This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer File: NiQhSOPmNqkDQ_PpUES439udHNk.cer (raw, json) Hash identifier: DTf/JSMdxKBwM7uIVn9AJ3lnCi64mbXUCf8D+ePw9k4= Subject key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC930759D012899D2A856FE775EC8FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.164.184.0/24 IP: 2a0b:5400::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:30:75:9d:01:28:99:d2:a8:56:fe:77:5e:c8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:41:77:13:0f:6e:2c:9f:33:32:33:d9:01: 9c:44:80:2c:33:82:fc:fc:6c:f9:43:80:e4:f2:37: 42:d9:ec:82:18:ef:0d:3c:f0:9a:ba:0c:d4:cc:4b: 4a:81:80:97:11:46:1f:d3:34:45:04:49:f9:bd:a9: bd:87:4f:26:15:7d:96:60:ac:2c:0d:89:66:ee:3f: a3:8d:59:77:9c:9e:bd:e3:04:70:c7:ba:6e:f8:0c: ef:11:ac:82:c0:3c:c4:c2:6e:f4:f3:b4:a0:f8:83: 10:f7:bb:6e:fd:50:af:f2:37:ad:8a:e8:3a:7f:25: 23:22:c4:8d:82:6d:e7:d8:ff:e1:c1:1d:36:68:34: 99:32:7a:50:93:7b:8b:43:d4:02:ff:97:d4:51:7e: fc:97:a1:c2:34:41:ee:91:09:fb:43:fc:37:db:9b: 16:92:df:dd:a7:cd:a9:f1:16:77:b2:de:2a:15:ce: a6:a5:f3:a5:f0:3e:d9:2e:19:88:8e:09:9a:f4:9e: ea:4a:12:15:81:c7:63:3d:94:3f:bf:8b:d2:09:85: b8:8f:02:8d:34:ed:67:74:8f:2c:6e:0a:96:86:20: ee:db:16:63:1c:07:37:18:f1:a2:0b:a5:6a:93:d1: 03:b8:ad:11:e8:53:cc:b2:aa:dd:5b:d1:48:27:77: e9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.184.0/24 IPv6: 2a0b:5400::/32 Signature Algorithm: sha256WithRSAEncryption 6a:ce:a6:c8:04:0e:4c:42:d8:bb:9c:a1:f9:3c:9e:9d:e1:8d: 53:c3:6f:35:9c:6f:1f:52:3a:38:71:62:2b:a9:28:68:60:f9: 86:13:2c:65:64:62:49:e6:0b:31:9b:17:26:ad:fb:07:0e:14: 4b:27:cd:3b:a7:e9:a9:59:be:91:0c:ee:22:dd:0f:29:a5:9b: 1f:d2:e6:0d:84:02:1d:74:90:a8:f7:85:d6:99:4e:9e:56:bc: 9c:4c:87:9b:0d:e3:87:f9:08:91:53:e1:fa:b0:af:5f:27:db: 60:29:4f:f4:05:54:cd:21:07:7d:5d:7c:d2:14:a8:69:42:35: f9:89:dc:bb:50:22:8b:59:f7:a5:b0:1b:e0:73:3b:5f:d4:b3: 51:3c:34:37:0a:f4:d4:d5:82:04:20:3e:8d:70:68:60:5d:f7: f4:61:cf:0f:70:d5:f9:a6:8f:31:82:61:4b:47:df:e3:a7:10: 70:db:43:e1:5b:ed:28:a7:14:98:47:8a:5d:3f:17:8f:4b:40: 7a:a7:f3:4b:0e:51:90:30:09:f7:c0:ea:ec:31:cc:0c:97:65: db:a2:b1:8b:a6:e1:6a:ba:43:a7:38:b4:b7:70:d1:90:ab:7c: 2f:9e:8d:70:d4:93:29:5f:f9:ae:29:94:0a:68:6d:44:74:db: 99:36:3b:38 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yTB1nQEomdKoVv53Xsj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjI0MjE0OGUzZTYzNmE5MDM0M2YzZTk1MDQ0YjhkZmRiOWQxY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KxBdxMPbiyfMzIz2QGcRIAsM4L8 /Gz5Q4Dk8jdC2eyCGO8NPPCaugzUzEtKgYCXEUYf0zRFBEn5vam9h08mFX2WYKws DYlm7j+jjVl3nJ694wRwx7pu+AzvEayCwDzEwm7087Sg+IMQ97tu/VCv8jetiug6 fyUjIsSNgm3n2P/hwR02aDSZMnpQk3uLQ9QC/5fUUX78l6HCNEHukQn7Q/w325sW kt/dp82p8RZ3st4qFc6mpfOl8D7ZLhmIjgma9J7qShIVgcdjPZQ/v4vSCYW4jwKN NO1ndI8sbgqWhiDu2xZjHAc3GPGiC6Vqk9EDuK0R6FPMsqrdW9FIJ3fpnQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDYkIUjj5japA0Pz6VBEuN/bnRzZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzNjM2Rh MC1kM2Y4LTRhYTItODMzNC0yNmQ3NTkzNjU0MDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvM2MzZGEw LWQzZjgtNGFhMi04MzM0LTI2ZDc1OTM2NTQwMi8xL05pUWhTT1BtTnFrRFFfUHBV RVM0Mzl1ZEhOay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuaS4MA0EAgACMAcDBQAqC1QAMA0GCSqGSIb3 DQEBCwUAA4IBAQBqzqbIBA5MQti7nKH5PJ6d4Y1Tw281nG8fUjo4cWIrqShoYPmG EyxlZGJJ5gsxmxcmrfsHDhRLJ807p+mpWb6RDO4i3Q8ppZsf0uYNhAIddJCo94XW mU6eVrycTIebDeOH+QiRU+H6sK9fJ9tgKU/0BVTNIQd9XXzSFKhpQjX5idy7UCKL WfelsBvgcztf1LNRPDQ3CvTU1YIEID6NcGhgXff0Yc8PcNX5po8xgmFLR9/jpxBw 20PhW+0opxSYR4pdPxePS0B6p/NLDlGQMAn3wOrsMcwMl2XborGLpuFqukOnOLS3 cNGQq3wvno1w1JMpX/muKZQKaG1EdNuZNjs4 -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:58 2026 by rpki-client