This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer File: NvHVZ2vdcEM0sts0ypBNd83Suso.cer (raw, json) Hash identifier: iW+u+hbUtElMacEERKM8wLuCzPnWIRAEMVH4RP0Itfs= Subject key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E856A3DA6542099C29E6A91B666E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50599 AS: 206972 IP: 89.40.144.0/22 IP: 91.204.160.0 -- 91.204.162.255 IP: 91.236.52.0/24 IP: 91.236.54.0/23 IP: 128.0.54.0/24 IP: 185.11.128.0/22 IP: 185.72.196.0/22 IP: 185.170.104.0/22 IP: 188.210.220.0/22 IP: 193.105.125.0/24 IP: 195.177.216.0/23 IP: 2a02:e7c0::/29 IP: 2a0b:5480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:85:6a:3d:a6:54:20:99:c2:9e:6a:91:b6:66:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:c8:e5:ef:30:25:d8:f8:60:dc:af:31:e0: 8d:b9:38:df:df:37:c8:46:4b:2d:df:33:09:aa:d6: 60:01:45:79:88:2f:85:b2:f8:e7:f5:82:7b:77:93: 34:8a:cb:ce:ab:95:6b:09:6e:69:35:61:dc:c7:43: d9:0a:00:37:5c:2e:44:7e:01:4e:5e:ba:1d:f6:44: 21:de:bb:8c:94:da:a1:04:b1:90:1f:65:e6:30:cd: 15:f8:30:a0:38:1e:44:f2:b8:72:01:3c:ac:f5:c5: d9:ba:fc:1e:d7:ba:d7:d7:3f:95:ad:f4:44:2d:87: f3:55:96:7f:74:f9:61:aa:fb:9c:a3:4f:e3:ca:a3: 56:71:bb:85:b5:eb:fc:05:64:34:c5:c9:e4:a9:b6: 94:7f:e9:c9:89:67:7d:68:a2:be:a8:b5:28:44:2d: 17:d8:73:1b:14:2d:d9:1c:d9:f9:ca:a5:89:5b:2b: b6:3e:f6:d3:ab:26:8a:0d:dd:ea:a0:04:5a:2e:23: d7:72:bc:47:d6:f8:df:bc:13:1d:80:14:a1:82:a4: 4f:0a:2a:d0:4d:ba:ca:09:b1:b2:c7:de:dc:6d:7f: 50:fd:2f:d7:ae:e2:69:cf:31:47:0f:7f:d8:99:c4: b7:49:56:e9:b0:ac:09:ae:37:1c:1f:11:d6:8f:7c: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.144.0/22 91.204.160.0-91.204.162.255 91.236.52.0/24 91.236.54.0/23 128.0.54.0/24 185.11.128.0/22 185.72.196.0/22 185.170.104.0/22 188.210.220.0/22 193.105.125.0/24 195.177.216.0/23 IPv6: 2a02:e7c0::/29 2a0b:5480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50599 206972 Signature Algorithm: sha256WithRSAEncryption 69:ce:ab:69:16:92:e0:03:9c:69:78:35:a0:55:f1:e8:f4:8a: aa:9f:40:ba:34:27:72:8c:c4:d9:4e:9b:a8:cf:03:61:25:c7: 3a:12:16:98:b9:3d:53:ae:83:3a:af:32:27:8a:17:42:c8:c7: bc:55:30:9a:6b:30:1e:76:fe:37:da:e6:77:e3:81:74:07:44: d1:50:12:db:ae:44:a1:7d:be:b0:fa:03:3a:a5:4d:d6:8b:04: 24:5f:a3:69:7d:c9:5c:bd:99:07:95:6e:cd:14:b1:08:f8:bd: 0e:81:00:64:82:16:04:b4:00:60:63:03:b4:1e:62:79:41:a3: ea:9f:e6:1f:bb:08:2e:64:34:54:47:3f:d0:86:00:8c:f6:30: ec:71:04:ba:ae:d6:ae:79:63:86:7b:61:00:2a:6b:1e:df:8a: a6:ad:29:e9:4f:63:af:fe:64:c7:a6:fa:bc:76:a8:77:a9:e5: f1:44:41:61:2f:44:35:d3:28:61:0e:6e:59:9b:87:ec:48:eb: ce:ef:fd:11:a3:d7:6c:fa:95:71:fc:08:a0:f3:23:4f:e2:a5: 63:0f:33:4c:57:9a:64:78:57:29:54:84:e3:7e:d7:c2:e2:84: dc:c7:f2:d6:24:f9:58:5d:86:5e:fd:e3:2f:06:40:aa:6e:da: d4:38:bf:f9 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISAZt5foVqPaZUIJnCnmqRtmbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmYxZDU2NzZiZGQ3MDQzMzRiMmRiMzRjYTkwNGQ3N2NkZDJiYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSvI5e8wJdj4YNyvMeCNuTjf3zfI Rkst3zMJqtZgAUV5iC+Fsvjn9YJ7d5M0isvOq5VrCW5pNWHcx0PZCgA3XC5EfgFO Xrod9kQh3ruMlNqhBLGQH2XmMM0V+DCgOB5E8rhyATys9cXZuvwe17rX1z+VrfRE LYfzVZZ/dPlhqvuco0/jyqNWcbuFtev8BWQ0xcnkqbaUf+nJiWd9aKK+qLUoRC0X 2HMbFC3ZHNn5yqWJWyu2PvbTqyaKDd3qoARaLiPXcrxH1vjfvBMdgBShgqRPCirQ TbrKCbGyx97cbX9Q/S/XruJpzzFHD3/YmcS3SVbpsKwJrjccHxHWj3x9YwIDAQAB o4IC/zCCAvswHQYDVR0OBBYEFDbx1Wdr3XBDNLLbNMqQTXfN0rrKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzRkODY1 Yy03MGY1LTQ0YjktODhhNi1lYThhZmU2Nzg5NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNGQ4NjVj LTcwZjUtNDRiOS04OGE2LWVhOGFmZTY3ODk3MC8xL052SFZaMnZkY0VNMHN0czB5 cEJOZDgzU3Vzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHkGCCsGAQUF BwEHAQH/BGowaDBQBAIAATBKAwQCWSiQMAwDBAVbzKADBABbzKIDBABb7DQDBAFb 7DYDBACAADYDBAK5C4ADBAK5SMQDBAK5qmgDBAK80twDBADBaX0DBAHDsdgwFAQC AAIwDgMFAyoC58ADBQMqC1SAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDFpwID Ayh8MA0GCSqGSIb3DQEBCwUAA4IBAQBpzqtpFpLgA5xpeDWgVfHo9Iqqn0C6NCdy jMTZTpuozwNhJcc6EhaYuT1TroM6rzInihdCyMe8VTCaazAedv432uZ344F0B0TR UBLbrkShfb6w+gM6pU3WiwQkX6NpfclcvZkHlW7NFLEI+L0OgQBkghYEtABgYwO0 HmJ5QaPqn+YfuwguZDRURz/QhgCM9jDscQS6rtaueWOGe2EAKmse34qmrSnpT2Ov /mTHpvq8dqh3qeXxREFhL0Q10yhhDm5Zm4fsSOvO7/0Ro9ds+pVx/Aig8yNP4qVj DzNMV5pkeFcpVITjftfC4oTcx/LWJPlYXYZe/eMvBkCqbtrUOL/5 -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:34 2026 by rpki-client