This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer File: NM3lphFF05kuzN7Ht_C4fVZr3co.cer (raw, json) Hash identifier: ZnP8+7dOeLc7GngbVsPpJwfjyBVEB4TNzLgQcRlym9s= Subject key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C112D0CFFF5F36609F88C2BFBE6FEA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198726 IP: 5.10.0.0/21 IP: 91.137.64.0/18 IP: 185.14.64.0/22 IP: 185.35.216.0/22 IP: 185.233.220.0/22 IP: 185.238.160.0/22 IP: 185.240.224.0/22 IP: 2a02:acc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:2d:0c:ff:f5:f3:66:09:f8:8c:2b:fb:e6:fe:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:e6:ed:c5:17:7f:5f:23:67:f7:51:5b:3d: 74:f2:a0:3b:dd:e1:64:b3:25:5f:eb:40:97:34:4b: 53:6d:a4:52:75:9f:2d:55:17:97:a0:2b:d3:98:6e: f6:69:7c:00:e2:13:2d:6f:26:19:0d:09:d5:d2:c6: bb:42:9e:8d:df:be:bf:71:1d:3a:3f:4e:8a:0e:ed: 4a:9c:fe:d1:9c:4d:6d:45:b9:46:8c:84:42:ed:7f: 13:9a:1d:69:52:e2:1e:f8:36:cd:bc:88:fd:83:3d: ff:64:81:9f:9e:bc:9d:01:a9:e6:af:91:cd:67:d6: 8e:de:28:17:f8:58:69:f2:6b:9f:c3:4b:00:08:c4: 62:f9:09:62:72:8c:d1:78:88:01:1f:19:cb:23:7e: ff:fd:e8:85:06:2c:3a:9f:8b:70:75:5d:79:d0:13: 0a:8e:69:15:4d:e5:68:a7:66:33:e4:7d:be:c4:5a: c8:67:a4:48:9f:b4:e5:47:f7:5e:70:11:92:36:3a: 69:be:75:54:c9:c1:78:69:ec:b2:c3:8e:52:9e:bc: cf:b4:5a:10:10:58:cd:b7:e2:f6:c8:10:b5:65:01: 1a:78:98:be:ae:25:2c:cc:5d:be:6e:ac:50:39:73: 67:8e:82:27:8b:ed:fc:49:c3:69:38:61:f7:f2:3a: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.0.0/21 91.137.64.0/18 185.14.64.0/22 185.35.216.0/22 185.233.220.0/22 185.238.160.0/22 185.240.224.0/22 IPv6: 2a02:acc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198726 Signature Algorithm: sha256WithRSAEncryption 01:72:b8:4c:c4:e7:90:af:e9:1d:2b:69:02:23:6b:7a:71:87: d5:13:b5:c5:9b:d8:f5:08:42:c6:31:ab:6a:1c:dd:87:aa:e8: 06:23:ae:37:d0:13:e9:36:a5:53:51:2e:5f:a2:d0:f8:69:27: 60:02:46:c6:bb:3e:1e:9d:9b:42:9a:97:69:91:56:be:7d:0b: 02:b9:83:62:f8:44:40:d9:60:03:a0:22:2f:26:fc:fd:14:46: 7b:a2:a9:83:73:93:ab:3d:75:84:2f:9b:d5:3f:ac:53:95:4a: 1c:2d:a0:92:80:d7:1f:2a:32:5c:32:b5:90:64:52:8a:1e:27: a5:02:69:53:ca:3a:92:93:98:aa:58:c7:80:f5:2e:74:da:c1: 6a:b3:cc:17:ba:c0:2e:e8:87:f1:f1:ec:77:2a:d0:3e:a8:dd: b6:03:eb:23:de:29:54:62:1a:16:a4:e6:86:ea:de:19:09:a5: 7c:d2:f2:61:cd:ea:33:e4:0e:88:eb:17:04:4e:0f:84:b7:11: d3:0e:8f:7a:60:34:7b:c4:eb:02:da:f4:de:82:9f:ed:4b:3b: 2f:7a:e0:b6:07:dd:d0:ad:9e:73:b1:d5:9f:cf:37:5b:08:30: e3:f4:74:b6:92:78:bd:d6:60:c4:da:c7:25:01:cd:3f:cc:26: 8c:1d:03:cd -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt8ES0M//XzZgn4jCv75v6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGNkZTVhNjExNDVkMzk5MmVjY2RlYzdiN2YwYjg3ZDU2NmJkZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfPm7cUXf18jZ/dRWz108qA73eFk syVf60CXNEtTbaRSdZ8tVReXoCvTmG72aXwA4hMtbyYZDQnV0sa7Qp6N376/cR06 P06KDu1KnP7RnE1tRblGjIRC7X8Tmh1pUuIe+DbNvIj9gz3/ZIGfnrydAanmr5HN Z9aO3igX+Fhp8mufw0sACMRi+QlicozReIgBHxnLI37//eiFBiw6n4twdV150BMK jmkVTeVop2Yz5H2+xFrIZ6RIn7TlR/decBGSNjppvnVUycF4aeyyw45SnrzPtFoQ EFjNt+L2yBC1ZQEaeJi+riUszF2+bqxQOXNnjoIni+38ScNpOGH38jqhAwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFDTN5aYRRdOZLszex7fwuH1Wa93KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2I0MmM1 My1lMDVhLTRkNzctODJlZS01ZWYzNjIyNmE3NjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYjQyYzUz LWUwNWEtNGQ3Ny04MmVlLTVlZjM2MjI2YTc2Ny8xL05NM2xwaEZGMDVrdXpON0h0 X0M0ZlZacjNjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDBQoAAwQGW4lAAwQCuQ5AAwQCuSPYAwQCuenc AwQCue6gAwQCufDgMA0EAgACMAcDBQMqAqzAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMIRjANBgkqhkiG9w0BAQsFAAOCAQEAAXK4TMTnkK/pHStpAiNrenGH1RO1 xZvY9QhCxjGrahzdh6roBiOuN9AT6TalU1EuX6LQ+GknYAJGxrs+Hp2bQpqXaZFW vn0LArmDYvhEQNlgA6AiLyb8/RRGe6Kpg3OTqz11hC+b1T+sU5VKHC2gkoDXHyoy XDK1kGRSih4npQJpU8o6kpOYqljHgPUudNrBarPMF7rALuiH8fHsdyrQPqjdtgPr I94pVGIaFqTmhureGQmlfNLyYc3qM+QOiOsXBE4PhLcR0w6PemA0e8TrAtr03oKf 7Us7L3rgtgfd0K2ec7HVn883Wwgw4/R0tpJ4vdZgxNrHJQHNP8wmjB0DzQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:29:25 2026 by rpki-client