This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer File: Njdp-GRKWnGK5isFjdH7YstaPCA.cer (raw, json) Hash identifier: DpP7Q+EcgN3PXV9Tu8LZwXHVR02VMSA+xVxIZW5Mp5s= Subject key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BE85D7EECD09A664021191C876541 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50214 IP: 88.151.114.0/24 IP: 91.198.211.0/24 IP: 95.181.148.0 -- 95.181.175.255 IP: 95.183.36.0/22 IP: 185.12.124.0/22 IP: 193.3.184.0/24 IP: 194.26.229.0/24 IP: 2a02:eb00::/29 IP: 2a11:5bc0::/29 IP: 2a11:f840::/29 IP: 2a12:9c0::/29 IP: 2a12:2d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e8:5d:7e:ec:d0:9a:66:40:21:19:1c:87:65:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:1e:3c:8f:3b:e9:71:6d:97:42:8e:ff:88: 1c:84:14:0f:7b:e2:6c:c1:33:de:de:5e:ff:de:80: 9e:ce:e4:20:b9:71:c3:03:f1:68:f3:e1:a9:a7:85: 83:f6:25:19:43:5e:3a:89:6c:5e:70:4c:f7:02:f7: e8:4f:80:14:46:d7:5c:7e:9d:05:33:f2:8c:57:07: ea:02:33:42:03:9b:7c:b2:dc:9c:ac:e6:2b:c7:51: 7a:9c:08:7a:18:93:fc:2e:83:43:cb:20:b1:3e:a0: 8b:2b:38:ec:e1:07:e9:06:c3:d8:09:29:60:c0:7a: c6:bb:06:3b:66:1b:ec:f4:30:1a:00:d0:a1:be:24: 17:27:1f:82:e2:92:0a:24:00:63:57:2a:f5:8d:5d: 5d:e7:d0:41:e9:79:a0:7d:28:2e:e0:85:ef:a6:bb: fd:95:17:28:6d:19:d1:85:6d:4b:e7:14:84:b8:d7: fa:7a:f7:15:f5:ec:36:a3:55:da:88:90:8e:a3:f9: cb:ce:a3:49:89:87:12:99:3e:51:13:c6:b1:6e:92: 98:9a:33:06:79:e9:93:8d:d0:f9:f7:a5:66:02:e0: 15:2d:99:0e:31:18:cd:ed:51:d0:12:f1:82:f6:0a: 4c:8e:2d:bb:ac:d9:77:db:aa:8f:f1:1f:d1:b6:d7: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.114.0/24 91.198.211.0/24 95.181.148.0-95.181.175.255 95.183.36.0/22 185.12.124.0/22 193.3.184.0/24 194.26.229.0/24 IPv6: 2a02:eb00::/29 2a11:5bc0::/29 2a11:f840::/29 2a12:9c0::/29 2a12:2d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50214 Signature Algorithm: sha256WithRSAEncryption 34:5e:28:90:bf:c1:01:3e:8b:a9:30:c1:ba:0b:cd:ee:fc:2e: fb:ce:b7:75:34:bd:d7:b6:fa:4e:a0:56:8a:5e:0d:42:8c:5f: 65:32:a7:ba:32:f9:d3:5c:99:53:bd:e3:cc:94:46:57:ee:d5: 14:c5:9f:63:1c:bc:ca:e1:01:4c:eb:09:6d:3f:ea:31:1d:0d: 93:51:e9:33:a7:0c:c0:78:28:5e:ea:dc:47:5a:91:3d:7b:22: cc:29:07:54:3f:e4:16:4c:24:7a:e2:c9:fa:a6:bf:de:b4:2e: 6b:a8:85:e8:cd:c9:b1:d4:22:51:8c:98:bd:a6:b2:21:33:6b: bf:f4:2c:f3:af:e1:d0:a7:10:5c:da:67:d9:a3:5a:47:1e:9b: 35:26:86:63:48:8c:98:d1:7a:21:f1:98:40:fc:18:c1:f8:91: 22:c0:42:46:0c:36:72:a8:17:9c:e0:f5:92:61:47:c6:99:da: 4b:3c:16:5a:85:b1:f8:c0:f5:ff:09:9b:d9:44:ad:77:66:11: 57:07:3f:7b:10:6c:00:46:84:9d:52:34:54:09:91:a1:ee:2d: 29:36:98:03:ba:55:01:bd:c9:2f:c4:bf:ee:7d:c1:71:a9:1d: 32:20:3d:4f:f1:3c:71:cc:98:85:41:43:4d:1b:ef:91:be:6e: 2b:f4:7f:ff -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZt9W+hdfuzQmmZAIRkch2VBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjM3NjlmODY0NGE1YTcxOGFlNjJiMDU4ZGQxZmI2MmNiNWEzYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr8ePI876XFtl0KO/4gchBQPe+Js wTPe3l7/3oCezuQguXHDA/Fo8+Gpp4WD9iUZQ146iWxecEz3AvfoT4AURtdcfp0F M/KMVwfqAjNCA5t8stycrOYrx1F6nAh6GJP8LoNDyyCxPqCLKzjs4QfpBsPYCSlg wHrGuwY7Zhvs9DAaANChviQXJx+C4pIKJABjVyr1jV1d59BB6XmgfSgu4IXvprv9 lRcobRnRhW1L5xSEuNf6evcV9ew2o1XaiJCOo/nLzqNJiYcSmT5RE8axbpKYmjMG eemTjdD596VmAuAVLZkOMRjN7VHQEvGC9gpMji27rNl326qP8R/Rttd3jQIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFDY3afhkSlpxiuYrBY3R+2LLWjwgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzBmOGZl YS1mMDBhLTQ0MTUtYjM5Ni0zOTlmYzk2OTNiMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvMGY4ZmVh LWYwMGEtNDQxNS1iMzk2LTM5OWZjOTY5M2IyMi8xL05qZHAtR1JLV25HSzVpc0Zq ZEg3WXN0YVBDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYGCCsGAQUF BwEHAQH/BGcwZTA4BAIAATAyAwQAWJdyAwQAW8bTMAwDBAJftZQDBARftaADBAJf tyQDBAK5DHwDBADBA7gDBADCGuUwKQQCAAIwIwMFAyoC6wADBQMqEVvAAwUDKhH4 QAMFAyoSCcADBQMqEi1AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEJjANBgkq hkiG9w0BAQsFAAOCAQEANF4okL/BAT6LqTDBugvN7vwu+863dTS917b6TqBWil4N QoxfZTKnujL501yZU73jzJRGV+7VFMWfYxy8yuEBTOsJbT/qMR0Nk1HpM6cMwHgo XurcR1qRPXsizCkHVD/kFkwkeuLJ+qa/3rQua6iF6M3JsdQiUYyYvaayITNrv/Qs 86/h0KcQXNpn2aNaRx6bNSaGY0iMmNF6IfGYQPwYwfiRIsBCRgw2cqgXnOD1kmFH xpnaSzwWWoWx+MD1/wmb2UStd2YRVwc/exBsAEaEnVI0VAmRoe4tKTaYA7pVAb3J L8S/7n3BcakdMiA9T/E8ccyYhUFDTRvvkb5uK/R//w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:04 2026 by rpki-client