This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer File: NM3lphFF05kuzN7Ht_C4fVZr3co.cer (raw, json) Hash identifier: 5E5S0LWmWYUppnznPYgxMmowoQHxUm0ET/7uTg2jUaQ= Subject key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B0DDE3DB0F488E1295AFCD4F614CCC92D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 11 Dec 2025 14:43:47 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 198726 IP: 5.10.0.0/21 IP: 91.137.64.0/18 IP: 185.14.64.0/22 IP: 185.35.216.0/22 IP: 185.233.220.0/22 IP: 185.238.160.0/22 IP: 185.240.224.0/22 IP: 2a02:acc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:de:3d:b0:f4:88:e1:29:5a:fc:d4:f6:14:cc:c9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 11 14:43:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:e6:ed:c5:17:7f:5f:23:67:f7:51:5b:3d: 74:f2:a0:3b:dd:e1:64:b3:25:5f:eb:40:97:34:4b: 53:6d:a4:52:75:9f:2d:55:17:97:a0:2b:d3:98:6e: f6:69:7c:00:e2:13:2d:6f:26:19:0d:09:d5:d2:c6: bb:42:9e:8d:df:be:bf:71:1d:3a:3f:4e:8a:0e:ed: 4a:9c:fe:d1:9c:4d:6d:45:b9:46:8c:84:42:ed:7f: 13:9a:1d:69:52:e2:1e:f8:36:cd:bc:88:fd:83:3d: ff:64:81:9f:9e:bc:9d:01:a9:e6:af:91:cd:67:d6: 8e:de:28:17:f8:58:69:f2:6b:9f:c3:4b:00:08:c4: 62:f9:09:62:72:8c:d1:78:88:01:1f:19:cb:23:7e: ff:fd:e8:85:06:2c:3a:9f:8b:70:75:5d:79:d0:13: 0a:8e:69:15:4d:e5:68:a7:66:33:e4:7d:be:c4:5a: c8:67:a4:48:9f:b4:e5:47:f7:5e:70:11:92:36:3a: 69:be:75:54:c9:c1:78:69:ec:b2:c3:8e:52:9e:bc: cf:b4:5a:10:10:58:cd:b7:e2:f6:c8:10:b5:65:01: 1a:78:98:be:ae:25:2c:cc:5d:be:6e:ac:50:39:73: 67:8e:82:27:8b:ed:fc:49:c3:69:38:61:f7:f2:3a: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.0.0/21 91.137.64.0/18 185.14.64.0/22 185.35.216.0/22 185.233.220.0/22 185.238.160.0/22 185.240.224.0/22 IPv6: 2a02:acc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198726 Signature Algorithm: sha256WithRSAEncryption 11:70:5f:50:61:21:a5:d8:cf:52:d2:1f:c6:1d:89:3b:87:d7: 7e:bd:7e:ba:0b:39:ac:74:d6:64:11:18:bc:ec:77:1b:70:ef: 78:f8:00:8b:8d:d0:74:6b:16:45:92:06:b5:a1:38:4d:51:aa: 7d:d0:99:a4:a6:92:63:39:78:d0:87:2e:40:f2:39:f4:fa:3f: 71:b2:a6:8b:83:65:9b:cf:93:3a:70:5d:26:69:2b:f0:f7:01: d7:22:9b:1a:d7:f9:61:b4:b4:59:3f:71:4b:d7:e0:1b:b6:e9: 6e:ce:5a:f3:12:38:3f:fd:dd:e8:97:ae:0d:fd:42:17:cc:34: 3c:6d:66:ce:cf:d3:87:f9:91:86:57:03:43:27:42:4a:c5:e3: cc:f3:7d:b5:a0:83:9e:b3:e1:42:5c:6d:bb:aa:f6:52:15:16: e8:dd:8d:0a:e8:93:a0:0b:d9:dc:e7:28:6f:e8:cd:6e:8f:3f: f5:0a:3c:d8:dd:e7:43:8c:7f:93:48:b9:f6:27:b8:4b:2e:7d: b9:53:a4:95:df:93:a8:00:16:aa:92:a4:97:7f:4a:2a:87:f1: 48:e1:9f:e6:91:8c:5d:d7:87:83:ea:d6:e3:23:ed:ea:da:14: 95:47:7e:d2:6d:c0:e4:54:07:b4:e8:f0:e6:d3:14:74:6f:2c: a9:ee:a8:1f -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZsN3j2w9IjhKVr81PYUzMktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjExMTQ0MzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGNkZTVhNjExNDVkMzk5MmVjY2RlYzdiN2YwYjg3ZDU2NmJkZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfPm7cUXf18jZ/dRWz108qA73eFk syVf60CXNEtTbaRSdZ8tVReXoCvTmG72aXwA4hMtbyYZDQnV0sa7Qp6N376/cR06 P06KDu1KnP7RnE1tRblGjIRC7X8Tmh1pUuIe+DbNvIj9gz3/ZIGfnrydAanmr5HN Z9aO3igX+Fhp8mufw0sACMRi+QlicozReIgBHxnLI37//eiFBiw6n4twdV150BMK jmkVTeVop2Yz5H2+xFrIZ6RIn7TlR/decBGSNjppvnVUycF4aeyyw45SnrzPtFoQ EFjNt+L2yBC1ZQEaeJi+riUszF2+bqxQOXNnjoIni+38ScNpOGH38jqhAwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFDTN5aYRRdOZLszex7fwuH1Wa93KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2I0MmM1 My1lMDVhLTRkNzctODJlZS01ZWYzNjIyNmE3NjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYjQyYzUz LWUwNWEtNGQ3Ny04MmVlLTVlZjM2MjI2YTc2Ny8xL05NM2xwaEZGMDVrdXpON0h0 X0M0ZlZacjNjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDBQoAAwQGW4lAAwQCuQ5AAwQCuSPYAwQCuenc AwQCue6gAwQCufDgMA0EAgACMAcDBQMqAqzAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMIRjANBgkqhkiG9w0BAQsFAAOCAQEAEXBfUGEhpdjPUtIfxh2JO4fXfr1+ ugs5rHTWZBEYvOx3G3DvePgAi43QdGsWRZIGtaE4TVGqfdCZpKaSYzl40IcuQPI5 9Po/cbKmi4Nlm8+TOnBdJmkr8PcB1yKbGtf5YbS0WT9xS9fgG7bpbs5a8xI4P/3d 6JeuDf1CF8w0PG1mzs/Th/mRhlcDQydCSsXjzPN9taCDnrPhQlxtu6r2UhUW6N2N CuiToAvZ3Ocob+jNbo8/9Qo82N3nQ4x/k0i59ie4Sy59uVOkld+TqAAWqpKkl39K KofxSOGf5pGMXdeHg+rW4yPt6toUlUd+0m3A5FQHtOjw5tMUdG8sqe6oHw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:23 2025 by rpki-client