This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer (raw, json) Hash identifier: K+kdMOVoCNtUHffFAIe7bCmnt2KcUMKbnVnh3Df7QCY= Subject key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA53C490DE36193D3D952660AB56AE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213145 IP: 185.14.172.0/22 IP: 185.117.99.0/24 IP: 185.117.120.0/22 IP: 188.125.171.0 -- 188.125.173.255 IP: 188.125.175.0/24 IP: 2a10:26c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3c:49:0d:e3:61:93:d3:d9:52:66:0a:b5:6a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e9e6887ea7572a6411306c87b0cc089397a6354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:a4:4e:5e:87:48:e0:72:51:be:cc:c9:d6: 3e:7f:cc:ec:7d:47:0f:b7:92:90:25:00:ef:a5:89: f2:97:01:43:63:89:e5:e2:7c:e4:dd:4e:a2:9c:10: 29:4f:ad:3e:9a:77:77:b7:85:9b:47:01:a0:5e:f6: e1:0d:e1:28:8b:25:8d:fe:94:ff:5b:82:a7:90:10: ca:c3:97:f8:6a:64:42:74:d4:59:e1:3e:2f:3e:0c: ae:6d:79:b9:a4:8d:18:20:4a:6f:16:71:35:85:c2: d8:c0:68:06:80:cf:9e:e5:0a:2d:cd:34:80:ca:35: 6f:e0:8d:fd:5f:38:83:fe:83:1c:ff:39:cf:3e:5f: 9f:0b:fd:b7:a3:7f:f2:41:f8:ac:f4:cd:7e:35:b0: 2b:7f:a2:f5:45:43:46:bd:95:c2:05:f1:2b:5b:b3: 01:04:1d:0b:14:ce:66:93:92:f6:d4:87:69:00:77: 2a:89:35:64:19:b1:79:4a:6b:d1:3f:87:ea:5c:98: e5:21:70:44:24:30:9a:d5:60:c8:b4:e6:5f:3b:dd: f5:8a:83:e6:b9:13:42:28:98:65:51:ed:0e:63:ab: 9d:4b:19:15:bf:77:cb:66:ee:7d:a8:10:68:72:8d: 71:9e:db:eb:3d:64:d3:ea:eb:bc:3f:6c:92:8f:33: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.172.0/22 185.117.99.0/24 185.117.120.0/22 188.125.171.0-188.125.173.255 188.125.175.0/24 IPv6: 2a10:26c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213145 Signature Algorithm: sha256WithRSAEncryption 6d:1d:9a:fb:54:0e:bc:73:55:45:54:46:91:8a:c2:21:c3:4d: e5:42:5f:f5:7e:d7:33:94:df:14:70:b0:64:3e:71:3f:a3:d4: cb:8f:6a:51:a9:53:79:f9:d4:1e:de:89:a5:36:f0:fd:82:da: d4:d5:a8:c2:0b:0d:81:4e:e8:85:f2:db:aa:1c:0f:de:51:e0: f2:e6:cd:5b:81:9e:ec:51:a3:07:f0:e3:f4:3f:1f:ca:a3:67: 95:5f:17:fe:66:97:6e:49:5d:f8:e4:6f:21:46:14:ac:bb:7e: 1d:6d:f0:b5:63:d2:20:9b:1f:80:44:10:b1:41:e4:ca:e8:6e: fa:9b:e3:3c:0c:68:01:c1:ba:3a:16:c7:dc:46:fe:e9:6c:0d: 5a:f5:9b:03:71:ca:02:f1:9b:5a:ed:e3:5f:91:ca:d4:7e:88: 78:25:58:3c:f9:83:6d:9a:e8:92:f9:56:32:b7:96:8e:a3:25: 0f:c5:81:e3:db:dc:7c:e8:15:28:88:91:61:5c:93:78:2b:7d: a5:45:f4:03:02:61:ff:3c:e8:92:d6:69:36:5f:98:e8:c4:ab: 92:91:30:20:73:a0:ef:25:ac:03:84:ea:a1:28:71:e1:79:e4: 6f:e7:4f:83:4a:7b:31:41:d9:73:e6:f1:41:5e:e8:8e:78:92: b6:46:19:c1 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt+pTxJDeNhk9PZUmYKtWrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTllNjg4N2VhNzU3MmE2NDExMzA2Yzg3YjBjYzA4OTM5N2E2MzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOGkTl6HSOByUb7MydY+f8zsfUcP t5KQJQDvpYnylwFDY4nl4nzk3U6inBApT60+mnd3t4WbRwGgXvbhDeEoiyWN/pT/ W4KnkBDKw5f4amRCdNRZ4T4vPgyubXm5pI0YIEpvFnE1hcLYwGgGgM+e5QotzTSA yjVv4I39XziD/oMc/znPPl+fC/23o3/yQfis9M1+NbArf6L1RUNGvZXCBfErW7MB BB0LFM5mk5L21IdpAHcqiTVkGbF5SmvRP4fqXJjlIXBEJDCa1WDItOZfO931ioPm uRNCKJhlUe0OY6udSxkVv3fLZu59qBBoco1xntvrPWTT6uu8P2ySjzNuRQIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFJ6eaIfqdXKmQRMGyHsMwIk5emNUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2UyYWJh ZC01OGZhLTRjZWQtODY1MC1lYzUwOGRlYzc3OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZTJhYmFk LTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8xL25wNW9oLXAxY3FaQkV3Ykll d3pBaVRsNlkxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQCuQ6sAwQAuXVjAwQCuXV4MAwDBAC8fasDBAG8 fawDBAC8fa8wDQQCAAIwBwMFACoQJsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID A0CZMA0GCSqGSIb3DQEBCwUAA4IBAQBtHZr7VA68c1VFVEaRisIhw03lQl/1ftcz lN8UcLBkPnE/o9TLj2pRqVN5+dQe3omlNvD9gtrU1ajCCw2BTuiF8tuqHA/eUeDy 5s1bgZ7sUaMH8OP0Px/Ko2eVXxf+ZpduSV345G8hRhSsu34dbfC1Y9Igmx+ARBCx QeTK6G76m+M8DGgBwbo6FsfcRv7pbA1a9ZsDccoC8Zta7eNfkcrUfoh4JVg8+YNt muiS+VYyt5aOoyUPxYHj29x86BUoiJFhXJN4K32lRfQDAmH/POiS1mk2X5joxKuS kTAgc6DvJawDhOqhKHHheeRv50+DSnsxQdlz5vFBXuiOeJK2RhnB -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:45 2026 by rpki-client