This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer (raw, json) Hash identifier: BMPT69XMKAVKSjSEPCbhzvmp10qPloktL4o+g7lDw9U= Subject key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A23E85994CC4566C3A6748CC99F01D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42830 IP: 91.193.160.0/22 IP: 176.105.128.0/20 IP: 185.212.164.0/22 IP: 2a0b:78c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3e:85:99:4c:c4:56:6c:3a:67:48:cc:99:f0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f593b254a9c3fac81652502f1c43c2201c16a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:40:b5:97:63:81:25:a2:0e:48:d2:79:27: 30:85:cf:b1:a0:d8:b5:f0:66:db:6b:2b:1a:8f:a5: 2a:e8:10:ab:ab:21:44:02:e7:43:99:a2:4a:e5:ac: 87:66:8d:71:15:55:18:0b:be:f0:1b:34:10:59:84: d1:21:6f:30:fc:4e:58:57:a6:ec:c7:6d:c7:49:8e: 48:65:eb:e5:fd:d7:ba:59:56:31:fa:5d:9d:63:0b: 04:c5:d3:7a:b2:af:a3:00:a9:b9:d9:7e:63:0c:cc: 72:43:8f:99:cd:6f:5a:07:47:f0:ba:3b:97:53:b9: 61:85:d8:85:02:89:2e:72:98:4c:e8:2d:02:0f:2d: 29:a3:29:b7:b3:33:bd:83:28:b8:2f:54:c6:07:2c: 29:9f:cf:47:ee:44:95:2c:31:4d:91:0c:c6:c1:fe: 29:f7:ae:48:57:1e:21:c8:3e:6e:16:a2:70:07:f3: ac:b0:97:59:55:be:dd:60:dc:9a:c8:08:76:f3:51: 9b:93:50:0d:4a:3c:32:b0:95:12:1f:ec:0a:a5:7c: e0:95:44:a2:b8:ed:0f:d6:96:4b:77:63:cd:22:7b: f8:04:1c:d9:c8:d2:ec:36:cc:28:50:6e:55:0a:34: 9a:c7:ee:a0:23:50:fc:53:49:52:26:08:43:1e:4f: ec:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.160.0/22 176.105.128.0/20 185.212.164.0/22 IPv6: 2a0b:78c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42830 Signature Algorithm: sha256WithRSAEncryption 11:9e:73:e8:85:4d:60:41:a9:da:0f:1a:21:97:ec:77:25:8e: 67:eb:d5:1a:98:fa:05:e0:22:d6:0b:b4:68:be:fb:2c:28:4a: 00:06:76:43:7b:2d:4c:2e:3a:a6:f9:41:c1:93:d3:5f:6d:bc: ff:13:73:59:fc:f7:7f:d4:07:f7:09:9d:4b:3b:e2:e7:94:0e: a7:81:a0:94:08:be:c6:4a:ef:73:0d:58:c5:5a:19:8f:ae:46: c7:e8:48:43:f8:e8:14:33:42:81:96:51:66:ee:65:e8:15:18: 80:0a:96:08:50:16:3e:d0:fa:64:47:ac:32:fc:16:55:06:d6: b9:9c:ad:bc:47:99:9a:84:cb:48:34:8a:e4:9e:dc:29:0d:c5: 38:0f:a6:d0:f1:09:76:9c:5e:25:aa:fb:ec:35:91:fa:03:4c: 87:0d:23:21:0f:26:c0:5d:c4:49:b0:ca:e8:f5:69:c0:cf:47: 09:ff:3a:b7:60:27:a8:46:2a:98:2c:4e:f6:68:bc:d3:b5:65: 7b:47:98:1b:33:5c:73:2a:17:11:37:86:47:a2:8b:29:85:e3: 55:92:cb:23:2a:e3:b1:b0:94:ca:90:ae:0a:51:35:b1:0a:06: ab:f8:7e:1e:97:1e:72:d7:69:d3:d9:c4:95:bc:bf:b6:ad:30: 38:e6:d1:db -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4oj6FmUzEVmw6Z0jMmfAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjU5M2IyNTRhOWMzZmFjODE2NTI1MDJmMWM0M2MyMjAxYzE2YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YpAtZdjgSWiDkjSeScwhc+xoNi1 8Gbbaysaj6Uq6BCrqyFEAudDmaJK5ayHZo1xFVUYC77wGzQQWYTRIW8w/E5YV6bs x23HSY5IZevl/de6WVYx+l2dYwsExdN6sq+jAKm52X5jDMxyQ4+ZzW9aB0fwujuX U7lhhdiFAokucphM6C0CDy0poym3szO9gyi4L1TGBywpn89H7kSVLDFNkQzGwf4p 965IVx4hyD5uFqJwB/OssJdZVb7dYNyayAh281Gbk1ANSjwysJUSH+wKpXzglUSi uO0P1pZLd2PNInv4BBzZyNLsNswoUG5VCjSax+6gI1D8U0lSJghDHk/s8wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFC9ZOyVKnD+sgWUlAvHEPCIBwWqFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2VmMzYw OC1hY2Q0LTQ1ZTEtOWQzMi1jM2JiODQ3NjAwY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvZWYzNjA4 LWFjZDQtNDVlMS05ZDMyLWMzYmI4NDc2MDBjZC8xL0wxazdKVXFjUDZ5QlpTVUM4 Y1E4SWdIQmFvVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCW8GgAwQEsGmAAwQCudSkMA0EAgACMAcDBQAq C3jAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCnTjANBgkqhkiG9w0BAQsFAAOC AQEAEZ5z6IVNYEGp2g8aIZfsdyWOZ+vVGpj6BeAi1gu0aL77LChKAAZ2Q3stTC46 pvlBwZPTX228/xNzWfz3f9QH9wmdSzvi55QOp4GglAi+xkrvcw1YxVoZj65Gx+hI Q/joFDNCgZZRZu5l6BUYgAqWCFAWPtD6ZEesMvwWVQbWuZytvEeZmoTLSDSK5J7c KQ3FOA+m0PEJdpxeJar77DWR+gNMhw0jIQ8mwF3ESbDK6PVpwM9HCf86t2AnqEYq mCxO9mi807Vle0eYGzNccyoXETeGR6KLKYXjVZLLIyrjsbCUypCuClE1sQoGq/h+ Hpcectdp09nElby/tq0wOObR2w== -----END CERTIFICATE-----Generated at Sat Feb 7 05:45:31 2026 by rpki-client