This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer (raw, json) Hash identifier: RUmjynJFCluBmo62a3X65kPmBIplCp9dwvCR81Nnam0= Subject key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C68ABADFFC7A65AF4545F16BE1F844 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.143.99.0 -- 193.143.114.255 IP: 193.143.116.0 -- 193.143.118.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8a:ba:df:fc:7a:65:af:45:45:f1:6b:e1:f8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:3e:aa:05:e1:b5:2c:77:30:93:04:dc:f8: 58:63:11:a3:61:76:2e:0b:dd:d4:58:8f:44:e9:1a: 65:ce:65:0d:5c:5f:52:e4:ab:ed:8b:8f:40:42:04: 86:56:88:ff:f8:4a:d2:77:73:ba:05:96:59:15:67: e1:fb:6f:a7:26:71:0a:ed:fe:6b:b8:73:d3:9b:4c: 20:bf:61:1a:be:c3:b1:7e:3c:9a:49:00:65:73:10: 35:78:cb:39:22:88:36:fd:9b:a2:5b:b2:ba:af:cc: be:0b:90:06:6b:6d:03:e6:9a:cb:55:ac:70:7d:de: b6:a8:78:37:5f:0d:8e:25:68:2b:84:7b:02:f8:9a: 3d:92:36:7f:7f:43:9d:77:81:13:23:ff:bf:07:12: 95:bb:c5:bf:61:48:15:e9:61:f4:4d:06:50:a3:91: b6:36:c2:42:00:58:e4:12:21:58:19:64:1c:2a:27: e9:fe:a1:89:80:7c:04:c1:39:83:02:4a:4e:a7:4c: a0:b6:61:88:da:b7:99:ec:8a:4a:5c:22:b9:be:58: f4:7b:2d:d4:95:d4:59:58:dc:b9:50:37:b6:53:73: 0e:08:24:22:c6:f7:b7:c7:d3:05:37:84:41:e0:27: 33:62:c8:99:c6:84:77:96:99:1d:bc:ad:cf:0e:1e: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.99.0-193.143.114.255 193.143.116.0-193.143.118.255 Signature Algorithm: sha256WithRSAEncryption 48:a9:94:4f:f2:06:9f:0f:20:67:6c:9a:af:30:27:3b:7e:24: d8:72:63:db:b6:5a:27:16:8b:25:cb:b2:6c:59:a8:64:31:d2: 4d:52:b6:55:05:8a:a0:a4:5c:3e:02:1c:02:ad:a7:cd:ce:9d: 1f:2a:3e:cf:bd:d8:d8:15:b5:03:3f:60:92:e7:20:be:0e:86: 84:0d:96:d3:0b:ee:80:44:a2:da:b0:ef:cc:40:9d:63:22:91: 09:d6:a5:f0:37:95:38:a7:69:04:59:29:6b:4d:c0:48:f5:a3: 7e:ba:61:20:15:52:58:8b:55:67:7f:52:33:b9:38:4e:7f:32: ad:f5:f1:19:7b:62:0f:c8:09:d5:b4:ba:20:1c:b5:88:5b:e8: 3b:31:41:a3:f0:fe:c6:43:8a:56:79:f0:5a:a0:55:1e:89:dc: 7f:ba:00:77:18:47:7d:be:c6:15:7b:0b:80:31:c9:62:4f:78: ef:a2:b7:fe:95:74:e4:06:45:be:37:a7:fd:d5:7a:cb:44:4b: b0:22:fa:3d:ec:df:8a:cb:f8:06:e6:8f:ef:75:29:40:81:38: ca:dd:c3:a5:36:d7:c6:c7:bd:51:04:74:07:b2:3e:20:39:5b: b4:de:bd:ea:64:2c:c9:07:62:e9:ed:81:8f:2b:2e:a7:0a:c9: 0d:cc:01:41 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt3xoq63/x6Za9FRfFr4fhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTAyZTA2NGM5OGIzMjMxYzNmMjE0OGExYzNkOWMzODdkNDg5ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneY+qgXhtSx3MJME3PhYYxGjYXYu C93UWI9E6RplzmUNXF9S5Kvti49AQgSGVoj/+ErSd3O6BZZZFWfh+2+nJnEK7f5r uHPTm0wgv2EavsOxfjyaSQBlcxA1eMs5Iog2/ZuiW7K6r8y+C5AGa20D5prLVaxw fd62qHg3Xw2OJWgrhHsC+Jo9kjZ/f0Odd4ETI/+/BxKVu8W/YUgV6WH0TQZQo5G2 NsJCAFjkEiFYGWQcKifp/qGJgHwEwTmDAkpOp0ygtmGI2reZ7IpKXCK5vlj0ey3U ldRZWNy5UDe2U3MOCCQixve3x9MFN4RB4CczYsiZxoR3lpkdvK3PDh4GJQIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFJ4C4GTJizIxw/IUihw9nDh9SJ7pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzVkN2Jj NC1lMGM1LTRhNDgtOTBlNi03NTI1MTY4OTBkM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNWQ3YmM0 LWUwYzUtNGE0OC05MGU2LTc1MjUxNjg5MGQzZC8xL25nTGdaTW1MTWpIRDhoU0tI RDJjT0gxSW51ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAiBAIAATAcMAwDBADBj2MDBADBj3IwDAMEAsGPdAMEAMGPdjAN BgkqhkiG9w0BAQsFAAOCAQEASKmUT/IGnw8gZ2yarzAnO34k2HJj27ZaJxaLJcuy bFmoZDHSTVK2VQWKoKRcPgIcAq2nzc6dHyo+z73Y2BW1Az9gkucgvg6GhA2W0wvu gESi2rDvzECdYyKRCdal8DeVOKdpBFkpa03ASPWjfrphIBVSWItVZ39SM7k4Tn8y rfXxGXtiD8gJ1bS6IBy1iFvoOzFBo/D+xkOKVnnwWqBVHoncf7oAdxhHfb7GFXsL gDHJYk9476K3/pV05AZFvjen/dV6y0RLsCL6Pezfisv4BuaP73UpQIE4yt3DpTbX xse9UQR0B7I+IDlbtN696mQsyQdi6e2BjysupwrJDcwBQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:44 2026 by rpki-client