This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L1OI95ZqevrAc2x57WA7K3iGVsQ.cer File: L1OI95ZqevrAc2x57WA7K3iGVsQ.cer (raw, json) Hash identifier: EBTyJmVm/weMnl0rif9zlXc8NNTfqk1sEzmC+02c6gg= Subject key identifier: 2F:53:88:F7:96:6A:7A:FA:C0:73:6C:79:ED:60:3B:2B:78:86:56:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B93902020AF1F77AE802E955ED4978CEB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 13:47:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207043 AS: 209413 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:90:20:20:af:1f:77:ae:80:2e:95:5e:d4:97:8c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 13:47:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f5388f7966a7afac0736c79ed603b2b788656c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:3a:29:ea:9d:92:c4:e1:44:e2:82:e5:a4: 09:6a:d5:e4:ac:e4:9e:99:a4:93:8b:e6:c0:e8:57: e7:19:26:ac:75:a7:7c:84:fc:23:c7:c4:c7:bb:e8: ce:63:cd:a6:5e:d5:4b:47:d8:01:69:a6:38:04:30: be:a6:d5:15:b3:83:dc:f9:52:8c:db:23:80:b5:9b: 5b:a8:02:c1:fe:f6:73:8f:cc:af:f0:15:29:21:43: 93:67:b8:9d:9f:f9:ab:35:fd:66:78:df:12:27:0a: c1:0c:a8:30:ca:6d:27:88:aa:1c:5b:7c:5d:b7:f1: d3:be:d7:24:64:03:37:c8:ef:86:71:81:9f:11:05: 18:60:a4:6a:89:7b:91:77:db:99:60:3c:08:77:5e: b2:91:b6:a5:3b:94:f2:1b:fb:08:51:be:23:7f:a2: 34:55:c2:69:88:e2:50:81:4d:64:16:a7:d6:0c:3b: 17:0b:72:d7:3c:c0:a4:2d:5e:1a:f3:c0:2b:31:18: ab:ac:34:53:84:dd:ee:9a:da:26:11:3e:1f:e1:c1: 8e:f6:9c:42:ce:7d:94:7a:d4:8c:cf:c0:50:1b:44: 7d:bd:8e:fc:bc:e6:90:4c:6b:b2:23:53:d9:72:94: d5:82:48:51:1e:0a:b2:cd:c6:a9:f7:e0:fb:7b:df: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:88:F7:96:6A:7A:FA:C0:73:6C:79:ED:60:3B:2B:78:86:56:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207043 209413 Signature Algorithm: sha256WithRSAEncryption 2f:b3:48:dc:17:54:30:22:53:0b:af:c1:d9:bb:1a:9f:b0:7e: 63:a0:4b:85:01:ec:29:b0:5d:aa:98:44:d1:dc:55:05:70:f1: 97:02:32:3d:17:8d:52:3e:db:d6:54:8d:ad:84:61:21:c7:12: f6:78:da:46:68:7a:8a:99:61:cb:33:22:28:5f:09:53:52:a1: b4:9a:38:63:37:30:1e:1f:11:f1:55:db:b1:18:b0:53:6b:a6: a8:74:d4:ab:1d:10:90:81:1a:26:74:17:86:93:8b:a1:b4:87: de:b2:17:f5:11:f1:b0:92:5e:fe:80:40:0f:c4:85:2f:dd:38: 75:a0:e2:1c:5b:32:e1:c9:c1:54:e3:57:82:59:00:15:47:9c: 2a:38:55:4a:db:c9:86:af:b8:37:cf:95:5f:90:0c:b7:a1:4a: ef:2c:b7:a7:6c:dc:39:65:f3:e8:6e:8e:3b:08:28:97:4b:bf: 00:6b:7d:03:24:9c:02:b8:70:ef:68:cd:da:40:ca:29:a1:f3: b7:8a:d3:9f:49:69:ba:6a:e4:ff:ff:a2:8b:08:5a:03:71:29: c7:d3:4d:7a:a9:31:01:5b:07:4d:b3:da:e1:b4:c0:73:89:f1: c5:89:d3:62:c1:56:b5:07:d5:51:2f:ad:07:31:d5:2e:b2:47: 98:07:e1:aa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZuTkCAgrx93roAulV7Ul4zrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MTM0NzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjUzODhmNzk2NmE3YWZhYzA3MzZjNzllZDYwM2IyYjc4ODY1NmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pw6KeqdksThROKC5aQJatXkrOSe maSTi+bA6FfnGSasdad8hPwjx8THu+jOY82mXtVLR9gBaaY4BDC+ptUVs4Pc+VKM 2yOAtZtbqALB/vZzj8yv8BUpIUOTZ7idn/mrNf1meN8SJwrBDKgwym0niKocW3xd t/HTvtckZAM3yO+GcYGfEQUYYKRqiXuRd9uZYDwId16ykbalO5TyG/sIUb4jf6I0 VcJpiOJQgU1kFqfWDDsXC3LXPMCkLV4a88ArMRirrDRThN3umtomET4f4cGO9pxC zn2UetSMz8BQG0R9vY78vOaQTGuyI1PZcpTVgkhRHgqyzcap9+D7e9+apwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFC9TiPeWanr6wHNsee1gOyt4hlbEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzIyNWY0 Ni1jNDU2LTRmNjUtYTNkYi00MTkwYjE4NDYwYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvMjI1ZjQ2 LWM0NTYtNGY2NS1hM2RiLTQxOTBiMTg0NjBhNy8xL0wxT0k5NVpxZXZyQWMyeDU3 V0E3SzNpR1ZzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMowwIDAzIFMA0GCSqGSIb3DQEBCwUAA4IBAQAvs0jc F1QwIlMLr8HZuxqfsH5joEuFAewpsF2qmETR3FUFcPGXAjI9F41SPtvWVI2thGEh xxL2eNpGaHqKmWHLMyIoXwlTUqG0mjhjNzAeHxHxVduxGLBTa6aodNSrHRCQgRom dBeGk4uhtIfeshf1EfGwkl7+gEAPxIUv3Th1oOIcWzLhycFU41eCWQAVR5wqOFVK 28mGr7g3z5VfkAy3oUrvLLenbNw5ZfPobo47CCiXS78Aa30DJJwCuHDvaM3aQMop ofO3itOfSWm6auT//6KLCFoDcSnH0016qTEBWwdNs9rhtMBzifHFidNiwVa1B9VR L60HMdUuskeYB+Gq -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:03 2026 by rpki-client