This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer File: NehMBjohgLI_X20xYqdbMJL1wY0.cer (raw, json) Hash identifier: IDYn0ggmm0JN9GiV83og+UDmuTqSptwwMgN6p9erEq0= Subject key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F844DFFD0B588FC1876E90D26052AD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201085 IP: 157.97.136.0/21 IP: 185.86.168.0/22 IP: 2a03:77a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4d:ff:d0:b5:88:fc:18:76:e9:0d:26:05:2a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:50:73:28:4f:c0:9e:4d:d4:12:ea:c1:2e: d7:24:cd:47:c8:56:0c:f7:17:8b:21:53:70:2b:ef: b4:97:cf:bd:87:72:5b:aa:26:f9:0f:d0:c2:31:d4: 8e:9f:6b:76:48:ef:d6:7d:a2:6f:25:ac:a4:63:b8: 7e:e3:4c:9d:0d:59:9a:af:32:18:fa:7d:88:3c:6b: 6b:ee:ba:04:dc:83:f0:a9:73:b7:b1:0e:ce:2e:96: 0c:7f:cc:8f:6c:21:46:cb:c0:e0:5e:76:7f:e0:03: fb:50:4c:74:b3:f2:08:6a:07:92:57:ed:48:fd:e1: 32:45:08:2b:83:7b:34:17:f2:1d:ff:4a:97:50:b5: 00:2a:b3:29:a0:07:be:d5:30:c7:d7:23:c8:57:fc: 3c:a5:d0:3b:a9:7c:8a:3c:99:4f:4f:28:31:cc:22: f4:1f:69:26:ad:75:9e:e8:aa:e8:64:32:29:28:84: fb:08:fd:f9:a1:f1:c4:7c:4a:56:2e:7e:f3:91:21: cb:8c:e8:82:71:38:fc:b6:78:b4:5e:ab:82:cb:f7: eb:02:4a:9f:24:2f:d5:ba:f6:f3:a2:37:1c:0b:f0: ad:a9:79:1e:9a:fd:31:d2:7a:9d:04:4b:a5:d9:68: 90:09:bd:00:10:74:da:b3:04:de:e6:3c:9e:ff:9f: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.136.0/21 185.86.168.0/22 IPv6: 2a03:77a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201085 Signature Algorithm: sha256WithRSAEncryption 1b:4a:20:1b:ca:2a:67:1d:60:8b:af:61:aa:8c:1e:dd:cc:3a: 24:57:5f:46:4d:27:1b:31:4c:37:47:98:cb:ec:77:9f:32:4e: b7:b3:6a:03:4f:38:27:c9:80:65:a9:2e:80:4f:23:cc:bc:03: fe:eb:6e:72:e9:cf:64:c0:5a:c1:4d:ce:5d:9d:59:a2:35:80: ba:f5:be:96:83:e1:98:7c:1c:5b:42:ec:41:44:cf:08:db:4b: 14:2f:5b:21:da:44:79:a4:41:60:25:7e:88:75:da:3b:20:5e: 06:a4:d3:46:b8:d8:8f:18:de:e5:60:e4:e9:d5:67:c4:ea:b5: 1f:04:c0:6b:ca:ad:d1:47:ea:7f:27:8a:02:77:e2:66:24:fc: 70:11:05:a2:f1:de:d7:a8:04:66:3b:e3:df:d0:51:89:21:04: f3:30:65:4a:36:5a:54:ab:74:4f:fb:8f:8c:01:65:e4:ad:10: 28:bf:02:43:4a:b7:af:a5:2c:c5:66:02:ef:ad:85:fa:d2:f3: 38:da:be:ea:8d:b8:26:2e:ef:a0:d4:ef:84:6d:10:71:2b:5f: af:12:d1:95:ca:36:bd:22:df:29:be:fd:02:25:2a:39:fb:fb: ef:26:e2:21:06:0b:ed:1b:f2:71:95:9d:e7:b1:3b:8e:72:ef: 22:d2:57:c1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/hE3/0LWI/Bh26Q0mBSrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWU4NGMwNjNhMjE4MGIyM2Y1ZjZkMzE2MmE3NWIzMDkyZjVjMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6lQcyhPwJ5N1BLqwS7XJM1HyFYM 9xeLIVNwK++0l8+9h3Jbqib5D9DCMdSOn2t2SO/WfaJvJaykY7h+40ydDVmarzIY +n2IPGtr7roE3IPwqXO3sQ7OLpYMf8yPbCFGy8DgXnZ/4AP7UEx0s/IIageSV+1I /eEyRQgrg3s0F/Id/0qXULUAKrMpoAe+1TDH1yPIV/w8pdA7qXyKPJlPTygxzCL0 H2kmrXWe6KroZDIpKIT7CP35ofHEfEpWLn7zkSHLjOiCcTj8tni0XquCy/frAkqf JC/VuvbzojccC/CtqXkemv0x0nqdBEul2WiQCb0AEHTaswTe5jye/5/mLQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDXoTAY6IYCyP19tMWKnWzCS9cGNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzZjYTg1 Mi1lZDRiLTQxZDEtYTdiNi04NGE3MWNjMzJkNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNmNhODUy LWVkNGItNDFkMS1hN2I2LTg0YTcxY2MzMmQ0OC8xL05laE1Cam9oZ0xJX1gyMHhZ cWRiTUpMMXdZMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDnWGIAwQCuVaoMA0EAgACMAcDBQAqA3egMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRfTANBgkqhkiG9w0BAQsFAAOCAQEAG0og G8oqZx1gi69hqowe3cw6JFdfRk0nGzFMN0eYy+x3nzJOt7NqA084J8mAZakugE8j zLwD/utucunPZMBawU3OXZ1ZojWAuvW+loPhmHwcW0LsQUTPCNtLFC9bIdpEeaRB YCV+iHXaOyBeBqTTRrjYjxje5WDk6dVnxOq1HwTAa8qt0UfqfyeKAnfiZiT8cBEF ovHe16gEZjvj39BRiSEE8zBlSjZaVKt0T/uPjAFl5K0QKL8CQ0q3r6UsxWYC762F +tLzONq+6o24Ji7voNTvhG0QcStfrxLRlco2vSLfKb79AiUqOfv77ybiIQYL7Rvy cZWd57E7jnLvItJXwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:11 2026 by rpki-client