This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer (raw, json) Hash identifier: U8BKJqgzGBF822rg2CEQkVl/DRNCZQyEwxu4K4pbapg= Subject key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA0B52058A92F4D7C5F7555B2AB4D11F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 11:23:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49263 AS: 56726 AS: 57014 AS: 59816 IP: 185.70.132.0/22 IP: 185.241.36.0/22 IP: 185.251.224.0/22 IP: 185.254.88.0/22 IP: 194.147.120.0/22 IP: 217.18.91.0/24 IP: 2a05:2a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 09:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:0b:52:05:8a:92:f4:d7:c5:f7:55:5b:2a:b4:d1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 11:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:02:f9:1f:d1:4c:60:41:7d:98:00:67:fc: e2:e8:d9:75:ec:11:6a:c4:a3:ac:bd:5b:ff:d7:d2: db:8c:51:40:39:5a:06:2a:db:39:2a:8c:99:6d:23: c4:2a:56:e2:18:ba:49:32:76:3b:44:a7:98:54:34: 4d:28:64:35:50:3e:ee:64:75:1a:f4:7b:00:37:36: 7e:b2:47:e8:68:5b:be:58:28:65:71:b7:94:07:c9: 4e:d8:c4:21:73:5c:71:4c:68:e3:f3:e5:26:f5:b3: cb:16:50:b0:94:25:b3:b2:31:0f:48:5f:54:5e:7d: 13:8e:6d:63:33:61:8b:68:3f:2d:89:0a:a7:aa:a3: 9c:18:54:4b:db:d4:e6:94:4e:e9:cc:f7:a5:d8:41: da:42:e7:72:ed:d4:41:2f:36:35:31:77:65:f4:94: c5:7b:ae:75:76:ce:0b:9e:ec:c4:0d:42:87:c5:71: c8:2f:95:b3:27:48:7e:83:2a:4f:c5:8d:2e:f9:55: be:2b:f4:aa:99:5a:c9:fb:5c:48:6b:a8:3d:e1:92: 48:df:5b:e6:3e:ee:3c:f6:28:86:ef:d2:52:56:10: 8b:46:02:a2:55:95:2b:b1:f3:7a:02:11:9d:bc:58: 63:f6:d5:d9:fe:1b:0d:3b:8a:6f:81:98:ce:ee:45: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.132.0/22 185.241.36.0/22 185.251.224.0/22 185.254.88.0/22 194.147.120.0/22 217.18.91.0/24 IPv6: 2a05:2a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49263 56726 57014 59816 Signature Algorithm: sha256WithRSAEncryption 42:39:d5:cf:c5:4d:5b:2f:53:1b:73:d7:4b:73:25:8f:4f:e8: 49:1e:ee:a6:4f:2f:4e:25:1e:46:e7:64:1a:64:ef:9f:63:50: 0b:83:f9:4e:05:4f:3c:cb:41:10:db:e1:fd:8a:a3:a9:c7:2b: bf:76:29:0f:94:f3:90:19:1c:c2:93:62:e3:be:0f:b2:df:e0: de:ff:ff:40:98:8d:9f:57:45:dc:37:0e:36:fb:d8:ff:4e:bf: 9b:d5:a1:84:09:59:38:5d:1d:13:b2:cd:c6:cd:d1:8a:8b:e1: 2d:ad:d2:00:5f:3b:39:3c:ed:2a:45:d2:e5:ce:27:cb:78:13: 60:03:f2:3e:1c:59:97:cb:7c:d6:96:57:0a:46:cb:3e:9f:19: e0:58:a0:f8:f7:87:cc:78:4f:55:ed:59:7d:c0:10:66:b2:01: 94:d1:19:27:e0:09:36:cd:7b:00:51:27:f8:0d:89:fc:7f:3e: b1:26:a3:3a:1b:b2:4a:ce:33:7d:55:6c:14:56:95:1e:0e:48: 31:6b:21:f0:38:77:03:36:52:06:36:db:c7:d3:44:35:f1:78: 3b:a3:82:6a:10:d7:b8:4c:06:43:54:4f:d1:41:8b:73:60:e4: 8a:91:76:07:79:ea:32:0c:ff:be:2e:b9:3f:d2:20:37:8d:bb: b1:22:55:7a -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZv6C1IFipL018X3VVsqtNEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTEyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDJlNjUzNmIyZTc0MjIwZWY0YjA5MmJjMDkwY2M0YzI1MGYzZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM8C+R/RTGBBfZgAZ/zi6Nl17BFq xKOsvVv/19LbjFFAOVoGKts5KoyZbSPEKlbiGLpJMnY7RKeYVDRNKGQ1UD7uZHUa 9HsANzZ+skfoaFu+WChlcbeUB8lO2MQhc1xxTGjj8+Um9bPLFlCwlCWzsjEPSF9U Xn0Tjm1jM2GLaD8tiQqnqqOcGFRL29TmlE7pzPel2EHaQudy7dRBLzY1MXdl9JTF e651ds4LnuzEDUKHxXHIL5WzJ0h+gypPxY0u+VW+K/SqmVrJ+1xIa6g94ZJI31vm Pu489iiG79JSVhCLRgKiVZUrsfN6AhGdvFhj9tXZ/hsNO4pvgZjO7kXz0wIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFDQuZTay50Ig70sJK8CQzEwlDz7WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2Y5NDYy Yi0zNzQ5LTQ0YmItODRlZS1lY2Q4YTI0NzRhMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjk0NjJi LTM3NDktNDRiYi04NGVlLWVjZDhhMjQ3NGEwMi8xL05DNWxOckxuUWlEdlN3a3J3 SkRNVENVUFB0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCuUaEAwQCufEkAwQCufvgAwQCuf5YAwQCwpN4 AwQA2RJbMA0EAgACMAcDBQMqBSoAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwDA bwIDAN2WAgMA3rYCAwDpqDANBgkqhkiG9w0BAQsFAAOCAQEAQjnVz8VNWy9TG3PX S3Mlj0/oSR7upk8vTiUeRudkGmTvn2NQC4P5TgVPPMtBENvh/Yqjqccrv3YpD5Tz kBkcwpNi474Pst/g3v//QJiNn1dF3DcONvvY/06/m9WhhAlZOF0dE7LNxs3Riovh La3SAF87OTztKkXS5c4ny3gTYAPyPhxZl8t81pZXCkbLPp8Z4Fig+PeHzHhPVe1Z fcAQZrIBlNEZJ+AJNs17AFEn+A2J/H8+sSajOhuySs4zfVVsFFaVHg5IMWsh8Dh3 AzZSBjbbx9NENfF4O6OCahDXuEwGQ1RP0UGLc2DkipF2B3nqMgz/vi65P9IgN427 sSJVeg== -----END CERTIFICATE-----Generated at Tue Feb 10 13:04:17 2026 by rpki-client