This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer File: npTVvz231nNNzxvmItX97i_sO48.cer (raw, json) Hash identifier: h/yBNJmestBf9JWsecbEGMDNjnAZm9cRswQaePTrtlk= Subject key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F852E012A646D429A3CEA98FC8FC3FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206292 IP: 2001:67c:994::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2e:01:2a:64:6d:42:9a:3c:ea:98:fc:8f:c3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:da:88:ec:42:46:2c:3a:37:45:bb:06:36: 09:84:78:85:6f:27:56:e2:ff:e6:cb:f6:b2:03:26: 81:2d:78:a1:74:da:3c:b7:ab:76:4f:a7:39:11:7b: a6:a3:00:f1:7f:44:d7:57:c9:59:a0:f3:cc:49:7e: bd:4e:c7:2b:2f:8a:5b:a6:e2:36:d0:e2:c1:48:14: 7c:da:b2:26:c3:0e:70:50:39:3c:52:ba:04:46:8a: b2:66:75:21:bd:be:e3:87:e6:24:d5:ec:9f:71:1c: 16:83:e2:c9:9b:63:97:5b:ce:09:7c:35:5a:e5:e2: 03:cf:fd:96:98:20:33:0f:32:1c:39:ec:93:1d:7b: 2b:b5:92:16:0d:90:8b:8e:21:ed:c3:93:41:dd:8f: 6a:09:48:2c:eb:b0:bc:6a:e0:29:0a:d0:b6:da:64: 46:25:ed:85:0f:fa:34:23:e7:42:06:6e:da:12:27: 8c:81:28:56:53:2a:a6:2d:81:8d:6f:6d:16:87:53: 6a:b2:9c:61:26:a0:20:c7:b9:3c:d0:07:75:f3:6b: b7:ae:0e:64:75:5a:d8:da:17:e9:0d:a8:6a:fc:b2: 5c:bf:74:6c:50:23:cf:09:68:4b:4b:54:fe:5d:62: 93:4c:35:74:a5:32:4c:e8:fd:3f:0a:b1:02:ca:a5: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:994::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206292 Signature Algorithm: sha256WithRSAEncryption 70:78:ed:ba:ce:c4:0b:e6:3a:1b:b6:8b:2c:4e:4c:e7:3b:c4: 62:2a:6c:79:00:e0:1c:54:dd:a0:1b:25:18:7a:35:1e:56:a1: 6e:5f:05:fb:01:71:f8:73:02:81:6a:34:37:66:37:29:85:8f: 7f:85:41:27:59:12:92:a2:ef:ee:60:4d:d1:ba:3b:7a:16:ba: 9a:ec:c3:5b:ef:76:99:16:e1:ef:79:d4:a4:ca:b9:8f:dc:e1: 28:82:17:c9:08:0d:b4:a8:b3:09:ca:b5:df:30:70:de:d7:e7: b7:c3:13:af:a4:2d:1a:0e:29:de:c8:ea:20:92:29:d7:30:1c: 74:10:9d:69:41:6b:96:c4:a0:b6:bc:b3:81:b8:29:71:3e:b6: 38:4f:9f:52:ac:47:8b:25:b5:37:89:20:22:2f:5d:4f:1d:d5: d3:65:6c:b2:66:c3:b9:57:ff:fa:f2:bf:b3:16:95:43:9c:4c: be:db:45:c3:10:83:8d:68:3d:ed:7c:0f:ad:96:98:8f:b8:1e: ff:93:bb:67:df:62:2a:f8:13:32:19:c9:ee:bc:38:bf:8e:a3: 42:71:45:b7:1c:1c:c3:04:20:ac:f1:6e:7c:7f:f6:22:e7:67: 0e:b5:9f:27:8b:d4:95:d8:e4:82:4c:08:eb:0d:5c:e1:a8:61: cd:10:04:4d -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/hS4BKmRtQpo86pj8j8P8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTk0ZDViZjNkYjdkNjczNGRjZjFiZTYyMmQ1ZmRlZTJmZWMzYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkobaiOxCRiw6N0W7BjYJhHiFbydW 4v/my/ayAyaBLXihdNo8t6t2T6c5EXumowDxf0TXV8lZoPPMSX69TscrL4pbpuI2 0OLBSBR82rImww5wUDk8UroERoqyZnUhvb7jh+Yk1eyfcRwWg+LJm2OXW84JfDVa 5eIDz/2WmCAzDzIcOeyTHXsrtZIWDZCLjiHtw5NB3Y9qCUgs67C8auApCtC22mRG Je2FD/o0I+dCBm7aEieMgShWUyqmLYGNb20Wh1NqspxhJqAgx7k80Ad182u3rg5k dVrY2hfpDahq/LJcv3RsUCPPCWhLS1T+XWKTTDV0pTJM6P0/CrECyqVcEQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJ6U1b89t9ZzTc8b5iLV/e4v7DuPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzEzODNh YS0xMDhiLTQ2ZWYtYWM5ZS05Y2VlMjNhNjA1NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvMTM4M2Fh LTEwOGItNDZlZi1hYzllLTljZWUyM2E2MDU2Ni8xL25wVFZ2ejIzMW5OTnp4dm1J dFg5N2lfc080OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAmUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMl1DANBgkqhkiG9w0BAQsFAAOCAQEAcHjtus7EC+Y6G7aLLE5M5zvEYips eQDgHFTdoBslGHo1Hlahbl8F+wFx+HMCgWo0N2Y3KYWPf4VBJ1kSkqLv7mBN0bo7 eha6muzDW+92mRbh73nUpMq5j9zhKIIXyQgNtKizCcq13zBw3tfnt8MTr6QtGg4p 3sjqIJIp1zAcdBCdaUFrlsSgtryzgbgpcT62OE+fUqxHiyW1N4kgIi9dTx3V02Vs smbDuVf/+vK/sxaVQ5xMvttFwxCDjWg97XwPrZaYj7ge/5O7Z99iKvgTMhnJ7rw4 v46jQnFFtxwcwwQgrPFufH/2IudnDrWfJ4vUldjkgkwI6w1c4ahhzRAETQ== -----END CERTIFICATE-----Generated at Mon Jan 12 05:54:36 2026 by rpki-client