This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer File: NdhRwRSj93nqgCV7HuGCas2uSk4.cer (raw, json) Hash identifier: aKvWrnAQf4m3+ffTIqote3eCMZk9z9sgRoRfKN480gA= Subject key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1F988841AA5E12248D5E0C7475ABB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42143 IP: 185.207.52.0/22 IP: 2a0b:1e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f9:88:84:1a:a5:e1:22:48:d5:e0:c7:47:5a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6c:00:18:29:0c:66:38:93:6f:6d:25:02:72: a9:2f:dc:aa:8b:2c:ea:13:29:2d:b7:ec:dc:73:ed: 9a:a2:b9:61:26:3d:90:e8:d9:13:3e:83:44:82:af: f9:2a:65:54:3c:5b:85:1e:a3:ee:2f:33:8e:bb:34: b6:f3:bd:52:fc:9f:50:e6:0c:de:c0:97:7c:87:c0: 84:39:bc:d8:4a:7a:8e:69:ff:fa:cd:7e:f3:a3:4e: c2:68:5f:c0:ef:4d:87:f6:c2:e6:e7:b6:a0:8f:3e: 7a:23:60:9f:c8:f9:48:56:73:dc:c1:f1:82:3f:cc: 83:d9:d0:82:a1:31:a9:60:00:98:fb:e6:db:b7:31: 5c:ec:be:79:9a:4e:1c:e4:d3:3d:bc:b6:97:69:68: 39:11:a1:d1:e4:2b:d4:ee:63:fe:b5:6a:12:24:75: 66:db:fc:84:f7:08:6c:a9:fd:aa:c0:bb:27:bb:c0: 80:4d:3c:d0:cd:00:8a:67:75:dd:43:8a:8e:57:a2: 56:f7:46:42:5a:24:70:91:ad:83:f0:64:9b:32:67: 57:c0:18:70:69:c4:cb:5a:18:9c:67:55:34:a9:c2: aa:f8:0e:cf:5e:4d:d5:34:d1:2e:7b:f8:52:45:60: 98:b5:27:13:e7:b6:42:5a:cc:87:ff:a1:0f:ec:ec: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.52.0/22 IPv6: 2a0b:1e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42143 Signature Algorithm: sha256WithRSAEncryption 3e:d8:dc:61:96:b0:0b:91:70:d8:14:c3:cd:58:a1:38:19:9c: 7d:b1:2c:1d:ae:29:2e:d5:34:71:d9:92:b8:11:94:32:26:7d: 2f:2d:60:06:3f:e9:63:52:d2:90:19:65:a9:d5:8f:88:9b:1a: 90:9c:36:70:5d:4d:6a:5b:2f:d0:09:78:54:b0:4c:a5:10:e2: 4a:ab:07:f7:90:cd:73:91:0b:64:16:3d:90:b2:a2:87:de:36: 08:f1:32:09:ed:14:18:8b:10:ca:ec:b6:9d:8e:74:34:a4:09: 17:e9:2d:cf:ab:68:a3:b9:b4:02:a4:84:e9:af:fb:35:be:55: 36:c8:09:fe:3f:e7:35:7d:ba:fa:54:6a:31:f0:9d:59:e4:1d: e6:db:5d:86:bc:34:4d:07:91:2b:68:4e:3a:b7:07:74:9d:21: 53:0e:4f:ed:aa:a2:8b:b5:8c:c1:ea:29:3b:69:e0:97:e1:3b: 05:09:88:7e:d2:5f:4a:eb:e2:ba:02:95:f3:7e:cf:7c:18:c2: 82:ae:08:73:bd:73:b8:2f:72:40:78:1a:51:de:92:0c:7c:04: 52:0f:46:1f:bb:37:58:3a:82:50:87:fa:95:02:e8:27:23:39: dd:de:0d:a4:ca:0e:f2:de:aa:d2:e2:a5:be:f6:db:4d:04:df: 9a:d4:25:a1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8fmIhBql4SJI1eDHR1q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWQ4NTFjMTE0YTNmNzc5ZWE4MDI1N2IxZWUxODI2YWNkYWU0YTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGwAGCkMZjiTb20lAnKpL9yqiyzq Eyktt+zcc+2aorlhJj2Q6NkTPoNEgq/5KmVUPFuFHqPuLzOOuzS2871S/J9Q5gze wJd8h8CEObzYSnqOaf/6zX7zo07CaF/A702H9sLm57agjz56I2CfyPlIVnPcwfGC P8yD2dCCoTGpYACY++bbtzFc7L55mk4c5NM9vLaXaWg5EaHR5CvU7mP+tWoSJHVm 2/yE9whsqf2qwLsnu8CATTzQzQCKZ3XdQ4qOV6JW90ZCWiRwka2D8GSbMmdXwBhw acTLWhicZ1U0qcKq+A7PXk3VNNEue/hSRWCYtScT57ZCWsyH/6EP7OxsDQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDXYUcEUo/d56oAlex7hgmrNrkpOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2ZmZmVl MS1iZDQ2LTQ1MjMtOWVjYS03MDU1NjMxMzdkN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZmZmZWUx LWJkNDYtNDUyMy05ZWNhLTcwNTU2MzEzN2Q3YS8xL05kaFJ3UlNqOTNucWdDVjdI dUdDYXMydVNrNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuc80MA0EAgACMAcDBQMqCx5AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCknzANBgkqhkiG9w0BAQsFAAOCAQEAPtjcYZawC5Fw 2BTDzVihOBmcfbEsHa4pLtU0cdmSuBGUMiZ9Ly1gBj/pY1LSkBllqdWPiJsakJw2 cF1Nalsv0Al4VLBMpRDiSqsH95DNc5ELZBY9kLKih942CPEyCe0UGIsQyuy2nY50 NKQJF+ktz6too7m0AqSE6a/7Nb5VNsgJ/j/nNX26+lRqMfCdWeQd5ttdhrw0TQeR K2hOOrcHdJ0hUw5P7aqii7WMweopO2ngl+E7BQmIftJfSuviugKV837PfBjCgq4I c71zuC9yQHgaUd6SDHwEUg9GH7s3WDqCUIf6lQLoJyM53d4NpMoO8t6q0uKlvvbb TQTfmtQloQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:39 2026 by rpki-client