This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer (raw, json) Hash identifier: X2wnb+FqjkUSdoSxp7HjbvQZkxASei0Gg+ygwHnYRV8= Subject key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8047AFA6B295B48909A5B183B30A8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201527 AS: 204145 IP: 45.130.220.0/22 IP: 45.157.196.0/22 IP: 89.35.179.0/24 IP: 185.50.72.0/22 IP: 185.113.64.0/22 IP: 185.194.204.0/22 IP: 2a01:a060::/32 IP: 2a02:7400::/32 IP: 2a0a:50c0::/29 IP: 2a0e:5840::/29 IP: 2a0f:a2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:47:af:a6:b2:95:b4:89:09:a5:b1:83:b3:0a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:9e:a5:b7:e2:dc:dc:22:c9:94:98:87:34: 28:2e:8f:4c:f1:dd:43:1c:88:7c:56:4d:58:08:a4: 4f:7b:4b:4b:a6:4e:c2:da:bb:e1:61:97:d5:af:61: 5e:dc:5e:1a:96:f2:ba:45:13:c9:b0:9c:35:33:1f: 76:a2:84:82:57:19:a9:92:5f:83:ac:03:f8:47:5b: f3:3f:de:46:ed:c6:fd:1b:84:aa:ad:2d:85:6b:da: c3:60:6e:89:1d:ec:5d:0a:06:a0:e8:c2:12:9d:4e: 94:1c:66:a3:77:dc:b3:a2:94:fd:01:0e:18:f5:89: f6:64:1c:ba:9a:6f:46:29:f2:d7:9e:47:15:48:f2: 94:d3:3a:5f:ce:c1:c3:1d:d5:e0:e3:e1:0d:d8:de: 44:c7:55:fd:77:6b:e5:f3:46:be:c5:e6:8a:a4:c0: a8:72:4d:16:55:55:99:84:67:ba:ad:f1:6f:e2:bf: bd:72:e3:11:c6:f4:3f:2d:2f:b4:c1:4a:c1:32:cd: be:8c:c1:f2:16:4e:ab:e1:6f:b6:5d:2f:69:de:6d: 5c:d8:c9:88:6c:05:6d:37:2e:46:08:36:36:a0:34: c6:69:37:d0:a5:a8:45:9b:22:fe:65:34:04:82:9d: a6:b5:f7:19:14:a2:6c:9e:e5:1f:a9:03:14:2d:b2: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.220.0/22 45.157.196.0/22 89.35.179.0/24 185.50.72.0/22 185.113.64.0/22 185.194.204.0/22 IPv6: 2a01:a060::/32 2a02:7400::/32 2a0a:50c0::/29 2a0e:5840::/29 2a0f:a2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201527 204145 Signature Algorithm: sha256WithRSAEncryption 25:7c:8a:9e:ae:8e:94:87:2d:ad:55:a5:0a:9d:e1:ca:5b:a2: cf:ed:13:e0:b8:60:5a:fc:92:79:58:e8:18:49:3d:8b:c2:11: e9:d8:dc:69:6b:61:ba:c7:24:ab:45:e4:f2:7a:a1:d2:a6:76: c7:91:e9:dc:17:91:83:4c:a8:d2:31:77:88:e4:f3:32:34:51: 51:5b:ad:bf:d1:e9:f5:89:16:a1:e3:26:94:6b:0b:9e:c3:45: a3:74:7c:fd:32:4a:59:9c:bf:c4:47:74:b3:75:5c:57:77:d2: 1d:f1:53:89:a1:dc:73:86:36:0b:e2:44:08:92:dd:94:91:a3: 32:76:18:6e:27:1e:c5:6c:87:84:df:4e:d8:e9:8c:61:fe:af: 86:c4:b7:db:28:45:5c:cf:8f:0b:31:b4:7f:ee:89:f0:58:29: 12:2c:25:9e:d5:fb:d7:95:89:b3:e7:9c:a9:1b:38:dc:3b:54: 4f:f0:95:9b:ab:4d:db:19:c5:46:bb:6a:43:c5:39:18:63:44: 96:db:2d:97:c7:fc:7c:02:71:73:3a:a7:9f:bb:22:11:6b:99: 8f:50:4c:65:64:de:be:aa:0f:32:57:1f:c1:9d:9c:8a:d2:ce: f2:ca:0e:b9:dc:3d:25:59:9c:73:50:08:20:88:65:a0:a0:45: 3b:f1:fc:79 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt8gEevprKVtIkJpbGDswqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjk0ZmNjNmJmNmE4NzQwZmE3ODE0NjQxZmQ5ZDZlYzhkODYyZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nSepbfi3NwiyZSYhzQoLo9M8d1D HIh8Vk1YCKRPe0tLpk7C2rvhYZfVr2Fe3F4alvK6RRPJsJw1Mx92ooSCVxmpkl+D rAP4R1vzP95G7cb9G4SqrS2Fa9rDYG6JHexdCgag6MISnU6UHGajd9yzopT9AQ4Y 9Yn2ZBy6mm9GKfLXnkcVSPKU0zpfzsHDHdXg4+EN2N5Ex1X9d2vl80a+xeaKpMCo ck0WVVWZhGe6rfFv4r+9cuMRxvQ/LS+0wUrBMs2+jMHyFk6r4W+2XS9p3m1c2MmI bAVtNy5GCDY2oDTGaTfQpahFmyL+ZTQEgp2mtfcZFKJsnuUfqQMULbJS3wIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjL2E4ZGQ5 ZS03MWYyLTRmNzctYjU3NS0wZDNmY2U0MjliZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvYThkZDll LTcxZjItNGY3Ny1iNTc1LTBkM2ZjZTQyOWJkZS8xL05wVDh4cjlxaDBENmVCUmtI OW5XN0kyR0xsOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGCCsGAQUF BwEHAQH/BFkwVzAqBAIAATAkAwQCLYLcAwQCLZ3EAwQAWSOzAwQCuTJIAwQCuXFA AwQCucLMMCkEAgACMCMDBQAqAaBgAwUAKgJ0AAMFAyoKUMADBQMqDlhAAwUDKg+i wDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDEzcCAwMdcTANBgkqhkiG9w0BAQsF AAOCAQEAJXyKnq6OlIctrVWlCp3hyluiz+0T4LhgWvySeVjoGEk9i8IR6djcaWth usckq0Xk8nqh0qZ2x5Hp3BeRg0yo0jF3iOTzMjRRUVutv9Hp9YkWoeMmlGsLnsNF o3R8/TJKWZy/xEd0s3VcV3fSHfFTiaHcc4Y2C+JECJLdlJGjMnYYbicexWyHhN9O 2OmMYf6vhsS32yhFXM+PCzG0f+6J8FgpEiwlntX715WJs+ecqRs43DtUT/CVm6tN 2xnFRrtqQ8U5GGNEltstl8f8fAJxczqnn7siEWuZj1BMZWTevqoPMlcfwZ2citLO 8soOudw9JVmcc1AIIIhloKBFO/H8eQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:56 2026 by rpki-client