This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer File: L4g71OpOPesouJSxkPjgi68G8cw.cer (raw, json) Hash identifier: 2CYdqE6UCjShfbTHLo1Yb6ti7E7LhiuoKejirHsjxgY= Subject key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79109297D47B8A13998641BC82B1196A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212101 IP: 185.230.105.0/24 IP: 2a10:b380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:92:97:d4:7b:8a:13:99:86:41:bc:82:b1:19:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:08:3c:5a:8e:03:04:99:7f:99:98:39:4f: 24:94:61:0a:17:27:00:05:78:3d:3c:38:8a:8a:6a: 2b:10:da:32:4b:1d:96:62:a7:2f:4e:73:1b:c6:b3: 25:c9:e6:46:60:6b:73:2d:eb:f8:28:27:85:13:28: 5b:86:3f:dc:c8:53:ed:d9:57:e7:6d:74:b1:5f:a1: bd:81:a3:bf:a0:ae:4f:c6:c9:e8:c1:38:67:84:68: 20:2c:56:00:31:4e:ce:b4:c5:ee:10:ab:37:29:80: cc:f1:34:34:a2:42:3a:4b:eb:12:13:b1:1a:25:de: b6:f6:3d:b4:00:4f:62:8f:da:8c:25:c9:c1:3e:2d: 37:c2:3d:9b:1b:02:00:97:c3:d4:0e:a9:00:cf:95: 24:84:8a:ff:c5:32:20:b9:0d:26:32:ac:55:a7:85: d7:7c:7a:3a:04:bd:92:b9:f3:e3:90:ec:f8:c8:e0: c3:38:e9:97:62:13:de:e1:60:c7:64:d8:71:57:ba: 5b:a1:f2:b8:f9:f3:b8:62:41:21:32:4e:9f:c4:ea: c5:fa:41:49:55:b1:e4:2c:bd:33:83:16:d9:a4:b1: d8:89:53:5c:68:1b:6c:9c:4a:06:4f:08:2b:5e:41: 6b:b4:3b:d8:dc:51:47:30:bb:aa:ac:2f:02:5e:76: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.105.0/24 IPv6: 2a10:b380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212101 Signature Algorithm: sha256WithRSAEncryption 19:e9:04:fa:78:6a:c5:a5:9b:ec:e0:6b:68:94:45:61:cd:3d: 89:23:e2:4f:59:bd:bb:51:a7:3f:e1:a0:a2:b5:5b:8d:93:5a: e5:78:31:0a:9a:33:e1:e9:f6:57:c7:96:43:03:9b:b7:c2:2f: 67:b8:03:bc:18:ff:7d:fd:2f:f9:94:84:4f:bd:5e:65:51:df: ba:90:fc:ef:29:ff:93:2d:fa:dd:b8:e3:24:33:6b:d3:d5:0c: 0e:a9:fb:ea:b4:28:12:d4:e8:52:29:67:44:eb:96:b0:ef:2f: 95:21:6f:2c:93:db:5c:89:b9:af:17:d4:83:e2:6f:cd:cc:bc: 19:93:2c:74:42:3b:dd:70:32:ac:16:7d:bf:08:fe:e7:44:06: 82:1d:c3:2c:6f:47:35:10:3b:02:22:20:88:2e:87:6a:49:d6: a8:72:7e:d5:11:bf:92:43:76:29:13:46:9b:9e:57:ae:e7:38: dd:49:37:fc:31:e3:f3:65:bd:4a:73:5a:5b:18:a7:cb:cf:72: 37:31:6a:78:6a:47:d7:0b:40:2b:24:16:18:f7:68:0d:15:6c: 8d:de:ae:ef:5a:d6:4e:05:7b:6d:3d:6f:66:31:0e:1a:ea:8a: 3f:1e:a3:23:9d:ee:2f:d8:0e:dd:9d:1a:28:8f:a9:0c:e4:1d: e7:95:7e:46 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EJKX1HuKE5mGQbyCsRlqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjg4M2JkNGVhNGUzZGViMjhiODk0YjE5MGY4ZTA4YmFmMDZmMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlcIPFqOAwSZf5mYOU8klGEKFycA BXg9PDiKimorENoySx2WYqcvTnMbxrMlyeZGYGtzLev4KCeFEyhbhj/cyFPt2Vfn bXSxX6G9gaO/oK5PxsnowThnhGggLFYAMU7OtMXuEKs3KYDM8TQ0okI6S+sSE7Ea Jd629j20AE9ij9qMJcnBPi03wj2bGwIAl8PUDqkAz5UkhIr/xTIguQ0mMqxVp4XX fHo6BL2SufPjkOz4yODDOOmXYhPe4WDHZNhxV7pbofK4+fO4YkEhMk6fxOrF+kFJ VbHkLL0zgxbZpLHYiVNcaBtsnEoGTwgrXkFrtDvY3FFHMLuqrC8CXnYdKQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFC+IO9TqTj3rKLiUsZD44IuvBvHMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2IzNGQ2 Zi02NmRjLTQ0OTgtYjIwNS03OWI2NzMzYmM1ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjM0ZDZm LTY2ZGMtNDQ5OC1iMjA1LTc5YjY3MzNiYzVlNi8xL0w0ZzcxT3BPUGVzb3VKU3hr UGpnaTY4Rzhjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAueZpMA0EAgACMAcDBQMqELOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8hTANBgkqhkiG9w0BAQsFAAOCAQEAGekE+nhqxaWb 7OBraJRFYc09iSPiT1m9u1GnP+GgorVbjZNa5XgxCpoz4en2V8eWQwObt8IvZ7gD vBj/ff0v+ZSET71eZVHfupD87yn/ky363bjjJDNr09UMDqn76rQoEtToUilnROuW sO8vlSFvLJPbXIm5rxfUg+Jvzcy8GZMsdEI73XAyrBZ9vwj+50QGgh3DLG9HNRA7 AiIgiC6HaknWqHJ+1RG/kkN2KRNGm55Xruc43Uk3/DHj82W9SnNaWxiny89yNzFq eGpH1wtAKyQWGPdoDRVsjd6u71rWTgV7bT1vZjEOGuqKPx6jI53uL9gO3Z0aKI+p DOQd55V+Rg== -----END CERTIFICATE-----Generated at Tue Jan 20 04:34:42 2026 by rpki-client