This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer File: NlHOpaznf01_TdKC8Qq5yw7k0ew.cer (raw, json) Hash identifier: 9NGDc8XqvVYM0Qmv48aBinkg9nnANGXzcSW3ZhWS+bg= Subject key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79101063F26D7558B55814660D473891 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.163.186.0/24 IP: 2a10:f540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:10:63:f2:6d:75:58:b5:58:14:66:0d:47:38:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:f9:47:92:06:81:97:05:24:fb:f2:a3:11: 80:16:7d:01:35:f9:25:96:ee:5e:19:3f:f2:e0:b9: cd:f2:22:cb:d8:25:99:60:f3:bd:60:7e:b2:70:68: d9:c0:0e:a1:84:50:3c:dd:5b:de:14:ad:a5:38:3b: c8:53:9e:81:ed:14:a1:32:68:07:b9:61:dd:2c:e6: df:f9:eb:61:40:aa:60:c5:19:c8:eb:89:ba:53:da: 19:9f:b7:ac:8b:8f:2c:ed:4e:02:47:fe:23:d1:53: 0f:3b:c6:de:b8:a8:7e:f3:a7:84:78:31:49:3b:83: 19:82:d8:ff:4c:96:7f:00:ff:62:7f:c4:46:6a:07: 05:b8:b0:3e:b1:6e:2c:81:2b:0f:33:09:6e:13:75: 20:6d:2c:e7:13:15:94:b6:b7:b4:a4:9b:09:45:42: 91:e7:1b:32:83:8e:87:8a:4d:70:8f:e7:c6:69:7e: b1:d0:9d:a8:74:c4:d0:a3:12:1c:3e:89:ae:34:e9: 60:e8:aa:c5:68:b2:99:1e:4a:45:0c:c6:3c:cc:e7: db:a2:62:5c:1d:3b:5c:2d:6f:6b:59:05:be:e1:52: 61:96:f4:6f:17:86:1f:7b:a6:52:d2:9a:04:07:5a: 76:e3:c4:5b:56:1d:26:da:47:2d:29:b6:d4:f9:c6: 49:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.186.0/24 IPv6: 2a10:f540::/29 Signature Algorithm: sha256WithRSAEncryption 92:a0:f1:78:7e:2b:7f:b6:c9:fa:37:01:fc:08:87:46:9e:94: e2:38:d4:96:20:2c:21:91:b0:98:34:26:41:8f:a7:eb:8c:8b: 94:d5:66:ba:b8:36:93:3f:45:bd:b4:11:f9:73:9a:7c:4d:e1: 76:74:e1:91:04:4d:d7:f5:14:70:87:23:cb:e8:63:5e:84:50: 54:3d:04:56:17:54:cc:9f:08:bf:f9:9d:94:3a:ff:48:f3:95: cc:0b:29:b9:7b:0b:29:b5:c3:a2:ca:e0:c2:88:e8:12:be:0c: d5:7e:0a:03:24:61:f7:fb:62:f0:ff:49:ed:53:de:2b:e9:ac: 76:80:15:89:25:bd:08:3a:c4:d2:60:f6:64:7a:8e:23:67:db: a4:cd:1e:39:8a:f2:a0:9e:82:bd:d0:16:5e:e2:42:09:20:27: 1a:95:a4:14:26:47:a1:2e:d1:13:58:df:e1:bc:70:b6:ec:82: 96:39:55:1c:e6:a7:cf:0a:ea:e2:80:48:b1:e0:30:b2:c0:39: ee:3c:0f:96:65:ce:a8:0c:f5:57:48:d7:1d:bf:f6:0f:05:e9: e8:9a:03:f5:95:cb:63:9b:66:ea:f6:de:7c:ee:54:70:58:67: 95:10:d1:a1:4d:19:55:c4:59:25:b7:d6:12:a8:41:91:3e:fb: a8:6c:4e:80 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EBBj8m11WLVYFGYNRziRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjUxY2VhNWFjZTc3ZjRkN2Y0ZGQyODJmMTBhYjljYjBlZTRkMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7D5R5IGgZcFJPvyoxGAFn0BNfkl lu5eGT/y4LnN8iLL2CWZYPO9YH6ycGjZwA6hhFA83VveFK2lODvIU56B7RShMmgH uWHdLObf+ethQKpgxRnI64m6U9oZn7esi48s7U4CR/4j0VMPO8beuKh+86eEeDFJ O4MZgtj/TJZ/AP9if8RGagcFuLA+sW4sgSsPMwluE3UgbSznExWUtre0pJsJRUKR 5xsyg46Hik1wj+fGaX6x0J2odMTQoxIcPomuNOlg6KrFaLKZHkpFDMY8zOfbomJc HTtcLW9rWQW+4VJhlvRvF4Yfe6ZS0poEB1p248RbVh0m2kctKbbU+cZJowIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDZRzqWs539Nf03SgvEKucsO5NHsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2FjMjE0 Yi0zNzcyLTQ4MTAtOTIwNi1iOTJiMDk0ZjNhM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvYWMyMTRi LTM3NzItNDgxMC05MjA2LWI5MmIwOTRmM2EzYy8xL05sSE9wYXpuZjAxX1RkS0M4 UXE1eXc3azBldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaO6MA0EAgACMAcDBQMqEPVAMA0GCSqGSIb3 DQEBCwUAA4IBAQCSoPF4fit/tsn6NwH8CIdGnpTiONSWICwhkbCYNCZBj6frjIuU 1Wa6uDaTP0W9tBH5c5p8TeF2dOGRBE3X9RRwhyPL6GNehFBUPQRWF1TMnwi/+Z2U Ov9I85XMCym5ewsptcOiyuDCiOgSvgzVfgoDJGH3+2Lw/0ntU94r6ax2gBWJJb0I OsTSYPZkeo4jZ9ukzR45ivKgnoK90BZe4kIJICcalaQUJkehLtETWN/hvHC27IKW OVUc5qfPCurigEix4DCywDnuPA+WZc6oDPVXSNcdv/YPBenomgP1lctjm2bq9t58 7lRwWGeVENGhTRlVxFklt9YSqEGRPvuobE6A -----END CERTIFICATE-----Generated at Mon Jan 26 22:10:39 2026 by rpki-client