This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer File: 5lluFVL8CliEqIGzUoF9C3MAkIM.cer (raw, json) Hash identifier: ZpEraWF43/e8VkfJpS/YU5V51hR66finQ226/060Ctw= Subject key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36784C2AC53D21A3B07416FC226528 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20849 IP: 80.72.128.0/20 IP: 147.78.92.0/22 IP: 217.22.192.0/20 IP: 2a02:2958::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:78:4c:2a:c5:3d:21:a3:b0:74:16:fc:22:65:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6596e1552fc0a5884a881b352817d0b73009083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:6e:cc:b0:cc:63:c4:a7:8d:e9:66:8e:85: 32:7c:19:67:cf:87:4e:73:19:7d:08:9e:a3:62:0c: 3a:f6:47:cf:9a:0a:97:8e:d5:86:39:fc:e2:8d:5e: 15:37:e8:6e:39:6e:eb:79:66:c6:d4:08:fe:7d:46: 61:4e:1a:67:76:3e:ec:50:d9:de:6a:78:a4:f3:ff: 84:97:25:4f:d9:75:dc:b0:21:1c:b0:af:22:3a:b1: 1e:8b:f2:76:2f:b1:f7:b0:cb:f7:7d:7c:90:80:0c: 74:ad:af:86:ed:ed:85:83:81:d6:d2:16:20:e9:f3: 55:e6:05:03:cf:1e:23:df:21:6b:19:ea:82:bc:92: 97:b3:da:75:c1:4a:aa:a4:76:d4:cf:cb:38:3d:90: e2:a1:5c:fa:ba:1c:0e:04:86:fd:ab:9e:c2:5d:e4: 1c:67:dc:0d:93:0c:10:62:f3:0f:7c:b2:22:74:33: cc:67:96:66:53:30:4b:55:ba:49:86:29:9a:e0:b7: 8e:c5:50:c1:04:a5:26:7c:10:3b:63:2a:b1:42:65: 28:ec:da:d5:a6:33:23:fd:50:b7:d3:f7:01:81:49: e0:86:e2:82:ff:f1:03:d6:df:a7:3e:51:9c:c9:00: 9d:3d:85:ba:95:f3:83:76:2e:6e:e7:99:85:b0:6d: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.72.128.0/20 147.78.92.0/22 217.22.192.0/20 IPv6: 2a02:2958::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20849 Signature Algorithm: sha256WithRSAEncryption 16:e4:14:66:0a:af:52:43:5b:0c:7b:b8:b7:1a:36:0d:71:af: 5a:ab:8f:c3:6c:b2:18:35:f0:cd:82:fd:d1:1b:2c:dd:bc:18: 3a:a1:db:a6:e4:19:67:52:fd:60:dc:16:1a:c2:4f:5a:14:0e: 17:08:59:d5:8e:d5:14:49:22:4b:5b:c6:44:06:33:3b:6b:f9: ea:9d:14:f8:fb:97:39:22:fb:04:41:24:ac:36:55:39:8e:e2: 12:da:41:8f:89:58:0d:92:21:c2:14:c2:2d:70:56:9b:f6:ff: 64:9d:ff:15:a0:f8:dc:44:54:74:ce:62:ab:a8:13:37:bb:16: 35:b8:20:45:37:c5:7f:6f:6c:32:fa:27:18:23:19:9f:3d:ab: 18:35:e3:a1:4f:a1:75:76:c9:5c:0f:f6:c3:20:a3:b0:d9:9c: 4d:77:8b:46:fa:54:50:a5:9f:b4:27:8f:a5:4c:f7:99:13:d4: 51:ff:00:57:4a:a6:78:9f:a7:9d:ef:59:24:dd:1a:eb:10:ea: 01:8a:17:61:c3:3a:63:8e:fc:55:32:f1:43:84:50:72:00:0d: 54:c3:07:d2:7c:86:eb:18:29:53:6a:f1:10:a6:27:59:15:86: 4b:c2:9b:62:26:cc:ef:f1:42:69:ed:73:8c:27:c9:67:4d:40: d2:c7:88:ba -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt7NnhMKsU9IaOwdBb8ImUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjU5NmUxNTUyZmMwYTU4ODRhODgxYjM1MjgxN2QwYjczMDA5MDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9luzLDMY8SnjelmjoUyfBlnz4dO cxl9CJ6jYgw69kfPmgqXjtWGOfzijV4VN+huOW7reWbG1Aj+fUZhThpndj7sUNne anik8/+ElyVP2XXcsCEcsK8iOrEei/J2L7H3sMv3fXyQgAx0ra+G7e2Fg4HW0hYg 6fNV5gUDzx4j3yFrGeqCvJKXs9p1wUqqpHbUz8s4PZDioVz6uhwOBIb9q57CXeQc Z9wNkwwQYvMPfLIidDPMZ5ZmUzBLVbpJhima4LeOxVDBBKUmfBA7YyqxQmUo7NrV pjMj/VC30/cBgUnghuKC//ED1t+nPlGcyQCdPYW6lfODdi5u55mFsG2JcQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFOZZbhVS/ApYhKiBs1KBfQtzAJCDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzBjYTI4 Ny0zZWVmLTQxNGMtODgzYS0wODE2OTEyNTdhMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvMGNhMjg3 LTNlZWYtNDE0Yy04ODNhLTA4MTY5MTI1N2EyNi8xLzVsbHVGVkw4Q2xpRXFJR3pV b0Y5QzNNQWtJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEUEiAAwQCk05cAwQE2RbAMA0EAgACMAcDBQAq AilYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlFxMA0GCSqGSIb3DQEBCwUAA4IB AQAW5BRmCq9SQ1sMe7i3GjYNca9aq4/DbLIYNfDNgv3RGyzdvBg6odum5BlnUv1g 3BYawk9aFA4XCFnVjtUUSSJLW8ZEBjM7a/nqnRT4+5c5IvsEQSSsNlU5juIS2kGP iVgNkiHCFMItcFab9v9knf8VoPjcRFR0zmKrqBM3uxY1uCBFN8V/b2wy+icYIxmf PasYNeOhT6F1dslcD/bDIKOw2ZxNd4tG+lRQpZ+0J4+lTPeZE9RR/wBXSqZ4n6ed 71kk3RrrEOoBihdhwzpjjvxVMvFDhFByAA1UwwfSfIbrGClTavEQpidZFYZLwpti Jszv8UJp7XOMJ8lnTUDSx4i6 -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:36 2026 by rpki-client