This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer File: nHPZRT--37gMRUO7Up_DMMH4wc4.cer (raw, json) Hash identifier: vYxgJQEroDz1B2NgHK4Fp0ZNYPDC3uiI4+O2dIZYTak= Subject key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3088772341B7DDD5D24F7F25898F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48076 AS: 61400 IP: 31.200.248.0/21 IP: 37.0.120.0/21 IP: 46.21.252.0/22 IP: 62.76.24.0/22 IP: 62.76.88.0/22 IP: 62.76.100.0/22 IP: 62.76.112.0/22 IP: 77.220.216.0/21 IP: 78.24.92.0/22 IP: 79.171.170.0/23 IP: 89.248.230.0/23 IP: 89.248.235.0 -- 89.248.237.255 IP: 91.107.84.0/22 IP: 91.227.34.0/23 IP: 109.232.111.0/24 IP: 185.16.212.0/22 IP: 185.40.28.0/22 IP: 185.62.100.0/22 IP: 185.111.216.0/22 IP: 185.126.92.0/22 IP: 185.218.180.0/23 IP: 193.243.161.0/24 IP: 193.243.166.0/24 IP: 193.243.182.0/24 IP: 193.246.51.0/24 IP: 195.246.246.0 -- 195.246.249.255 IP: 212.8.232.0/22 IP: 217.72.7.0/24 IP: 217.199.208.0/23 IP: 217.199.211.0/24 IP: 217.199.213.0/24 IP: 217.199.217.0/24 IP: 217.199.219.0 -- 217.199.223.255 IP: 2a03:220::/32 IP: 2a07:f8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:08:87:72:34:1b:7d:dd:5d:24:f7:f2:58:98:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:00:a8:76:00:57:36:b2:c3:48:91:61:69: 7b:f9:8c:7a:8d:9e:ca:40:0d:68:f4:f5:f6:af:45: bd:b8:02:11:eb:da:e6:9b:29:ce:0a:08:21:eb:b7: 4d:51:08:a1:e6:0a:f4:26:e0:f8:17:8e:81:71:73: 35:77:9f:ad:45:73:b0:40:56:01:a2:17:7c:00:15: 67:4a:91:b9:fc:ca:0f:2b:17:d1:88:4e:c6:84:06: 57:b3:ad:eb:36:01:1c:39:89:25:45:1f:a5:df:a7: 33:6d:55:f8:a4:d9:e1:d0:53:89:08:7c:eb:9c:11: 9d:98:3c:e0:f0:3f:99:1f:cf:e3:cf:d2:73:a6:71: 10:ff:bb:45:2d:53:eb:15:c7:33:8b:3b:d4:0b:56: 67:f4:c8:a7:57:bd:13:a5:6d:7c:d9:d0:6a:bc:f9: 77:c1:68:bc:ce:67:82:d4:bf:cd:5c:af:87:cf:de: be:d5:07:bd:bd:40:6f:ed:2f:ea:cd:a1:a8:6b:28: 44:50:eb:76:1c:ca:3f:13:eb:21:94:ea:23:e8:78: 63:b5:11:b1:b7:d4:7e:47:27:e7:a9:ea:e1:00:62: b7:0b:95:43:18:73:69:ae:c1:c6:3e:6d:f6:f8:cb: ec:cf:b1:a5:03:e9:a6:34:30:97:f2:5a:81:62:7b: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.200.248.0/21 37.0.120.0/21 46.21.252.0/22 62.76.24.0/22 62.76.88.0/22 62.76.100.0/22 62.76.112.0/22 77.220.216.0/21 78.24.92.0/22 79.171.170.0/23 89.248.230.0/23 89.248.235.0-89.248.237.255 91.107.84.0/22 91.227.34.0/23 109.232.111.0/24 185.16.212.0/22 185.40.28.0/22 185.62.100.0/22 185.111.216.0/22 185.126.92.0/22 185.218.180.0/23 193.243.161.0/24 193.243.166.0/24 193.243.182.0/24 193.246.51.0/24 195.246.246.0-195.246.249.255 212.8.232.0/22 217.72.7.0/24 217.199.208.0/23 217.199.211.0/24 217.199.213.0/24 217.199.217.0/24 217.199.219.0-217.199.223.255 IPv6: 2a03:220::/32 2a07:f8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48076 61400 Signature Algorithm: sha256WithRSAEncryption 2e:68:7f:fd:b1:57:8d:5d:44:1e:67:25:3c:a4:6e:e7:f2:39: 63:b7:b8:05:55:7a:1e:be:7d:5b:0c:86:47:75:8f:0d:78:29: 83:0f:34:bd:e9:d7:46:f1:aa:bd:39:ab:5b:77:ac:f1:9b:d3: 01:10:c4:83:f5:a7:a7:0a:f5:1b:3a:ed:a8:f5:56:7d:65:dc: 37:83:58:92:58:05:90:c4:7e:c6:95:f2:96:04:91:4e:2b:74: 89:14:5b:69:61:5a:68:cc:8a:cb:e4:68:68:1e:da:99:4b:de: ef:30:2d:f5:c8:fd:18:0d:f6:d4:ba:94:39:e2:db:bb:b9:0e: f2:40:6e:7d:b8:97:5e:f5:10:5f:6a:2f:06:1c:36:a8:5f:59: 6a:d7:5c:7c:3b:c5:7c:98:54:0c:4a:90:b4:f9:be:58:7b:85: 86:f3:0d:58:06:bc:1d:08:fd:f3:b3:2d:fd:0c:f5:c4:01:41: e0:7a:41:a0:a5:a6:39:f0:39:75:a3:4d:60:58:18:46:e6:1d: bf:c9:f6:fc:0c:21:40:37:a7:b1:e0:93:ce:d8:fc:82:23:e8: 75:14:4b:6d:6f:9a:2f:65:c7:6c:e2:2c:bc:c1:97:b2:ef:b4: 8a:a8:81:8b:b9:0c:63:e5:0e:ed:e0:11:ef:d5:7e:02:c9:cc: bc:4d:f5:95 -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgISAZt4owiHcjQbfd1dJPfyWJj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzczZDk0NTNmYmVkZmI4MGM0NTQzYmI1MjlmYzMzMGMxZjhjMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc0AqHYAVzayw0iRYWl7+Yx6jZ7K QA1o9PX2r0W9uAIR69rmmynOCggh67dNUQih5gr0JuD4F46BcXM1d5+tRXOwQFYB ohd8ABVnSpG5/MoPKxfRiE7GhAZXs63rNgEcOYklRR+l36czbVX4pNnh0FOJCHzr nBGdmDzg8D+ZH8/jz9JzpnEQ/7tFLVPrFcczizvUC1Zn9MinV70TpW182dBqvPl3 wWi8zmeC1L/NXK+Hz96+1Qe9vUBv7S/qzaGoayhEUOt2HMo/E+shlOoj6HhjtRGx t9R+RyfnqerhAGK3C5VDGHNprsHGPm32+Mvsz7GlA+mmNDCX8lqBYnvDNQIDAQAB o4IDmjCCA5YwHQYDVR0OBBYEFJxz2UU/vt+4DEVDu1KfwzDB+MHOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwL2IzNTM3 OS0yMTIyLTQxOTEtODgyMS1jNDdlMThkZjAzNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvYjM1Mzc5 LTIxMjItNDE5MS04ODIxLWM0N2UxOGRmMDM3MS8xL25IUFpSVC0tMzdnTVJVTzdV cF9ETU1INHdjNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBEgYIKwYB BQUHAQcBAf8EggEBMIH+MIHlBAIAATCB3gMEAx/I+AMEAyUAeAMEAi4V/AMEAj5M GAMEAj5MWAMEAj5MZAMEAj5McAMEA03c2AMEAk4YXAMEAU+rqgMEAVn45jAMAwQA WfjrAwQBWfjsAwQCW2tUAwQBW+MiAwQAbehvAwQCuRDUAwQCuSgcAwQCuT5kAwQC uW/YAwQCuX5cAwQBudq0AwQAwfOhAwQAwfOmAwQAwfO2AwQAwfYzMAwDBAHD9vYD BAHD9vgDBALUCOgDBADZSAcDBAHZx9ADBADZx9MDBADZx9UDBADZx9kwDAMEANnH 2wMEBdnHwDAUBAIAAjAOAwUAKgMCIAMFAyoH+MAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDALvMAgMA79gwDQYJKoZIhvcNAQELBQADggEBAC5of/2xV41dRB5nJTyk bufyOWO3uAVVeh6+fVsMhkd1jw14KYMPNL3p10bxqr05q1t3rPGb0wEQxIP1p6cK 9Rs67aj1Vn1l3DeDWJJYBZDEfsaV8pYEkU4rdIkUW2lhWmjMisvkaGge2plL3u8w LfXI/RgN9tS6lDni27u5DvJAbn24l171EF9qLwYcNqhfWWrXXHw7xXyYVAxKkLT5 vlh7hYbzDVgGvB0I/fOzLf0M9cQBQeB6QaClpjnwOXWjTWBYGEbmHb/J9vwMIUA3 p7Hgk87Y/IIj6HUUS21vmi9lx2ziLLzBl7LvtIqogYu5DGPlDu3gEe/VfgLJzLxN 9ZU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:02 2026 by rpki-client