This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer File: 1l15-Y5wsirX12oghap7hRqhhIM.cer (raw, json) Hash identifier: p5ZkxBXNjp/Ex8r0QeW0MT9ZkC4PbJauIqrUuNKILHs= Subject key identifier: D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3108DA653432777DD5EECBF7F1487898 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 10:37:02 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 212984 IP: 176.113.46.0/24 IP: 194.49.96.0/22 IP: 2a0c:91c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:08:da:65:34:32:77:7d:d5:ee:cb:f7:f1:48:78:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 10:37:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a3:e3:ef:08:59:ab:90:0a:07:44:65:f0:a6: fc:58:1e:6c:12:42:2a:1d:db:6d:79:5b:0e:7c:ce: 26:4d:c1:22:b9:16:1c:e0:f0:95:63:59:93:7a:1f: dd:8b:7e:cf:0c:f4:39:0a:69:c3:dc:2b:3f:fe:88: 58:7e:14:b8:4c:68:85:2f:19:1f:52:b4:1e:0f:fa: 28:fd:29:96:ab:8a:68:1a:03:22:53:5f:30:c8:f1: 89:32:de:d7:4d:39:34:99:b6:70:53:d7:7a:cc:5a: ab:d0:59:24:78:b0:9b:12:a4:c3:4e:e8:36:76:e3: 7c:73:53:db:b8:cd:8e:c8:7c:93:89:17:c9:37:c8: 87:0b:19:af:2f:87:60:e8:6b:53:2e:d9:af:a8:39: 7c:30:ef:b9:94:f8:ae:29:42:70:39:ee:c2:cf:49: a4:c0:ec:04:31:42:2b:f1:b6:c6:a3:6a:37:ca:f4: 4d:e1:14:28:91:9b:ef:c5:13:74:c5:f3:f1:a5:ea: 6d:f7:ca:d0:82:c0:20:9f:90:ca:b3:5e:15:c6:ed: 79:75:4e:31:dc:ab:92:a0:ca:8c:45:93:68:e1:90: 6e:a0:93:bc:74:df:87:5f:12:81:cd:4c:4b:b5:15: e0:d0:4f:c8:26:86:f0:71:48:7d:73:67:86:e5:fc: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.46.0/24 194.49.96.0/22 IPv6: 2a0c:91c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212984 Signature Algorithm: sha256WithRSAEncryption 44:83:a0:f1:e3:76:89:d8:c3:d4:00:66:54:56:37:b3:ee:7e: a5:36:19:1f:ad:79:b9:d1:0e:47:b0:7a:09:a6:98:e5:07:27: 6f:c6:6f:91:24:59:10:3b:12:d5:42:36:f4:fe:31:e4:81:fd: d2:a6:4d:a1:b6:43:e9:d0:8d:6f:6b:17:87:e4:79:4c:21:07: 6b:76:29:53:50:d7:23:b2:a2:01:d0:83:9d:d6:ea:b0:2c:b6: c2:0b:64:58:d8:97:40:ea:13:b6:41:0e:e1:8c:73:ec:12:00: 1f:61:27:7c:bd:8f:75:4c:7a:96:25:f7:f1:eb:fc:a2:9b:d8: 66:d4:a9:c7:81:5e:49:ae:bf:20:1f:ae:99:5f:3a:9b:6c:f4: de:30:03:2c:ec:f3:2e:87:bf:c7:d5:a7:c4:33:f2:84:ee:da: 1d:7e:5b:8c:f7:a9:fa:18:5f:7a:b7:4a:0d:85:0c:d8:77:df: ec:28:95:45:0f:04:c4:4f:a4:8f:41:00:62:c2:06:82:7a:5a: 44:cb:e8:56:97:6b:72:a5:d4:fd:1a:1d:b9:12:dc:bb:d3:4c: e6:d3:ad:e2:67:e6:e0:9a:9e:7f:4d:a4:d4:e3:98:a1:6a:bc: 43:aa:57:b0:4b:ee:7e:74:3c:7e:be:36:e1:a5:c4:11:64:d6: b9:00:f7:0c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZsxCNplNDJ3fdXuy/fxSHiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTAzNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjVkNzlmOThlNzBiMjJhZDdkNzZhMjA4NWFhN2I4NTFhYTE4NDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKPj7whZq5AKB0Rl8Kb8WB5sEkIq HdtteVsOfM4mTcEiuRYc4PCVY1mTeh/di37PDPQ5CmnD3Cs//ohYfhS4TGiFLxkf UrQeD/oo/SmWq4poGgMiU18wyPGJMt7XTTk0mbZwU9d6zFqr0FkkeLCbEqTDTug2 duN8c1PbuM2OyHyTiRfJN8iHCxmvL4dg6GtTLtmvqDl8MO+5lPiuKUJwOe7Cz0mk wOwEMUIr8bbGo2o3yvRN4RQokZvvxRN0xfPxpept98rQgsAgn5DKs14Vxu15dU4x 3KuSoMqMRZNo4ZBuoJO8dN+HXxKBzUxLtRXg0E/IJobwcUh9c2eG5fwWUwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNZdefmOcLIq19dqIIWqe4UaoYSDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzkwOGZi MS1hZjI5LTQxY2UtYjFmOC0xNzEyM2ZlMzdiZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvOTA4ZmIx LWFmMjktNDFjZS1iMWY4LTE3MTIzZmUzN2JlOS8xLzFsMTUtWTV3c2lyWDEyb2do YXA3aFJxaGhJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAsHEuAwQCwjFgMA0EAgACMAcDBQMqDJHAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/+DANBgkqhkiG9w0BAQsFAAOCAQEARIOg 8eN2idjD1ABmVFY3s+5+pTYZH615udEOR7B6CaaY5Qcnb8ZvkSRZEDsS1UI29P4x 5IH90qZNobZD6dCNb2sXh+R5TCEHa3YpU1DXI7KiAdCDndbqsCy2wgtkWNiXQOoT tkEO4Yxz7BIAH2EnfL2PdUx6liX38ev8opvYZtSpx4FeSa6/IB+umV86m2z03jAD LOzzLoe/x9WnxDPyhO7aHX5bjPep+hhferdKDYUM2Hff7CiVRQ8ExE+kj0EAYsIG gnpaRMvoVpdrcqXU/RoduRLcu9NM5tOt4mfm4Jqef02k1OOYoWq8Q6pXsEvufnQ8 fr424aXEEWTWuQD3DA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:47 2025 by rpki-client