This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer File: L_jPdWH81tdmt6rTHb94XwKRSfA.cer (raw, json) Hash identifier: JYCDTRTj5pqD5va7niE/I8cubMe9Vb6jZfYwLWAlFTk= Subject key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8F33CD52C7FA3C8B74B19AC01E549 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.80.12.0/22 IP: 194.147.241.0/24 IP: 194.147.244.0/24 IP: 194.147.255.0/24 IP: 194.149.89.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f3:3c:d5:2c:7f:a3:c8:b7:4b:19:ac:01:e5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:39:92:af:ce:ba:4b:9c:a3:7b:a2:61:0a: 35:51:c4:97:95:de:3e:94:53:96:af:f9:68:b0:d6: 1a:98:fb:b8:d4:6e:19:78:3d:a0:7f:e2:99:9f:36: 96:57:2b:32:3e:05:85:48:bf:92:64:9c:da:65:17: e2:fd:97:47:22:01:dc:12:7e:c6:ce:e4:1b:df:b5: 3a:4d:68:d3:9f:54:ce:a6:3e:2d:6d:91:00:b9:e9: 7e:b9:2e:d0:74:bb:5e:dd:bf:a6:50:eb:36:0e:f5: 92:30:6b:23:9e:b9:6f:d2:fd:e7:25:56:6c:d6:b0: 75:5b:33:b4:00:43:66:e8:98:b7:2f:a2:6b:15:54: 80:35:aa:26:31:f1:fd:55:40:02:18:9f:07:0d:04: 19:32:35:ae:aa:72:e2:92:d4:cd:74:ed:e0:8b:be: 41:dd:b9:7e:9c:d2:09:70:e1:65:97:29:f2:4e:06: 35:52:be:38:38:22:7e:21:a4:6e:79:01:04:cd:6f: d7:47:07:b1:7a:08:6b:13:24:ba:7b:69:7c:49:ff: 88:1e:01:51:6c:36:c7:a1:63:6c:9b:d5:f3:9a:15: 3a:85:ba:3d:86:a0:14:b3:bc:d9:54:1e:23:c4:ec: e0:33:02:9d:2a:e3:19:a2:ee:7e:09:23:ab:48:d5: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.12.0/22 194.147.241.0/24 194.147.244.0/24 194.147.255.0/24 194.149.89.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:5a:8a:4a:26:23:86:33:c1:64:0e:65:8a:09:50:63:f9:67: d9:be:90:79:86:2b:34:39:bc:98:10:78:21:89:2b:9b:36:a4: 92:a9:77:03:85:9e:59:5d:fd:a8:63:30:2c:65:03:04:37:4d: 17:b2:ae:ff:23:f4:c6:6a:88:1c:dd:06:2d:0e:a9:71:f3:f9: f4:1a:ab:c2:45:d5:d5:2d:15:52:6a:3b:70:d7:0e:6d:22:bb: 43:05:1d:5e:97:f7:b2:28:f9:b6:04:59:a7:0e:3f:a0:c2:0e: 26:e9:c6:08:10:ff:79:f0:55:64:a2:3a:01:e4:e3:61:b7:76: 12:9c:fb:40:c7:59:d3:e9:09:97:77:18:5e:b4:d7:25:a9:a6: a7:54:35:2a:14:64:47:2d:9e:71:e5:a0:21:da:a8:70:18:35: aa:cf:b1:10:9f:47:66:a8:fc:41:46:62:08:f1:b8:90:35:dd: 9d:52:1d:46:c6:64:13:db:c1:34:db:e8:dc:ec:97:d1:e1:71: a7:20:48:07:d9:c6:d2:b4:71:ea:2d:c9:6e:6c:a5:05:4e:46: 0c:15:89:9c:2c:7e:2e:78:2b:0c:78:06:ee:cd:01:9a:df:d3: 15:c2:87:69:f7:08:e6:a0:76:3f:4f:06:23:44:78:31:7e:ea: 8d:92:59:31 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt6yPM81Sx/o8i3SxmsAeVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmY4Y2Y3NTYxZmNkNmQ3NjZiN2FhZDMxZGJmNzg1ZjAyOTE0OWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx45kq/Oukuco3uiYQo1UcSXld4+ lFOWr/losNYamPu41G4ZeD2gf+KZnzaWVysyPgWFSL+SZJzaZRfi/ZdHIgHcEn7G zuQb37U6TWjTn1TOpj4tbZEAuel+uS7QdLte3b+mUOs2DvWSMGsjnrlv0v3nJVZs 1rB1WzO0AENm6Ji3L6JrFVSANaomMfH9VUACGJ8HDQQZMjWuqnLiktTNdO3gi75B 3bl+nNIJcOFllynyTgY1Ur44OCJ+IaRueQEEzW/XRwexeghrEyS6e2l8Sf+IHgFR bDbHoWNsm9XzmhU6hbo9hqAUs7zZVB4jxOzgMwKdKuMZou5+CSOrSNXtawIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFC/4z3Vh/NbXZreq0x2/eF8CkUnwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2Y3N2Fj YS1hZDkxLTQwM2YtYjk4ZC1kZTczYTgxZTM1N2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZjc3YWNh LWFkOTEtNDAzZi1iOThkLWRlNzNhODFlMzU3ZC8xL0xfalBkV0g4MXRkbXQ2clRI Yjk0WHdLUlNmQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQCuVAMAwQAwpPxAwQAwpP0AwQAwpP/AwQAwpVZ MA0GCSqGSIb3DQEBCwUAA4IBAQBaWopKJiOGM8FkDmWKCVBj+WfZvpB5his0ObyY EHghiSubNqSSqXcDhZ5ZXf2oYzAsZQMEN00Xsq7/I/TGaogc3QYtDqlx8/n0GqvC RdXVLRVSajtw1w5tIrtDBR1el/eyKPm2BFmnDj+gwg4m6cYIEP958FVkojoB5ONh t3YSnPtAx1nT6QmXdxhetNclqaanVDUqFGRHLZ5x5aAh2qhwGDWqz7EQn0dmqPxB RmII8biQNd2dUh1GxmQT28E02+jc7JfR4XGnIEgH2cbStHHqLclubKUFTkYMFYmc LH4ueCsMeAbuzQGa39MVwodp9wjmoHY/TwYjRHgxfuqNklkx -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:00 2026 by rpki-client