This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer File: NufP3RKRk-IZw3ASHKFiUOQptYs.cer (raw, json) Hash identifier: XO5KaR9MatZSLrZu0rxOmTNz5S5Lat2rCphOEitKH/4= Subject key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C6119CB7C18411C2521D4808C3329 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.171.161.0/24 IP: 185.206.228.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:61:19:cb:7c:18:41:1c:25:21:d4:80:8c:33:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36e7cfdd129193e219c370121ca16250e429b58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:e8:77:b8:06:6e:6a:41:32:1f:96:6c:a2: 79:1b:f4:5f:bd:d2:db:fd:4c:49:9b:4d:da:7c:ef: 0e:c4:b4:86:3d:c4:4f:6b:4e:20:ce:69:3a:58:3c: 01:de:35:dc:d5:23:63:50:41:71:18:1f:6d:5e:d9: 10:ce:63:3a:a5:00:cb:2e:75:97:08:e7:c0:96:98: ff:b7:ed:85:6e:8b:1f:63:8c:64:6b:f4:05:3b:ad: 86:93:22:ad:bf:80:8c:a9:b3:ca:a3:9f:13:92:08: 23:3c:c5:84:5a:2d:2f:b9:73:11:fa:52:53:ec:fb: 87:4c:e7:c9:95:74:ba:97:bb:b6:2d:74:5b:f5:55: cc:45:f2:a0:c8:d4:35:37:ab:14:68:39:3a:7e:5f: a8:ce:81:8d:9c:41:ff:11:df:01:77:93:cd:62:02: be:9d:93:fa:5c:f7:f4:15:48:a7:19:b9:6c:c1:74: 35:d3:7d:e8:71:af:b2:23:7a:e3:a4:d2:c3:bd:a3: 3a:82:1e:f0:39:3e:67:26:f6:20:90:2a:76:82:23: 7c:5a:35:79:79:57:91:8c:e7:58:c1:fa:fa:cd:b5: 20:d8:25:c4:e8:12:20:28:e6:ed:9f:62:68:a8:a7: 29:8d:3a:a9:3d:a2:c5:79:25:4b:ae:6e:3c:d4:60: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.161.0/24 185.206.228.0/24 Signature Algorithm: sha256WithRSAEncryption 96:fb:dc:3b:70:65:f4:10:98:86:a4:93:2e:1d:98:73:e0:a0: 80:a4:30:61:5b:c5:dc:ef:70:14:8c:2b:68:08:b3:6b:d3:24: 98:88:78:d2:df:6e:a9:7a:32:2d:3e:7d:f0:aa:c1:1b:c2:36: f3:fc:45:71:1e:fc:2e:f7:22:af:da:55:d4:4b:93:a4:6d:25: 7c:1f:b6:a6:8c:86:98:5b:ce:e6:59:5b:af:54:eb:12:be:95: 30:6f:a3:06:ce:67:21:42:6b:84:82:4c:e2:0e:e3:c7:59:de: 1a:8a:f9:9a:14:bf:5b:ba:2d:8e:0e:c9:94:48:ae:a1:a7:d6: 20:11:61:d3:dd:68:d1:d9:e0:83:b8:86:9d:26:66:f5:ee:4b: e9:15:19:1f:0b:b2:3d:57:28:40:d0:b3:58:79:d8:85:b8:6b: fd:4a:a3:1e:60:27:14:c6:5e:2e:50:c7:94:a4:c4:31:ab:72: ca:c1:9c:bc:e7:3f:94:42:76:61:78:7b:5f:c7:44:89:31:05: 92:f8:e5:76:6c:74:80:72:ea:5c:85:34:e1:67:f2:e4:c9:94: f9:01:68:9a:c7:ac:8d:f2:6b:37:5f:43:96:53:92:eb:51:ab: 99:df:6a:83:00:1f:f4:98:a4:2d:68:eb:97:b9:6e:a7:b3:51: 83:e7:c4:bb -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt9XGEZy3wYQRwlIdSAjDMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmU3Y2ZkZDEyOTE5M2UyMTljMzcwMTIxY2ExNjI1MGU0MjliNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr7od7gGbmpBMh+WbKJ5G/RfvdLb /UxJm03afO8OxLSGPcRPa04gzmk6WDwB3jXc1SNjUEFxGB9tXtkQzmM6pQDLLnWX COfAlpj/t+2FbosfY4xka/QFO62GkyKtv4CMqbPKo58TkggjPMWEWi0vuXMR+lJT 7PuHTOfJlXS6l7u2LXRb9VXMRfKgyNQ1N6sUaDk6fl+ozoGNnEH/Ed8Bd5PNYgK+ nZP6XPf0FUinGblswXQ1033oca+yI3rjpNLDvaM6gh7wOT5nJvYgkCp2giN8WjV5 eVeRjOdYwfr6zbUg2CXE6BIgKObtn2JoqKcpjTqpPaLFeSVLrm481GCFgQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFDbnz90SkZPiGcNwEhyhYlDkKbWLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzM1NTVl MC05NDQzLTRlNjMtYTg5Yi1kZDE3YmZkNjdjZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMzU1NWUw LTk0NDMtNGU2My1hODliLWRkMTdiZmQ2N2NkMy8xL051ZlAzUktSay1JWnczQVNI S0ZpVU9RcHRZcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAuauhAwQAuc7kMA0GCSqGSIb3DQEBCwUAA4IB AQCW+9w7cGX0EJiGpJMuHZhz4KCApDBhW8Xc73AUjCtoCLNr0ySYiHjS326pejIt Pn3wqsEbwjbz/EVxHvwu9yKv2lXUS5OkbSV8H7amjIaYW87mWVuvVOsSvpUwb6MG zmchQmuEgkziDuPHWd4aivmaFL9bui2ODsmUSK6hp9YgEWHT3WjR2eCDuIadJmb1 7kvpFRkfC7I9VyhA0LNYediFuGv9SqMeYCcUxl4uUMeUpMQxq3LKwZy85z+UQnZh eHtfx0SJMQWS+OV2bHSAcupchTThZ/LkyZT5AWiax6yN8ms3X0OWU5LrUauZ32qD AB/0mKQtaOuXuW6ns1GD58S7 -----END CERTIFICATE-----Generated at Thu Jan 29 19:23:57 2026 by rpki-client