This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer (raw, json) Hash identifier: nqHE3XMRONC/rQFMqibdVRDFqmglgPz8s/XRKmtbhyo= Subject key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791122611F1D29BC990FF93944AE80D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203951 IP: 185.119.4.0/22 IP: 2a06:9700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:22:61:1f:1d:29:bc:99:0f:f9:39:44:ae:80:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:f3:30:1d:e9:eb:20:34:cb:b8:ef:ea:32: c8:a7:b8:20:a3:0f:13:a9:05:1d:a3:ca:33:ed:83: 98:79:5d:5c:c2:3f:e5:57:95:3f:f1:0b:1f:05:65: 75:2f:c0:2b:5a:5a:2b:fe:e1:cb:92:93:48:fd:41: b6:ba:6e:4e:2a:92:db:55:3e:94:d4:23:2d:36:72: 9f:a4:e2:3c:bc:eb:f2:d6:f1:c9:20:3d:51:57:f2: f2:8d:f1:77:8e:16:a9:05:1f:f3:32:da:35:f8:f9: 63:31:b5:e4:ea:68:48:95:33:56:ea:0d:f2:64:6d: 82:31:f3:78:bb:7b:aa:92:72:25:40:6b:98:6e:1d: a3:e0:31:83:55:7c:46:f0:5d:51:3e:74:5f:3d:8e: 37:a7:59:01:2a:5e:8e:bd:40:3b:d4:a5:3d:96:20: bb:d8:78:77:e8:b5:09:39:38:a0:75:07:9f:cc:b4: 19:0c:4f:4d:1a:99:2e:24:0c:a4:fd:61:a6:b4:25: 67:d6:eb:84:26:f9:4b:06:87:5d:d2:50:92:66:d9: 41:1d:39:79:45:a5:17:f4:45:65:90:c7:57:25:57: ad:b3:cb:22:d0:51:58:93:7c:12:68:69:ff:bb:7b: b2:d5:61:72:e6:78:8f:43:6c:de:f4:bf:df:25:44: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.4.0/22 IPv6: 2a06:9700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203951 Signature Algorithm: sha256WithRSAEncryption 6f:90:7f:d1:1d:b1:05:5d:22:6f:36:5e:59:27:ef:10:e1:92: 96:9c:15:3f:29:d7:02:52:57:99:09:66:2c:4c:05:11:66:28: 6c:c0:8b:d6:cd:be:81:a6:d6:c8:1f:1a:ec:46:59:00:ca:76: 5c:ae:7b:4d:4a:c4:6d:e7:59:9e:9d:c6:6f:22:c1:b2:40:5c: 48:ea:7f:75:07:7a:bf:25:bd:a0:ce:09:23:4e:99:51:09:45: d4:2e:2d:35:f5:02:7f:76:66:49:88:f2:28:99:4d:81:df:73: b7:5d:ee:1a:50:a3:64:8a:ec:b3:7a:7f:8f:24:18:1d:d9:e5: a2:13:c2:09:7a:e7:2d:c8:e8:32:9a:ab:97:22:6b:02:b3:85: e1:57:40:31:cf:36:b0:9b:44:5e:51:d2:e2:47:ca:9e:a4:17: a2:ee:d0:fb:e9:d7:b1:37:1d:bb:e4:a6:31:4a:22:54:19:dd: 7f:2e:be:be:17:70:5b:be:3f:63:0f:6a:9a:b7:85:da:d3:6d: 77:bb:de:f6:0d:44:ce:07:ee:39:8b:0f:b2:3e:b2:a4:a7:63: c6:f6:27:3a:69:c4:e9:e5:70:2c:c1:0f:33:2d:2d:c6:9e:8c: a7:d0:79:e4:02:75:ce:6b:4b:6b:57:9b:c0:fe:ea:b4:6c:02: 46:2c:65:b4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ESJhHx0pvJkP+TlEroDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjRmOTRlNDBjOTllMTlhMzIyM2EyOTM1ZDhlYzk0ZTNkOTI3MGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlbzMB3p6yA0y7jv6jLIp7ggow8T qQUdo8oz7YOYeV1cwj/lV5U/8QsfBWV1L8ArWlor/uHLkpNI/UG2um5OKpLbVT6U 1CMtNnKfpOI8vOvy1vHJID1RV/LyjfF3jhapBR/zMto1+PljMbXk6mhIlTNW6g3y ZG2CMfN4u3uqknIlQGuYbh2j4DGDVXxG8F1RPnRfPY43p1kBKl6OvUA71KU9liC7 2Hh36LUJOTigdQefzLQZDE9NGpkuJAyk/WGmtCVn1uuEJvlLBodd0lCSZtlBHTl5 RaUX9EVlkMdXJVets8si0FFYk3wSaGn/u3uy1WFy5niPQ2ze9L/fJUSwIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFC9PlOQMmeGaMiOik12OyU49knC7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzUwNGEw ZS01Y2EyLTQzMTctYThhZC0wOGUwMGRhNDA0NDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNTA0YTBl LTVjYTItNDMxNy1hOGFkLTA4ZTAwZGE0MDQ0NC8xL0wwLVU1QXlaNFpveUk2S1RY WTdKVGoyU2NMcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXcEMA0EAgACMAcDBQMqBpcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMcrzANBgkqhkiG9w0BAQsFAAOCAQEAb5B/0R2xBV0i bzZeWSfvEOGSlpwVPynXAlJXmQlmLEwFEWYobMCL1s2+gabWyB8a7EZZAMp2XK57 TUrEbedZnp3GbyLBskBcSOp/dQd6vyW9oM4JI06ZUQlF1C4tNfUCf3ZmSYjyKJlN gd9zt13uGlCjZIrss3p/jyQYHdnlohPCCXrnLcjoMpqrlyJrArOF4VdAMc82sJtE XlHS4kfKnqQXou7Q++nXsTcdu+SmMUoiVBndfy6+vhdwW74/Yw9qmreF2tNtd7ve 9g1EzgfuOYsPsj6ypKdjxvYnOmnE6eVwLMEPMy0txp6Mp9B55AJ1zmtLa1ebwP7q tGwCRixltA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:16 2026 by rpki-client