This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer File: NdHNq6MVWd4SqxnXnxri0hjDefc.cer (raw, json) Hash identifier: ApAlN7xLGnK7TtkERAyIfp3frPctKaWQ9UHmGpx17u4= Subject key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBD33C49FF2C7391370F8946FB72A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200553 IP: 91.198.141.0/24 IP: 91.198.147.0/24 IP: 91.198.158.0/24 IP: 91.198.167.0/24 IP: 185.100.32.0/22 IP: 185.202.128.0/22 IP: 2a06:3680::/29 IP: 2a0a:d640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d3:3c:49:ff:2c:73:91:37:0f:89:46:fb:72:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:e5:c7:86:8d:36:da:4d:59:7b:f3:a0:c1: 00:7a:2c:33:22:b4:13:6b:a4:1a:7c:bb:b2:c3:cb: 1c:b3:11:13:79:91:2f:f6:ec:16:68:68:15:66:1a: fa:68:8b:8c:05:86:01:c3:5c:88:89:26:54:c0:a1: d6:cc:23:3f:15:ef:ed:94:dd:1f:b5:fc:c6:83:fe: 63:7d:d9:55:fe:6e:71:e6:7b:70:27:88:2f:ab:07: c4:91:af:48:e1:94:1b:b5:ce:c5:c0:e8:a4:80:53: 14:59:4e:51:ed:f1:86:17:59:d9:14:16:e3:d2:ae: c3:b3:ca:32:6c:a3:19:f4:41:1d:81:ac:e8:29:fc: f2:2d:f5:ef:26:ee:9c:63:7b:8f:45:d2:1e:c7:02: 07:1d:8d:76:74:df:c2:1a:d9:f5:24:5e:31:77:06: d1:72:55:59:d1:bf:dc:a4:38:1f:9d:e1:0e:81:e2: 85:22:79:0c:f3:3a:4c:72:dd:1a:cb:46:c5:8a:9e: 8c:27:01:db:c4:9d:4e:8f:05:e6:07:f6:77:c3:3e: f6:32:6d:43:2e:0b:9e:78:ad:a9:06:b4:03:cd:f2: 23:51:3a:73:e3:39:f9:e5:60:e5:a3:b6:a8:92:56: db:9e:e4:32:ba:02:15:8a:bf:3e:33:7c:89:77:43: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.141.0/24 91.198.147.0/24 91.198.158.0/24 91.198.167.0/24 185.100.32.0/22 185.202.128.0/22 IPv6: 2a06:3680::/29 2a0a:d640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200553 Signature Algorithm: sha256WithRSAEncryption 13:b4:76:91:93:52:53:7f:1d:24:c7:d5:ba:cb:a6:6d:a5:8e: 17:31:91:da:21:e3:b2:03:01:dd:2f:54:37:33:e5:ab:50:b7: f3:1c:a0:d2:e2:d1:14:f7:d6:78:97:e1:06:49:4c:f2:17:c9: e2:34:3a:1f:1e:99:07:ae:ef:68:4b:2b:bc:47:a3:ae:2d:3a: 3c:f3:7c:a1:ed:04:4e:b5:1e:f2:ee:5b:11:44:85:52:8a:f4: 1b:cf:b6:8f:a7:00:78:5c:0b:bb:5d:07:42:7c:d0:c3:eb:9e: 3c:3f:7b:88:9a:50:e5:b2:c7:90:8c:b6:3c:b5:30:ea:0a:5f: fa:6c:9e:24:4e:66:5c:63:2f:38:e4:87:a8:c9:7a:02:22:95: 13:a7:65:57:63:3d:ff:e3:2c:00:f6:4a:d8:b0:99:68:87:3a: 8e:ab:91:11:d7:b6:b9:a3:9c:ed:35:58:bb:89:b4:73:1f:4a: 12:8c:ab:2e:95:63:0f:fe:59:f6:fc:2b:99:4b:e7:fa:f0:6b: 4c:b2:2e:42:77:1e:c4:dd:2a:58:7e:8c:d8:fd:d1:9d:34:ca: 73:81:f0:06:3e:9f:df:8a:90:0b:91:4e:eb:8f:ea:b3:f7:55: 23:92:ed:b1:67:c0:04:38:d1:9a:d7:d2:ec:76:4d:92:77:96: ab:09:83:45 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt569M8Sf8sc5E3D4lG+3KiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWQxY2RhYmEzMTU1OWRlMTJhYjE5ZDc5ZjFhZTJkMjE4YzM3OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmflx4aNNtpNWXvzoMEAeiwzIrQT a6QafLuyw8scsxETeZEv9uwWaGgVZhr6aIuMBYYBw1yIiSZUwKHWzCM/Fe/tlN0f tfzGg/5jfdlV/m5x5ntwJ4gvqwfEka9I4ZQbtc7FwOikgFMUWU5R7fGGF1nZFBbj 0q7Ds8oybKMZ9EEdgazoKfzyLfXvJu6cY3uPRdIexwIHHY12dN/CGtn1JF4xdwbR clVZ0b/cpDgfneEOgeKFInkM8zpMct0ay0bFip6MJwHbxJ1OjwXmB/Z3wz72Mm1D LgueeK2pBrQDzfIjUTpz4zn55WDlo7aoklbbnuQyugIVir8+M3yJd0OmIwIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFDXRzaujFVneEqsZ158a4tIYw3n3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1L2YxZWRj MC02M2MxLTQyYjQtYTA0MC0zZmY5MjYwODU1MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvZjFlZGMw LTYzYzEtNDJiNC1hMDQwLTNmZjkyNjA4NTUyNy8xL05kSE5xNk1WV2Q0U3F4blhu eHJpMGhqRGVmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQAW8aNAwQAW8aTAwQAW8aeAwQAW8anAwQCuWQg AwQCucqAMBQEAgACMA4DBQMqBjaAAwUDKgrWQDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDD2kwDQYJKoZIhvcNAQELBQADggEBABO0dpGTUlN/HSTH1brLpm2ljhcx kdoh47IDAd0vVDcz5atQt/McoNLi0RT31niX4QZJTPIXyeI0Oh8emQeu72hLK7xH o64tOjzzfKHtBE61HvLuWxFEhVKK9BvPto+nAHhcC7tdB0J80MPrnjw/e4iaUOWy x5CMtjy1MOoKX/psniROZlxjLzjkh6jJegIilROnZVdjPf/jLAD2StiwmWiHOo6r kRHXtrmjnO01WLuJtHMfShKMqy6VYw/+Wfb8K5lL5/rwa0yyLkJ3HsTdKlh+jNj9 0Z00ynOB8AY+n9+KkAuRTuuP6rP3VSOS7bFnwAQ40ZrX0ux2TZJ3lqsJg0U= -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:43 2026 by rpki-client