This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer File: NLqcIjJB64DivHGFO7fS5YKGvdM.cer (raw, json) Hash identifier: LUwf0O3+oHtnvawxzULLKAWLuV3hSdmt/KfnCiLj8eY= Subject key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79103E5F8578316DA4DE5EDF214EB3DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204877 IP: 185.141.120.0/22 IP: 2a0d:ff00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3e:5f:85:78:31:6d:a4:de:5e:df:21:4e:b3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:63:54:66:67:df:a1:59:61:b3:22:21:cd: 14:d5:dd:58:fd:f7:7b:b0:ef:01:99:9c:82:7c:15: 07:79:eb:78:94:12:cf:66:e2:7f:29:b6:c0:4f:ca: 53:0f:ba:2e:d5:4d:43:3e:05:b3:4c:6c:ba:c5:bd: a4:6e:52:a6:7c:84:7c:73:68:ce:c6:e7:63:35:07: 7a:b9:ec:3c:ef:81:fa:44:31:fe:36:37:b5:83:65: 03:e3:02:08:dc:a8:be:9f:3f:39:cd:b9:36:94:f7: 79:83:bf:38:fa:32:0e:3f:94:68:1b:2e:6d:bf:46: 7d:c1:40:e3:6e:11:bb:61:9d:a2:79:d3:7e:6f:02: 2c:8b:01:51:19:0a:fc:15:19:cf:12:f3:d8:7c:ed: 67:19:89:20:3a:fb:12:94:73:a1:bc:ee:64:31:8c: 50:6f:14:3e:9f:02:49:73:66:da:22:51:09:78:e1: 92:e8:94:fc:5b:33:5e:71:f0:65:7e:b2:10:80:b5: 5e:88:3e:5f:05:6e:de:b3:e4:7c:01:a9:61:54:ee: b2:d0:fc:fd:cb:68:a3:d0:66:68:05:4b:d9:f7:97: 1b:bb:59:bf:08:97:66:e7:6f:87:f0:5e:44:79:2b: 16:8a:69:0d:1e:87:6a:99:08:d9:d4:9e:82:79:5b: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.120.0/22 IPv6: 2a0d:ff00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204877 Signature Algorithm: sha256WithRSAEncryption 9f:6d:62:f3:27:48:1a:72:77:6d:b9:f4:09:df:af:5c:a5:fd: d0:31:3b:bb:b2:8b:a5:38:d3:ba:49:8f:37:d4:c9:ca:40:bf: 83:d6:21:d8:fb:1b:f9:0a:58:05:c3:97:23:93:8c:7e:3f:35: 3d:5c:6f:10:ac:f4:26:19:ee:64:e2:24:23:94:35:bf:9f:8f: 16:e6:a1:03:d8:21:13:b1:b6:b6:06:d9:83:c9:e9:3f:ce:b2: ab:96:83:c3:72:8c:25:44:60:ad:da:b8:88:ab:62:be:60:92: d7:fd:ee:3d:2c:38:10:4f:47:2d:fb:9f:be:81:af:0c:a1:87: 8a:dd:5e:a3:b3:cd:1e:7f:eb:d6:16:1f:61:f3:79:89:65:37: b9:5c:95:c6:e2:76:c4:fb:b2:83:8e:3c:49:4d:ab:6e:27:f1: 3a:c8:c7:c6:27:86:37:4a:30:95:0f:5a:17:ed:0a:69:fb:19: ff:9c:20:fb:76:a3:e4:4a:49:8d:9f:c3:a9:db:d8:2c:7d:a2: c3:63:6d:b1:af:aa:cd:ef:f1:67:ce:9f:5b:5f:a5:98:27:56: e0:b6:09:d9:65:10:ac:6b:82:57:e8:22:14:81:fd:f6:87:55: ec:28:d4:7d:92:0c:fd:47:d1:cd:02:07:fd:19:81:35:40:03: 1f:36:98:c2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ED5fhXgxbaTeXt8hTrPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGJhOWMyMjMyNDFlYjgwZTJiYzcxODUzYmI3ZDJlNTgyODZiZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti1jVGZn36FZYbMiIc0U1d1Y/fd7 sO8BmZyCfBUHeet4lBLPZuJ/KbbAT8pTD7ou1U1DPgWzTGy6xb2kblKmfIR8c2jO xudjNQd6uew874H6RDH+Nje1g2UD4wII3Ki+nz85zbk2lPd5g784+jIOP5RoGy5t v0Z9wUDjbhG7YZ2iedN+bwIsiwFRGQr8FRnPEvPYfO1nGYkgOvsSlHOhvO5kMYxQ bxQ+nwJJc2baIlEJeOGS6JT8WzNecfBlfrIQgLVeiD5fBW7es+R8AalhVO6y0Pz9 y2ij0GZoBUvZ95cbu1m/CJdm52+H8F5EeSsWimkNHodqmQjZ1J6CeVvhlwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDS6nCIyQeuA4rxxhTu30uWChr3TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2MyZWM2 MS0zN2FiLTQwNWItYTZjMi0xM2VlNGM4ZDMwODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYzJlYzYx LTM3YWItNDA1Yi1hNmMyLTEzZWU0YzhkMzA4Mi8xL05McWNJakpCNjREaXZIR0ZP N2ZTNVlLR3ZkTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuY14MA0EAgACMAcDBQMqDf8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgTTANBgkqhkiG9w0BAQsFAAOCAQEAn21i8ydIGnJ3 bbn0Cd+vXKX90DE7u7KLpTjTukmPN9TJykC/g9Yh2Psb+QpYBcOXI5OMfj81PVxv EKz0JhnuZOIkI5Q1v5+PFuahA9ghE7G2tgbZg8npP86yq5aDw3KMJURgrdq4iKti vmCS1/3uPSw4EE9HLfufvoGvDKGHit1eo7PNHn/r1hYfYfN5iWU3uVyVxuJ2xPuy g448SU2rbifxOsjHxieGN0owlQ9aF+0KafsZ/5wg+3aj5EpJjZ/DqdvYLH2iw2Nt sa+qze/xZ86fW1+lmCdW4LYJ2WUQrGuCV+giFIH99odV7CjUfZIM/UfRzQIH/RmB NUADHzaYwg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:06 2026 by rpki-client