This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer (raw, json) Hash identifier: Fisx4BP/9fx5V8ypN9czdF2du/mJipOPpHGA8oTtbuA= Subject key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B9306CBC76B34A64DC54D13B883AA090B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 11:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 103.27.156.0/22 IP: 103.31.76.0/22 IP: 103.110.64.0/22 IP: 103.146.118.0/23 IP: 195.226.82.0 -- 195.226.95.255 IP: 2a14:8200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:06:cb:c7:6b:34:a6:4d:c5:4d:13:b8:83:aa:09:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 11:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:5e:db:06:ec:85:a9:85:db:83:ef:8b:af: 49:28:9a:18:4b:53:f9:04:ab:ba:4f:54:e7:40:46: dd:92:39:63:7a:45:7c:65:87:5e:f3:d3:9b:fa:94: ab:9d:fa:49:62:78:8b:86:04:76:51:3f:ff:dc:ae: 49:2c:b5:bc:7b:1d:e5:14:08:21:e9:0c:de:03:a5: 2a:8e:ed:6d:c8:a9:25:d9:c3:9a:91:66:3f:6a:42: c0:29:21:2d:c7:0d:e2:4d:ea:40:e3:ee:e3:6c:48: 5b:49:78:f5:12:9f:0c:79:6b:57:31:e5:37:8e:33: 34:9c:8a:08:26:eb:e6:f7:38:1d:74:88:3e:4f:2f: 23:e4:73:f8:66:ae:6b:d9:9d:cf:d7:e1:c6:6e:ca: 3f:56:23:44:8b:4e:ea:f4:ae:d6:96:e6:64:70:eb: fa:dd:1f:61:e0:3e:ab:49:a5:ee:3b:4c:31:4c:57: 29:b9:5f:38:a5:a1:29:34:8d:8b:8c:a9:6d:02:51: 04:f6:5f:53:34:08:b8:5c:41:8a:bd:52:ee:87:70: a1:f5:2d:b7:4c:46:fa:ab:64:2d:d5:66:4e:59:74: 6d:b8:e8:53:36:e4:8d:87:4d:fe:46:7b:24:55:7a: 71:21:41:ed:af:6e:67:3f:4c:0f:af:57:67:4d:dd: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.27.156.0/22 103.31.76.0/22 103.110.64.0/22 103.146.118.0/23 195.226.82.0-195.226.95.255 IPv6: 2a14:8200::/29 Signature Algorithm: sha256WithRSAEncryption ab:4f:d6:50:2e:9c:82:7b:e1:68:1c:3e:5e:13:1c:ef:4d:bc: 0f:3c:37:d0:0b:2a:9a:15:a1:1f:f8:8a:cb:10:21:36:30:11: cc:50:e1:62:e3:06:79:45:da:d9:20:70:94:34:90:4d:aa:83: a7:9a:08:ce:d2:70:f0:64:fc:25:92:a6:24:32:15:a3:28:d5: 6e:23:44:c9:55:50:2c:94:ab:dd:97:ab:a3:35:48:67:2a:3e: 0b:3a:a6:ac:c7:d9:97:3f:d3:50:16:26:ff:82:68:db:30:2b: 23:ca:45:b6:6e:d2:ba:05:55:13:ae:bc:ae:c8:c2:d4:91:1f: 81:ef:e4:76:50:65:9f:fb:7a:1b:7c:3f:25:6b:f4:c6:38:45: 91:a5:35:87:30:51:7e:5f:cb:97:29:25:1c:84:09:bd:6d:e7: b8:d2:63:88:7e:1d:71:54:30:86:cf:49:87:b5:d9:10:47:94: 42:ec:0e:87:11:3c:d5:38:68:01:2d:34:55:7f:56:bd:f1:36: bf:5a:fb:5c:e5:86:59:91:8c:49:51:a3:0a:15:18:0b:f7:34: 45:27:bb:8f:19:34:c7:a7:85:c0:16:db:0c:18:da:ae:3a:9d: 61:a6:cc:cd:b9:23:eb:6d:9e:76:d0:5f:7f:56:9d:64:79:d6: 02:9b:03:45 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZuTBsvHazSmTcVNE7iDqgkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MTExNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGI5NTMzMDczNGM5YWFmNjZkMTFiY2QyYmVkZDM4MGY0MTBmOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr9e2wbshamF24Pvi69JKJoYS1P5 BKu6T1TnQEbdkjljekV8ZYde89Ob+pSrnfpJYniLhgR2UT//3K5JLLW8ex3lFAgh 6QzeA6Uqju1tyKkl2cOakWY/akLAKSEtxw3iTepA4+7jbEhbSXj1Ep8MeWtXMeU3 jjM0nIoIJuvm9zgddIg+Ty8j5HP4Zq5r2Z3P1+HGbso/ViNEi07q9K7WluZkcOv6 3R9h4D6rSaXuO0wxTFcpuV84paEpNI2LjKltAlEE9l9TNAi4XEGKvVLuh3Ch9S23 TEb6q2Qt1WZOWXRtuOhTNuSNh03+RnskVXpxIUHtr25nP0wPr1dnTd12QwIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFNS5UzBzTJqvZtEbzSvt04D0EPk/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzE1ZDI3 MS0wNWNkLTQ2MWUtYTdiNi00MzAxM2IyOGQ5ZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMTVkMjcx LTA1Y2QtNDYxZS1hN2I2LTQzMDEzYjI4ZDlkNi8xLzFMbFRNSE5NbXE5bTBSdk5L LTNUZ1BRUS1UOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQCZxucAwQCZx9MAwQCZ25AAwQBZ5J2MAwDBAHD 4lIDBAXD4kAwDQQCAAIwBwMFAyoUggAwDQYJKoZIhvcNAQELBQADggEBAKtP1lAu nIJ74WgcPl4THO9NvA88N9ALKpoVoR/4issQITYwEcxQ4WLjBnlF2tkgcJQ0kE2q g6eaCM7ScPBk/CWSpiQyFaMo1W4jRMlVUCyUq92Xq6M1SGcqPgs6pqzH2Zc/01AW Jv+CaNswKyPKRbZu0roFVROuvK7IwtSRH4Hv5HZQZZ/7eht8PyVr9MY4RZGlNYcw UX5fy5cpJRyECb1t57jSY4h+HXFUMIbPSYe12RBHlELsDocRPNU4aAEtNFV/Vr3x Nr9a+1zlhlmRjElRowoVGAv3NEUnu48ZNMenhcAW2wwY2q46nWGmzM25I+ttnnbQ X39WnWR51gKbA0U= -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:31 2026 by rpki-client