1c:c0:b6:25:8a:dd:b0:54:f6:d9:de:5c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:eb:57:2d:e3:9e:50:f1:e9:26:76:bf:b1: 23:ff:09:a3:2c:07:97:19:f9:3b:1d:80:0d:53:a7: a9:92:90:89:fe:55:47:30:9a:4d:67:19:5f:3c:c2: 89:01:1b:5d:44:39:98:b8:14:fe:7c:30:57:01:e6: 65:c5:e2:4f:51:9d:d8:d1:cf:f3:b4:75:b5:9b:b3: 3f:05:b9:23:63:7a:b3:96:26:38:70:9e:b1:cd:cf: f1:f3:e7:0c:74:92:2a:b3:fb:89:bd:39:17:19:8c: 7a:ac:15:8f:04:fc:fc:80:78:8b:d5:dd:47:c1:35: dd:21:13:59:34:3e:61:a7:e8:f3:d3:e4:86:16:c1: ce:de:a5:bf:e0:b4:13:28:18:e1:94:69:78:cd:73: ed:5a:51:87:55:05:33:58:0f:b9:5a:7a:85:bd:70: 9b:67:f4:c4:01:95:bf:41:ac:61:d3:cc:5e:d7:8f: 50:cf:e4:66:e9:50:48:ef:d0:cf:45:41:b2:55:a6: bf:51:25:89:e0:09:aa:44:9a:c1:fd:66:4a:73:1a: 04:4c:46:28:a3:ed:35:9a:bd:77:87:e0:f5:61:79: 54:f0:d9:2c:41:64:16:23:5d:42:9c:51:d5:dd:9c: a4:42:f4:de:28:09:5f:d2:1f:eb:32:26:c5:aa:cd: 1e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.3.32.0-45.3.55.255 45.3.62.0/24 65.111.0.0/19 95.141.242.0/24 104.167.19.0/24 104.167.25.0/24 104.207.32.0/19 209.50.160.0/19 216.26.224.0/19 IPv6: 2a09:dc00::/29 2a0a:1f40::/29 2a0a:da40::/29 2a0d:c980::/29 2a13:3f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200373 Signature Algorithm: sha256WithRSAEncryption b0:66:7a:31:08:15:a1:d0:c1:2e:a2:1b:9e:cf:5a:27:d2:29: 65:9b:fc:ed:ea:44:b7:77:3c:c3:7e:36:1a:d7:39:34:a7:45: 6f:27:b0:6b:e8:fd:c6:e6:51:02:02:d8:68:ab:ba:90:93:ca: 95:39:0c:58:5f:ab:29:b9:41:c9:c9:82:0a:a6:a1:4a:51:df: ba:ae:16:39:88:08:d5:e9:eb:01:56:ce:53:0b:b3:9b:17:85: cb:bc:cd:6a:4e:a6:0f:78:d1:9d:c6:67:ee:1d:a1:72:28:48: 16:82:f3:af:ba:96:1d:1f:8c:04:9f:37:56:5c:8b:73:9b:2f: 88:f6:6b:4b:b2:b3:af:39:55:b7:50:4e:bc:01:45:61:a1:65: a9:4b:7f:31:1b:57:21:e5:6d:bc:d1:61:e6:bc:a8:e6:79:e6: 23:44:c1:78:8e:84:80:16:6b:d6:5b:ff:33:2e:75:2c:42:da: 81:d7:22:0d:d9:9d:7a:d1:70:fa:ba:3d:fa:cc:09:fb:f3:9f: fd:e8:18:23:8e:d6:b2:66:23:1e:a5:f5:04:1b:aa:c1:0b:7c: bb:55:38:f4:d2:4c:07:3a:da:7f:4e:a5:42:ab:32:31:a8:85: 56:98:d5:69:a1:9e:2e:5d:cc:9d:41:9e:a9:fe:fd:17:1c:26: 51:6c:18:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt4ohAcwLYlit2wVPbZ3lzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjIyZmMyZjhhZDhiMDA4MzU3ZGJlNmYwMTk1OTYwYzlkZTYxYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQbrVy3jnlDx6SZ2v7Ej/wmjLAeX Gfk7HYANU6epkpCJ/lVHMJpNZxlfPMKJARtdRDmYuBT+fDBXAeZlxeJPUZ3Y0c/z tHW1m7M/BbkjY3qzliY4cJ6xzc/x8+cMdJIqs/uJvTkXGYx6rBWPBPz8gHiL1d1H wTXdIRNZND5hp+jz0+SGFsHO3qW/4LQTKBjhlGl4zXPtWlGHVQUzWA+5WnqFvXCb Z/TEAZW/Qaxh08xe149Qz+Rm6VBI79DPRUGyVaa/USWJ4AmqRJrB/WZKcxoETEYo o+01mr13h+D1YXlU8NksQWQWI11CnFHV3ZykQvTeKAlf0h/rMibFqs0etwIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFDYi/C+K2LAINX2+bwGVlgyd5hvVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2Y2M2U1 OC05ZWZjLTQwODItODJiYi0wODgzNWRmZjZjNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZjYzZTU4 LTllZmMtNDA4Mi04MmJiLTA4ODM1ZGZmNmM0Zi8xL05pTDhMNHJZc0FnMWZiNXZB WldXREozbUc5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwRAQCAAEwPjAMAwQFLQMgAwQDLQMwAwQALQM+AwQFQW8AAwQA X43yAwQAaKcTAwQAaKcZAwQFaM8gAwQF0TKgAwQF2BrgMCkEAgACMCMDBQMqCdwA AwUDKgofQAMFAyoK2kADBQMqDcmAAwUDKhM/gDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDDrUwDQYJKoZIhvcNAQELBQADggEBALBmejEIFaHQwS6iG57PWifSKWWb /O3qRLd3PMN+NhrXOTSnRW8nsGvo/cbmUQIC2GirupCTypU5DFhfqym5QcnJggqm oUpR37quFjmICNXp6wFWzlMLs5sXhcu8zWpOpg940Z3GZ+4doXIoSBaC86+6lh0f jASfN1Zci3ObL4j2a0uys685VbdQTrwBRWGhZalLfzEbVyHlbbzRYea8qOZ55iNE wXiOhIAWa9Zb/zMudSxC2oHXIg3ZnXrRcPq6PfrMCfvzn/3oGCOO1rJmIx6l9QQb qsELfLtVOPTSTAc62n9OpUKrMjGohVaY1Wmhni5dzJ1Bnqn+/RccJlFsGLY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:57 2026 by rpki-client