This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer (raw, json) Hash identifier: bGXmUheW1s64N14rqK55QT38wpkJ3QZcDMf9QHR/9Xg= Subject key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A22CBCDF543AF09D70952D5BF71FD7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6762 IP: 5.178.40.0/21 IP: 79.140.80.0/20 IP: 89.221.32.0/20 IP: 93.186.128.0/20 IP: 149.3.176.0/21 IP: 176.115.184.0/21 IP: 185.70.200.0/22 IP: 185.100.112.0/22 IP: 185.210.212.0/22 IP: 185.212.176.0/22 IP: 195.22.192.0/19 IP: 213.144.160.0/19 IP: 2001:41a8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2c:bc:df:54:3a:f0:9d:70:95:2d:5b:f7:1f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=340bea3fcc3cbcedc82919cf57c74108baea369e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:dd:20:62:3c:ce:1d:98:c7:c9:a3:23:b3: 47:46:df:43:b4:57:f6:12:28:6b:53:ab:5b:79:b2: 21:22:02:a6:cc:22:c9:be:94:6d:a8:39:63:eb:03: be:e1:e1:da:7f:d8:5d:ea:83:a1:f2:94:0a:3b:5d: 7c:ad:2e:2a:c6:c2:20:7e:b5:e6:2b:46:be:62:4f: 45:d1:e7:3f:6d:c7:10:0b:f0:ea:d1:e5:ce:83:40: e2:bf:31:6d:69:0d:66:52:38:b0:0f:a4:00:ab:f5: fe:aa:da:b5:5d:dd:a2:2a:30:a4:4b:43:d6:68:33: 16:da:41:ab:db:ec:bf:08:d6:56:45:4b:54:a3:61: af:2a:0b:48:18:d7:a4:c8:16:5d:eb:03:6d:d1:00: 02:a3:0c:60:59:45:05:18:16:17:68:ba:24:08:69: 79:a7:db:86:3c:2c:4b:8c:f9:54:4c:ea:32:26:30: 3a:19:e1:c7:26:7c:77:ae:81:52:28:11:09:03:b1: d7:1a:6f:5f:9a:48:29:eb:50:3f:65:48:d3:c8:43: b5:9a:de:25:57:07:5a:99:01:af:6a:18:0b:02:d7: 86:d2:37:73:ca:50:d0:ad:15:7f:5d:39:b6:68:2b: 5a:dd:d6:97:f7:4f:6e:f3:35:56:92:08:5f:0f:a4: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.40.0/21 79.140.80.0/20 89.221.32.0/20 93.186.128.0/20 149.3.176.0/21 176.115.184.0/21 185.70.200.0/22 185.100.112.0/22 185.210.212.0/22 185.212.176.0/22 195.22.192.0/19 213.144.160.0/19 IPv6: 2001:41a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6762 Signature Algorithm: sha256WithRSAEncryption 23:f6:2a:28:6a:e3:f6:47:f5:5d:e1:52:e0:58:3d:e4:25:a1: 7e:d8:3c:5a:20:99:b9:70:2d:d8:f5:60:c5:bd:62:00:6a:5e: b7:a1:73:39:b0:5d:04:9f:3e:10:5c:89:5d:04:92:7a:33:da: cc:ef:31:6c:da:39:64:01:a2:6c:48:f6:ab:61:df:93:c5:bd: bd:66:fc:79:f2:8e:48:3e:73:b4:3f:00:35:4f:4f:20:63:22: d8:48:b8:f2:eb:8c:c8:26:83:93:62:15:1f:44:5e:d8:7c:a9: f0:6f:df:68:0a:95:41:02:fc:cf:41:0b:0f:36:00:6f:f5:bc: 4f:a0:08:47:54:41:79:7a:ac:92:03:e5:5b:75:90:ad:ba:44: a0:1c:51:03:01:97:c3:e5:02:0b:8f:24:d0:5e:8a:9b:a0:c9: 36:1d:8e:fd:13:29:f9:0f:d0:af:e7:da:03:8f:83:4b:4d:f8: e1:15:4a:1a:11:b3:6d:4b:54:2a:89:06:68:b7:de:97:5b:af: b0:0c:e2:48:43:a0:ab:53:90:39:b6:77:75:ae:ef:ef:29:cb: db:66:18:75:12:60:f0:34:e8:af:dc:c2:b2:0b:ae:7f:cc:4d: ba:2c:c9:a4:26:95:db:8d:a7:bc:92:24:47:08:29:00:e6:33: 98:15:f7:fd -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt4oiy831Q68J1wlS1b9x/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDBiZWEzZmNjM2NiY2VkYzgyOTE5Y2Y1N2M3NDEwOGJhZWEzNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmLdIGI8zh2Yx8mjI7NHRt9DtFf2 EihrU6tbebIhIgKmzCLJvpRtqDlj6wO+4eHaf9hd6oOh8pQKO118rS4qxsIgfrXm K0a+Yk9F0ec/bccQC/Dq0eXOg0DivzFtaQ1mUjiwD6QAq/X+qtq1Xd2iKjCkS0PW aDMW2kGr2+y/CNZWRUtUo2GvKgtIGNekyBZd6wNt0QACowxgWUUFGBYXaLokCGl5 p9uGPCxLjPlUTOoyJjA6GeHHJnx3roFSKBEJA7HXGm9fmkgp61A/ZUjTyEO1mt4l VwdamQGvahgLAteG0jdzylDQrRV/XTm2aCta3daX909u8zVWkghfD6SkdQIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFDQL6j/MPLztyCkZz1fHQQi66jaeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2VjZGEz ZC1hMmRiLTQ5MDgtODYyZi0xMTEwNTYzNjlhMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZWNkYTNk LWEyZGItNDkwOC04NjJmLTExMTA1NjM2OWEyMy8xL05BdnFQOHc4dk8zSUtSblBW OGRCQ0xycU5wNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF BwEHAQH/BGEwXzBOBAIAATBIAwQDBbIoAwQET4xQAwQEWd0gAwQEXbqAAwQDlQOw AwQDsHO4AwQCuUbIAwQCuWRwAwQCudLUAwQCudSwAwQFwxbAAwQF1ZCgMA0EAgAC MAcDBQAgAUGoMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhpqMA0GCSqGSIb3DQEB CwUAA4IBAQAj9iooauP2R/Vd4VLgWD3kJaF+2DxaIJm5cC3Y9WDFvWIAal63oXM5 sF0Enz4QXIldBJJ6M9rM7zFs2jlkAaJsSParYd+Txb29Zvx58o5IPnO0PwA1T08g YyLYSLjy64zIJoOTYhUfRF7YfKnwb99oCpVBAvzPQQsPNgBv9bxPoAhHVEF5eqyS A+VbdZCtukSgHFEDAZfD5QILjyTQXoqboMk2HY79Eyn5D9Cv59oDj4NLTfjhFUoa EbNtS1QqiQZot96XW6+wDOJIQ6CrU5A5tnd1ru/vKcvbZhh1EmDwNOiv3MKyC65/ zE26LMmkJpXbjae8kiRHCCkA5jOYFff9 -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:59 2026 by rpki-client