This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer File: nldpljiOlLjHqyDv-yO9Eb7LQQg.cer (raw, json) Hash identifier: DwzSxa3uyVPW/g8tL47q5c1gl8iHHXcLsR7JlFlv0NQ= Subject key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783555DA74835BBECBB9CB0C23AA7760 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24676 AS: 31103 IP: 62.141.48.0/20 IP: 84.19.160.0/19 IP: 87.118.64.0/18 IP: 95.169.160.0/19 IP: 217.114.208.0/20 IP: 2001:1b60::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:55:da:74:83:5b:be:cb:b9:cb:0c:23:aa:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e576996388e94b8c7ab20effb23bd11becb4108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:18:80:79:ef:f1:75:11:20:8e:cb:7a:8a: 80:df:3a:a7:ed:2d:1b:79:47:de:87:cd:b0:3f:81: cd:b4:02:a7:b5:13:02:62:9e:5c:c2:98:37:31:62: 97:32:4e:c5:15:87:16:3e:a2:6e:4a:f9:08:68:a1: a5:7e:fd:bf:6b:f3:94:dc:c0:04:7d:93:13:de:cd: de:f0:60:11:e0:2f:ec:7b:ca:80:38:3d:8a:b9:04: e8:59:be:42:6e:7a:3d:de:18:c2:0e:cd:51:f2:e8: 35:63:54:a4:a0:3f:1c:d9:98:3a:30:2d:6d:ab:92: 41:f5:46:94:bb:f8:88:71:3a:0e:77:2c:8e:43:7f: 26:2f:6b:1e:00:07:5c:c4:e0:f2:5d:1f:08:99:ce: 6a:8a:4c:fc:6b:b8:e4:e1:59:09:65:85:f7:d5:8c: 1c:51:97:67:12:94:a2:b1:eb:35:77:ee:b7:c8:ab: 4f:5d:25:ca:35:c6:8f:49:aa:d2:1b:cd:7b:88:d9: c1:cf:e2:96:b2:68:87:7f:bf:d8:d6:51:42:f5:74: 5e:e3:79:05:15:40:9f:80:65:38:67:2b:ef:c7:ca: b5:1b:4f:11:14:de:69:e5:b7:01:29:f8:26:31:51: c1:6f:bd:d0:c6:1c:07:e6:96:2f:14:08:5c:3a:09: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.141.48.0/20 84.19.160.0/19 87.118.64.0/18 95.169.160.0/19 217.114.208.0/20 IPv6: 2001:1b60::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24676 31103 Signature Algorithm: sha256WithRSAEncryption 33:7b:31:58:ce:fc:a1:c7:b8:91:c0:47:71:dc:ab:d8:56:91: 68:0e:42:dd:4c:e8:bc:76:35:fc:c4:7c:c6:bf:b1:3e:bc:cc: dc:a0:ce:db:50:7d:28:4e:47:8f:35:dd:33:05:cb:0d:3c:41: 22:8c:f0:17:16:3c:73:c1:c0:cd:d0:93:c3:79:74:6f:fc:c3: ec:e8:f1:2e:02:66:3f:19:24:d9:c9:23:8a:94:6a:c6:fd:45: b1:cb:76:e8:38:0b:b8:5a:93:fc:fc:6d:95:70:80:00:da:83: 55:55:6b:01:a4:40:0b:dc:6b:4f:35:d4:1a:35:fc:4c:bd:16: 46:94:ce:a7:1a:d8:9d:8b:33:49:4a:bb:47:09:a3:f2:50:5e: 4a:35:90:7d:7e:df:1c:1c:af:c7:9f:18:93:6a:88:93:5d:f6: ef:16:82:60:5c:3e:d6:c8:7d:d5:af:ee:97:9f:cb:2f:ce:31: be:c2:05:a6:76:cb:7f:87:30:d2:1e:ed:f4:2d:4e:14:49:15: 69:b0:c3:8b:dc:0d:fd:c7:4c:f5:8a:bd:e4:5c:06:72:5a:e5: 93:c4:fd:ba:e7:01:16:1f:a7:41:e9:7f:9f:5a:b3:2c:94:43: ff:e4:de:12:78:c4:9d:82:ca:4f:4d:13:61:47:38:cd:d0:15: c8:dd:54:b8 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISAZt4NVXadINbvsu5ywwjqndgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTU3Njk5NjM4OGU5NGI4YzdhYjIwZWZmYjIzYmQxMWJlY2I0MTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKYYgHnv8XURII7LeoqA3zqn7S0b eUfeh82wP4HNtAKntRMCYp5cwpg3MWKXMk7FFYcWPqJuSvkIaKGlfv2/a/OU3MAE fZMT3s3e8GAR4C/se8qAOD2KuQToWb5Cbno93hjCDs1R8ug1Y1SkoD8c2Zg6MC1t q5JB9UaUu/iIcToOdyyOQ38mL2seAAdcxODyXR8Imc5qikz8a7jk4VkJZYX31Ywc UZdnEpSises1d+63yKtPXSXKNcaPSarSG817iNnBz+KWsmiHf7/Y1lFC9XRe43kF FUCfgGU4Zyvvx8q1G08RFN5p5bcBKfgmMVHBb73QxhwH5pYvFAhcOgmp9QIDAQAB o4IC5jCCAuIwHQYDVR0OBBYEFJ5XaZY4jpS4x6sg7/sjvRG+y0EIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1ZTY0 MDMwLTJmMjgtNDJjOS1iMDA0LTM1NGJiMjhmNjEyMy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVl NjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvOUU1NzY5OTYzODhF OTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgME BD6NMAMEBVQToAMEBld2QAMEBV+poAMEBNly0DANBAIAAjAHAwUDIAEbYDAdBggr BgEFBQcBCAEB/wQOMAygCjAIAgJgZAICeX8wDQYJKoZIhvcNAQELBQADggEBADN7 MVjO/KHHuJHAR3Hcq9hWkWgOQt1M6Lx2NfzEfMa/sT68zNygzttQfShOR4813TMF yw08QSKM8BcWPHPBwM3Qk8N5dG/8w+zo8S4CZj8ZJNnJI4qUasb9RbHLdug4C7ha k/z8bZVwgADag1VVawGkQAvca0811Bo1/Ey9FkaUzqca2J2LM0lKu0cJo/JQXko1 kH1+3xwcr8efGJNqiJNd9u8WgmBcPtbIfdWv7pefyy/OMb7CBaZ2y3+HMNIe7fQt ThRJFWmww4vcDf3HTPWKveRcBnJa5ZPE/brnARYfp0Hpf59asyyUQ//k3hJ4xJ2C yk9NE2FHOM3QFcjdVLg= -----END CERTIFICATE-----Generated at Wed Jan 21 04:42:07 2026 by rpki-client