This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer File: NoBlGroGa0CEp-0g1_UgGyKWwZc.cer (raw, json) Hash identifier: 2UwVbeFfnru9CRmde5P+gyy7drRJ4qsSVSONzR3105c= Subject key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84B27FF88081C5DFF698750101A21E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35725 IP: 89.33.32.0/21 IP: 89.33.48.0/21 IP: 89.33.152.0/21 IP: 89.33.168.0/21 IP: 89.34.80.0/21 IP: 89.35.184.0/21 IP: 89.35.240.0/21 IP: 89.36.240.0/21 IP: 89.37.48.0/21 IP: 89.37.160.0/21 IP: 89.38.0.0/21 IP: 89.41.144.0/21 IP: 89.42.240.0/21 IP: 89.43.248.0/21 IP: 89.45.76.0/22 IP: 89.45.144.0/21 IP: 178.138.0.0/16 IP: 193.104.247.0/24 IP: 2a02:4800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b2:7f:f8:80:81:c5:df:f6:98:75:01:01:a2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3680651aba066b4084a7ed20d7f5201b2296c197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:cd:a4:b6:f0:8a:94:c5:69:52:5d:4e:14: 94:fc:20:de:0e:b0:28:74:ac:15:ab:16:9a:dd:3c: 24:c2:66:3b:07:ce:7c:13:71:a6:8d:71:ef:c1:e5: 34:eb:e5:f6:66:9f:d7:08:b6:b5:42:a2:c3:21:a6: c7:32:28:5c:79:30:a5:96:98:79:79:a0:95:67:18: ae:14:41:79:e5:11:80:87:18:c9:f2:eb:88:9c:19: cf:7b:10:4f:ad:2b:49:9c:a8:5e:f1:85:82:b0:3f: d9:5b:16:54:42:c8:95:e3:b4:bc:0e:2f:cc:4f:81: c2:6e:22:92:fc:77:ca:47:17:0e:e8:c9:76:6a:0b: c2:f6:c7:51:81:70:62:63:71:bc:c0:d3:13:9d:fe: c6:22:92:76:56:49:78:40:a3:68:6b:ae:da:a9:82: d6:33:a4:38:38:42:4d:4f:73:ec:35:a9:84:8b:76: 00:7e:ec:89:05:ec:b4:b9:cc:6d:31:c9:3b:ac:ff: b8:e6:35:27:fa:89:9c:a5:ef:0e:60:61:49:0c:ae: f7:65:ee:60:8c:17:78:35:d8:bc:79:fc:f9:d1:68: c2:64:27:0e:ef:a8:99:b3:7a:98:5c:44:a3:1a:10: 7c:71:ff:6c:30:64:a8:9c:a5:4f:4b:64:3b:be:f2: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.32.0/21 89.33.48.0/21 89.33.152.0/21 89.33.168.0/21 89.34.80.0/21 89.35.184.0/21 89.35.240.0/21 89.36.240.0/21 89.37.48.0/21 89.37.160.0/21 89.38.0.0/21 89.41.144.0/21 89.42.240.0/21 89.43.248.0/21 89.45.76.0/22 89.45.144.0/21 178.138.0.0/16 193.104.247.0/24 IPv6: 2a02:4800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35725 Signature Algorithm: sha256WithRSAEncryption aa:fd:a9:f7:b8:26:12:c5:6f:23:e0:50:b6:13:43:78:49:c8: ee:c1:86:07:5e:90:56:eb:10:04:ea:08:7c:e1:0d:ec:cd:cc: 23:8a:fd:30:bd:7c:7c:cd:36:3b:d8:2e:43:7d:09:ec:29:0a: dc:01:26:9d:af:80:0f:fe:18:3d:de:61:66:f6:92:43:15:f1: d3:c9:94:c9:a1:79:06:0b:1c:56:e3:95:f2:27:e7:1c:e4:13: b7:bc:10:95:61:78:bb:99:ac:59:2b:31:01:96:19:63:e3:ef: e7:f1:00:44:d6:91:9d:8d:7e:4c:e9:86:9d:2c:63:4f:80:9c: a9:d2:cf:8e:01:45:29:3d:c9:e6:51:c8:3d:b0:67:aa:8f:c7: c2:8f:fc:b2:ce:45:b8:1c:2f:04:4c:7b:22:a9:26:d4:90:4d: af:cf:87:90:6e:1d:e2:71:7f:03:4d:3b:b1:bf:e7:11:9e:c4: ed:d9:4a:c2:fe:bd:1f:ad:01:84:44:5a:c5:81:b5:ce:2b:c0: f3:e3:3e:e6:33:81:60:d0:ef:98:8b:2c:09:d7:c0:a8:38:5a: 21:0f:35:08:62:57:0d:cf:a3:d1:85:a6:94:da:ab:a7:d3:08: 93:d0:33:38:38:1c:6b:73:8d:27:f5:f1:22:0a:37:f7:ef:e8: 5f:92:2e:a8 -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISAZt/hLJ/+ICBxd/2mHUBAaIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjgwNjUxYWJhMDY2YjQwODRhN2VkMjBkN2Y1MjAxYjIyOTZjMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlajNpLbwipTFaVJdThSU/CDeDrAo dKwVqxaa3TwkwmY7B858E3GmjXHvweU06+X2Zp/XCLa1QqLDIabHMihceTCllph5 eaCVZxiuFEF55RGAhxjJ8uuInBnPexBPrStJnKhe8YWCsD/ZWxZUQsiV47S8Di/M T4HCbiKS/HfKRxcO6Ml2agvC9sdRgXBiY3G8wNMTnf7GIpJ2Vkl4QKNoa67aqYLW M6Q4OEJNT3PsNamEi3YAfuyJBey0ucxtMck7rP+45jUn+omcpe8OYGFJDK73Ze5g jBd4Ndi8efz50WjCZCcO76iZs3qYXESjGhB8cf9sMGSonKVPS2Q7vvKySwIDAQAB o4IDFzCCAxMwHQYDVR0OBBYEFDaAZRq6BmtAhKftINf1IBsilsGXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2QxMGI5 NC00MTA1LTQ1ZTItYTcwNy01MjI0Y2YxM2Y1ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvZDEwYjk0 LTQxMDUtNDVlMi1hNzA3LTUyMjRjZjEzZjU4Ni8xL05vQmxHcm9HYTBDRXAtMGcx X1VnR3lLV3daYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGVBggrBgEF BQcBBwEB/wSBhTCBgjBxBAIAATBrAwQDWSEgAwQDWSEwAwQDWSGYAwQDWSGoAwQD WSJQAwQDWSO4AwQDWSPwAwQDWSTwAwQDWSUwAwQDWSWgAwQDWSYAAwQDWSmQAwQD WSrwAwQDWSv4AwQCWS1MAwQDWS2QAwMAsooDBADBaPcwDQQCAAIwBwMFAyoCSAAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIuNMA0GCSqGSIb3DQEBCwUAA4IBAQCq /an3uCYSxW8j4FC2E0N4ScjuwYYHXpBW6xAE6gh84Q3szcwjiv0wvXx8zTY72C5D fQnsKQrcASadr4AP/hg93mFm9pJDFfHTyZTJoXkGCxxW45XyJ+cc5BO3vBCVYXi7 maxZKzEBlhlj4+/n8QBE1pGdjX5M6YadLGNPgJyp0s+OAUUpPcnmUcg9sGeqj8fC j/yyzkW4HC8ETHsiqSbUkE2vz4eQbh3icX8DTTuxv+cRnsTt2UrC/r0frQGERFrF gbXOK8Dz4z7mM4Fg0O+YiywJ18CoOFohDzUIYlcNz6PRhaaU2qun0wiT0DM4OBxr c40n9fEiCjf37+hfki6o -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:32 2026 by rpki-client