This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer (raw, json) Hash identifier: Et7OzbdpiVxxCmy+cmPbs/e9oxahv78PVo02/tdoLHI= Subject key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6F234295F0C083A720351216C4126 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42346 IP: 83.137.24.0/21 IP: 109.106.32.0 -- 109.106.43.255 IP: 185.93.216.0/22 IP: 185.127.172.0/22 IP: 194.63.148.0/22 IP: 195.60.192.0/22 IP: 212.120.32.0/19 IP: 213.213.160.0/19 IP: 2a00:5480::/29 IP: 2a02:ab0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f2:34:29:5f:0c:08:3a:72:03:51:21:6c:41:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3618be04417a6bcb9f33942a631518be533ffaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c0:1b:64:8f:8c:29:43:39:5a:9a:45:d3:95: 80:99:ce:10:6c:d4:04:46:28:04:93:88:39:a1:a9: fa:01:70:98:cc:e6:9f:1f:4e:81:bd:db:d1:44:7a: 18:f3:4c:d2:3d:a7:a5:9a:d7:6b:53:1e:bc:c5:ed: c8:7b:41:68:d6:e9:5d:b5:02:b5:a9:e8:a4:1f:d7: d1:4b:74:58:01:3b:99:a0:a5:13:99:34:49:c4:a9: a8:19:e8:95:2b:c1:fb:f9:1d:1e:bd:06:0e:fa:e9: 7a:44:72:66:b3:bc:c4:41:8c:8e:36:08:90:74:56: 06:a7:a4:1e:de:98:13:3d:02:c3:42:a7:a5:46:aa: c4:bf:95:33:dd:c9:fb:f8:b0:b1:cd:ba:c7:a9:a2: d4:89:1a:d0:42:7c:1c:a9:a9:dd:46:9e:1c:90:43: 54:c9:be:40:95:51:77:98:17:b3:f7:b5:49:62:d7: d9:6f:3a:0a:af:50:c2:f1:88:ea:e2:33:15:79:30: 53:bc:34:6f:d0:d1:88:49:69:a0:a9:a9:65:fa:c7: d0:88:86:3a:c5:45:6c:cc:4a:bc:2f:87:73:36:df: 25:f7:9e:2b:55:f5:22:bc:ba:46:65:de:93:96:87: 54:cc:4f:81:6e:a6:0f:57:08:59:84:90:a8:53:e3: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.24.0/21 109.106.32.0-109.106.43.255 185.93.216.0/22 185.127.172.0/22 194.63.148.0/22 195.60.192.0/22 212.120.32.0/19 213.213.160.0/19 IPv6: 2a00:5480::/29 2a02:ab0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42346 Signature Algorithm: sha256WithRSAEncryption 32:1d:5f:9e:75:cb:3b:37:23:65:31:3d:b3:3a:14:d7:ae:58: 58:b9:44:ef:cf:1b:e2:81:f7:30:e1:9c:8a:25:40:e8:8c:b3: 88:fc:aa:70:53:d6:8e:6b:ed:c8:74:8e:16:22:d3:95:cd:44: 83:38:97:4d:00:d8:7e:65:42:62:5d:37:56:5c:c8:b1:a5:1a: 42:1b:2e:cf:67:6e:c8:17:55:3b:f0:66:12:cc:4a:8e:8a:87: 7c:3c:7a:b9:28:ae:0d:80:a6:2e:c8:46:39:1d:92:0d:fc:f4: 8a:8f:36:8b:f0:39:01:14:26:0f:41:99:5c:d9:2d:da:76:c5: af:f1:a4:ee:57:d8:0e:0b:21:0b:0c:7f:c1:fd:0f:7b:50:0d: ee:be:15:4f:75:cb:24:23:44:89:f8:8a:ef:df:84:a1:3e:ec: a3:4b:03:24:7b:25:3b:12:3a:21:34:ec:f5:eb:57:a8:ea:ce: 81:e5:22:3f:ad:03:61:fd:de:85:00:ff:ad:cc:8b:66:be:eb: 2e:d7:46:52:39:91:6c:0d:31:04:9f:e9:22:62:8e:02:09:aa: 22:4c:59:f2:79:ab:29:b3:ba:1c:a1:5c:47:25:8f:8e:6c:23: 8b:da:01:d7:ad:1f:fd:33:a8:8f:0b:2a:3b:4a:4d:99:1c:02: 4a:fa:2b:03 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZt+pvI0KV8MCDpyA1EhbEEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjE4YmUwNDQxN2E2YmNiOWYzMzk0MmE2MzE1MThiZTUzM2ZmYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8AbZI+MKUM5WppF05WAmc4QbNQE RigEk4g5oan6AXCYzOafH06BvdvRRHoY80zSPaelmtdrUx68xe3Ie0Fo1uldtQK1 qeikH9fRS3RYATuZoKUTmTRJxKmoGeiVK8H7+R0evQYO+ul6RHJms7zEQYyONgiQ dFYGp6Qe3pgTPQLDQqelRqrEv5Uz3cn7+LCxzbrHqaLUiRrQQnwcqandRp4ckENU yb5AlVF3mBez97VJYtfZbzoKr1DC8Yjq4jMVeTBTvDRv0NGISWmgqall+sfQiIY6 xUVszEq8L4dzNt8l954rVfUivLpGZd6TlodUzE+BbqYPVwhZhJCoU+NDRQIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFDYYvgRBemvLnzOUKmMVGL5TP/r0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzIwNjFk OS02NDlhLTQxMzYtOGM5My0yMjY4ZTk3YThiYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMjA2MWQ5 LTY0OWEtNDEzNi04YzkzLTIyNjhlOTdhOGJjMS8xL05oaS1CRUY2YTh1Zk01UXFZ eFVZdmxNXy12US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUF BwEHAQH/BFgwVjA+BAIAATA4AwQDU4kYMAwDBAVtaiADBAJtaigDBAK5XdgDBAK5 f6wDBALCP5QDBALDPMADBAXUeCADBAXV1aAwFAQCAAIwDgMFAyoAVIADBQMqAgqw MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClajANBgkqhkiG9w0BAQsFAAOCAQEA Mh1fnnXLOzcjZTE9szoU165YWLlE788b4oH3MOGciiVA6IyziPyqcFPWjmvtyHSO FiLTlc1EgziXTQDYfmVCYl03VlzIsaUaQhsuz2duyBdVO/BmEsxKjoqHfDx6uSiu DYCmLshGOR2SDfz0io82i/A5ARQmD0GZXNkt2nbFr/Gk7lfYDgshCwx/wf0Pe1AN 7r4VT3XLJCNEifiK79+EoT7so0sDJHslOxI6ITTs9etXqOrOgeUiP60DYf3ehQD/ rcyLZr7rLtdGUjmRbA0xBJ/pImKOAgmqIkxZ8nmrKbO6HKFcRyWPjmwji9oB160f /TOojwsqO0pNmRwCSvorAw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:00 2026 by rpki-client