This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer File: nkWapGAr_6LSZQumaBhFjIn8RYI.cer (raw, json) Hash identifier: tiTFTURacWLrAZYaujXXA8xmM0FEbCEQYDLaLW+HMO8= Subject key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D12EAAC0A8C37B4E4662EE9C6031 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12310 AS: 21007 AS: 34198 IP: 80.86.96.0/19 IP: 83.166.192.0/19 IP: 84.247.64.0/18 IP: 89.42.16.0/21 IP: 89.149.0.0/18 IP: 188.240.8.0/22 IP: 188.240.216.0/22 IP: 194.102.203.0/24 IP: 195.95.228.0/23 IP: 2a02:2a00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d1:2e:aa:c0:a8:c3:7b:4e:46:62:ee:9c:60:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:d4:1e:78:c2:e0:5d:73:39:5d:bb:2b:05: 8d:38:7e:a3:51:3a:fd:bb:b9:59:3c:af:89:f7:e9: f4:82:36:8d:a3:90:5f:51:80:80:1e:9b:21:ae:bd: d5:87:db:6d:2f:6e:58:88:9e:b7:85:a4:6b:a9:db: 99:dd:a6:7a:09:12:db:8e:11:48:8e:e2:ca:35:7c: 91:8f:1a:8b:b5:ce:43:71:65:41:23:9c:11:12:09: 31:4a:ef:d2:3d:aa:69:29:37:80:32:60:da:9b:e3: 81:40:d6:d2:3c:47:33:f1:5d:42:5b:cf:c8:8e:7b: 0a:d6:22:79:83:ef:f1:2a:5a:55:c7:5b:ba:6e:18: cf:a9:66:20:06:e6:bc:6b:5e:66:0c:d6:e7:db:61: 32:99:0e:32:33:07:96:a9:87:97:e2:ee:46:d5:07: 10:6e:fc:dd:af:85:45:19:41:aa:37:67:a5:d2:dc: 61:df:32:fb:1e:f2:f0:66:0e:44:36:e3:88:a1:da: 44:84:2a:8c:b2:1d:fe:d0:52:a4:32:dd:8b:4f:07: 25:04:18:43:2d:34:04:6e:f9:6c:0d:c6:62:c6:3d: 29:76:d2:20:93:cf:df:69:51:40:ed:59:76:e2:a9: ff:3c:23:2b:ad:2d:62:20:cb:74:d7:93:d3:9a:16: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.96.0/19 83.166.192.0/19 84.247.64.0/18 89.42.16.0/21 89.149.0.0/18 188.240.8.0/22 188.240.216.0/22 194.102.203.0/24 195.95.228.0/23 IPv6: 2a02:2a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12310 21007 34198 Signature Algorithm: sha256WithRSAEncryption 23:dc:02:9c:72:01:ea:9d:35:96:c5:3e:5f:46:7d:9a:bd:1c: 43:3b:04:49:98:fc:d5:b9:07:39:49:f8:80:49:7d:2a:47:a5: 97:31:dc:ea:02:4b:90:2d:16:03:a9:97:6c:03:8f:75:dc:b6: b5:65:71:48:a0:c0:23:70:0a:9b:eb:16:58:98:07:97:ef:e8: c5:f6:08:30:da:62:73:2f:50:5e:a0:9b:85:f0:d2:dc:dd:8d: c7:9d:57:a8:e5:d6:de:68:89:7c:10:55:f3:40:84:ca:5a:49: 33:60:b4:0f:13:8e:89:e3:07:39:de:df:68:30:b7:62:0c:70: 59:6e:03:a5:ff:86:a5:6a:d4:21:8a:ee:73:26:05:d8:6a:45: 7e:5a:a1:de:15:f8:2c:7d:c9:0a:f4:e6:13:5a:50:74:9a:4c: a6:94:0c:f0:c3:85:7f:f3:12:c6:3d:7e:eb:cf:29:51:8e:ca: 82:61:18:1f:a4:8c:c2:2e:df:c6:9c:d8:0b:a3:c0:bb:49:ae: 2e:cf:22:34:e8:4a:6e:12:aa:fa:2a:de:4f:82:81:79:19:f9: c0:45:62:5e:64:ad:18:a3:30:a1:03:ab:27:67:9c:bd:74:2f: 4d:b4:ff:82:f3:66:94:83:30:cb:70:24:a2:a1:be:50:4a:d0: c3:25:67:d9 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt5ENEuqsCow3tORmLunGAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQ1OWFhNDYwMmJmZmEyZDI2NTBiYTY2ODE4NDU4Yzg5ZmM0NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux/UHnjC4F1zOV27KwWNOH6jUTr9 u7lZPK+J9+n0gjaNo5BfUYCAHpshrr3Vh9ttL25YiJ63haRrqduZ3aZ6CRLbjhFI juLKNXyRjxqLtc5DcWVBI5wREgkxSu/SPappKTeAMmDam+OBQNbSPEcz8V1CW8/I jnsK1iJ5g+/xKlpVx1u6bhjPqWYgBua8a15mDNbn22EymQ4yMweWqYeX4u5G1QcQ bvzdr4VFGUGqN2el0txh3zL7HvLwZg5ENuOIodpEhCqMsh3+0FKkMt2LTwclBBhD LTQEbvlsDcZixj0pdtIgk8/faVFA7Vl24qn/PCMrrS1iIMt015PTmhbABwIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzljYzMz My02OGQ1LTQ2OTItOWM1Yi0yOGE4NDFkYTBiZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvOWNjMzMz LTY4ZDUtNDY5Mi05YzViLTI4YTg0MWRhMGJmZC8xL25rV2FwR0FyXzZMU1pRdW1h QmhGakluOFJZSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQFUFZgAwQFU6bAAwQGVPdAAwQDWSoQAwQGWZUA AwQCvPAIAwQCvPDYAwQAwmbLAwQBw1/kMA0EAgACMAcDBQAqAioAMCIGCCsGAQUF BwEIAQH/BBMwEaAPMA0CAjAWAgJSDwIDAIWWMA0GCSqGSIb3DQEBCwUAA4IBAQAj 3AKccgHqnTWWxT5fRn2avRxDOwRJmPzVuQc5SfiASX0qR6WXMdzqAkuQLRYDqZds A4913La1ZXFIoMAjcAqb6xZYmAeX7+jF9ggw2mJzL1BeoJuF8NLc3Y3HnVeo5dbe aIl8EFXzQITKWkkzYLQPE46J4wc53t9oMLdiDHBZbgOl/4alatQhiu5zJgXYakV+ WqHeFfgsfckK9OYTWlB0mkymlAzww4V/8xLGPX7rzylRjsqCYRgfpIzCLt/GnNgL o8C7Sa4uzyI06EpuEqr6Kt5PgoF5GfnARWJeZK0YozChA6snZ5y9dC9NtP+C82aU gzDLcCSiob5QStDDJWfZ -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:30 2026 by rpki-client