This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer File: NgqWAeAvgSjvZG9VlTNuCleRfK8.cer (raw, json) Hash identifier: vC9a3W4X+lhN370GHcv5vWsLdAAUeKT62fBx3e+y4QE= Subject key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CC2C552BB3D386E91A3B01A3A8F10 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29305 IP: 194.177.4.0/22 IP: 195.225.136.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c2:c5:52:bb:3d:38:6e:91:a3:b0:1a:3a:8f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=360a9601e02f8128ef646f5595336e0a57917caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7a:f8:2c:63:40:5b:55:00:16:cf:58:18:a7: fa:16:71:70:45:9e:37:3f:49:57:a7:21:d4:5d:f7: 25:23:a9:1e:5b:df:5b:bc:0b:84:c4:55:97:a4:3c: 9c:e8:93:e1:df:a1:cc:0e:4a:b3:f8:fd:bb:1c:64: 5a:f0:52:bd:c1:c2:9f:09:6c:99:13:33:b6:cb:63: 96:f9:7e:96:54:71:aa:ad:bc:af:04:58:42:61:45: cc:61:19:a0:7d:11:ba:74:12:a3:20:53:8d:be:30: 2a:bd:39:c1:ac:0b:e4:93:95:1c:6a:8e:cd:d4:49: 24:a3:da:78:c1:0d:99:98:4c:f9:9c:d6:49:ba:e5: ba:f9:45:5b:bd:69:d8:25:49:2d:bf:9f:c8:a4:23: 82:84:9a:14:cf:61:f0:08:74:a9:de:24:8b:13:53: 6d:dd:78:b3:f0:1b:9e:f3:58:d2:28:09:d3:f7:51: 99:dd:e9:11:13:84:f4:35:bc:d0:d2:1c:68:77:54: 1f:1c:d1:2e:2f:38:bc:ca:e6:9b:a9:c0:92:68:82: d1:6f:d8:c2:c0:b2:b8:7f:a3:6a:80:0f:c0:4c:56: 0b:e2:75:31:f5:49:ed:18:2e:ed:80:59:69:9e:72: 25:71:1e:7a:6d:bf:79:72:8f:6e:18:be:6b:b4:e5: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.177.4.0/22 195.225.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29305 Signature Algorithm: sha256WithRSAEncryption 08:cb:c5:02:16:b2:ec:81:19:25:83:a5:3c:4d:5b:ed:77:5e: 5b:c0:8f:d6:34:ca:7b:98:3d:c5:6b:3e:da:2b:80:cb:c0:a5: 9d:78:6a:ca:a4:60:65:0d:e2:c1:dd:77:6f:f7:09:d5:19:c5: 3e:70:c6:86:21:f9:d6:fe:70:0a:88:35:5f:97:55:e6:f9:27: 28:17:8b:ec:21:52:3b:db:bc:f3:b3:9b:eb:b9:29:0f:b1:dc: f7:e4:77:0f:a2:cc:5f:37:a2:4d:e4:01:0c:e2:ec:37:58:61: 3b:7a:bf:99:21:be:d0:2a:8b:a5:78:b8:ce:a1:7c:91:ba:62: b3:41:ce:39:a6:2b:70:1c:2c:89:96:86:ce:89:e6:f0:06:28: 35:82:7a:45:ea:ad:2b:5f:f0:08:1a:e2:77:d0:4d:f9:a3:bf: c3:2a:cb:71:e1:5a:e2:08:b5:b7:2f:59:70:e3:44:2c:56:62: 05:7d:74:18:fe:f5:41:86:3e:09:ee:8d:0d:e4:3a:91:cf:1f: c0:82:71:15:be:f2:bc:b1:22:91:7f:ca:06:75:43:9a:2f:a0: 6f:c8:96:38:8b:b2:3f:2c:1f:9b:04:15:56:2a:39:15:38:1e: 57:d0:4a:d6:56:5c:61:97:30:d2:db:76:8f:f6:8a:03:0f:3f: fd:70:7b:59 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt9XMLFUrs9OG6Ro7AaOo8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjBhOTYwMWUwMmY4MTI4ZWY2NDZmNTU5NTMzNmUwYTU3OTE3Y2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nr4LGNAW1UAFs9YGKf6FnFwRZ43 P0lXpyHUXfclI6keW99bvAuExFWXpDyc6JPh36HMDkqz+P27HGRa8FK9wcKfCWyZ EzO2y2OW+X6WVHGqrbyvBFhCYUXMYRmgfRG6dBKjIFONvjAqvTnBrAvkk5Ucao7N 1Ekko9p4wQ2ZmEz5nNZJuuW6+UVbvWnYJUktv5/IpCOChJoUz2HwCHSp3iSLE1Nt 3Xiz8Bue81jSKAnT91GZ3ekRE4T0NbzQ0hxod1QfHNEuLzi8yuabqcCSaILRb9jC wLK4f6NqgA/ATFYL4nUx9UntGC7tgFlpnnIlcR56bb95co9uGL5rtOVZGwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFDYKlgHgL4Eo72RvVZUzbgpXkXyvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2MzY2E4 Ni0zZTc2LTQ4YzQtOThhYy1jMmQwMDM0MjIzNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYzNjYTg2 LTNlNzYtNDhjNC05OGFjLWMyZDAwMzQyMjM1Yy8xL05ncVdBZUF2Z1NqdlpHOVZs VE51Q2xlUmZLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCwrEEAwQCw+GIMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAnJ5MA0GCSqGSIb3DQEBCwUAA4IBAQAIy8UCFrLsgRklg6U8TVvtd15b wI/WNMp7mD3Faz7aK4DLwKWdeGrKpGBlDeLB3Xdv9wnVGcU+cMaGIfnW/nAKiDVf l1Xm+ScoF4vsIVI727zzs5vruSkPsdz35HcPosxfN6JN5AEM4uw3WGE7er+ZIb7Q KouleLjOoXyRumKzQc45pitwHCyJlobOiebwBig1gnpF6q0rX/AIGuJ30E35o7/D Kstx4VriCLW3L1lw40QsVmIFfXQY/vVBhj4J7o0N5DqRzx/AgnEVvvK8sSKRf8oG dUOaL6BvyJY4i7I/LB+bBBVWKjkVOB5X0ErWVlxhlzDS23aP9ooDDz/9cHtZ -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:33 2026 by rpki-client