This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer File: Li8BGtqu7EZbGCrucJw2fIfljzg.cer (raw, json) Hash identifier: UHYas8kE+zzpARFGhrzuWUaXgkcG2tlS+FW08LAwRxA= Subject key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB56284BEBE0CC858A043426182427 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51510 IP: 193.9.192.0 -- 193.9.239.255 IP: 193.9.254.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:56:28:4b:eb:e0:cc:85:8a:04:34:26:18:24:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e2f011adaaeec465b182aee709c367c87e58f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:af:6d:2d:02:87:5f:3a:69:f1:df:1e:05: 35:37:e0:31:dd:5c:2b:b1:eb:64:81:c2:0b:b1:59: 31:03:52:b3:50:b5:9a:17:b1:90:22:cf:15:f8:dc: 63:ef:fd:49:21:7c:d4:51:fd:b0:dc:ea:3d:d1:72: 38:48:02:55:d8:a3:b6:a7:a9:dd:60:fb:50:2b:9b: 51:f9:6a:bf:79:f7:4d:cf:58:b4:e4:dc:80:55:e8: cb:d8:af:b4:eb:59:05:60:5c:58:4c:07:ba:c4:5e: 25:3e:85:a6:e8:f0:d5:06:9b:a9:a4:5a:b4:d7:1b: e5:f5:bc:25:1a:77:70:d0:1d:93:2f:e3:f7:cf:f5: 5e:22:ba:0c:aa:27:a8:df:c8:8c:67:1e:14:8e:86: db:c7:d2:d4:79:b7:90:c6:0f:27:4d:d0:9d:1e:40: 15:fe:b1:e9:f5:3e:2b:74:51:d8:e5:5e:1a:1b:64: 96:29:94:e9:f8:ba:e5:dd:89:07:78:6a:84:d0:09: a4:de:da:a3:ae:e5:53:1d:5b:3c:94:b2:83:7b:05: 21:b4:a6:46:19:ff:80:f2:9e:25:97:41:a5:9f:21: ff:9c:8f:f0:4a:fc:b3:6a:0d:a3:27:2f:45:bb:e4: 94:01:0f:45:8b:32:e0:7c:47:35:ac:24:be:09:67: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.192.0-193.9.239.255 193.9.254.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51510 Signature Algorithm: sha256WithRSAEncryption 5a:57:49:ba:15:15:5b:ec:6a:a3:8c:fb:09:70:39:66:06:24: 08:ae:f4:b7:ee:ce:65:c1:b9:af:97:07:93:d7:09:e3:83:77: 14:51:95:e0:37:db:c9:cd:98:5a:7a:b3:78:40:fa:de:89:01: e4:8a:6a:67:86:d6:28:a3:b8:4c:0a:90:9f:68:03:78:d8:70: d3:4a:7f:2b:13:ab:69:ed:57:7d:d1:8e:4c:80:03:4a:a0:8b: 2e:62:55:ae:e8:fb:ce:f3:b1:d9:07:fa:22:6c:60:31:d9:33: f8:b5:71:36:b1:b5:74:dc:7a:c2:b3:2f:ed:b1:42:fc:fa:75: 54:d9:b7:b0:ca:82:7b:6c:67:37:f0:f5:08:ed:0c:3c:2b:e1: 5d:f5:1f:3b:b0:4f:b4:60:88:27:a9:ea:a3:2f:35:b1:51:06: 60:69:5c:ba:a6:7c:e6:5e:a3:11:cb:6a:b0:f5:8c:c0:b2:69: b5:7f:60:f3:a4:9a:d5:b9:98:89:10:48:03:b2:5f:da:92:86: 42:aa:26:05:5f:0e:02:ab:cb:cb:97:f8:ae:e0:44:dc:5a:17: 05:b0:55:fa:17:0e:b0:12:b3:90:a1:f0:53:ab:9e:5b:67:c6: 0d:f6:21:d9:18:18:a5:ef:ea:38:78:e2:89:4a:09:91:49:1e: 76:84:22:0d -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt9y1YoS+vgzIWKBDQmGCQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTJmMDExYWRhYWVlYzQ2NWIxODJhZWU3MDljMzY3Yzg3ZTU4ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wyvbS0Ch186afHfHgU1N+Ax3Vwr setkgcILsVkxA1KzULWaF7GQIs8V+Nxj7/1JIXzUUf2w3Oo90XI4SAJV2KO2p6nd YPtQK5tR+Wq/efdNz1i05NyAVejL2K+061kFYFxYTAe6xF4lPoWm6PDVBpuppFq0 1xvl9bwlGndw0B2TL+P3z/VeIroMqieo38iMZx4Ujobbx9LUebeQxg8nTdCdHkAV /rHp9T4rdFHY5V4aG2SWKZTp+Lrl3YkHeGqE0Amk3tqjruVTHVs8lLKDewUhtKZG Gf+A8p4ll0GlnyH/nI/wSvyzag2jJy9Fu+SUAQ9FizLgfEc1rCS+CWeEswIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFC4vARraruxGWxgq7nCcNnyH5Y84MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2VkNTQ1 Mi0zOWUyLTQzYmItOTY0NC0yMjJiYWY5NTNiNDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZWQ1NDUy LTM5ZTItNDNiYi05NjQ0LTIyMmJhZjk1M2I0NC8xL0xpOEJHdHF1N0VaYkdDcnVj SncyZklmbGp6Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBAbBCcADBATBCeADBADBCf4wGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAMk2MA0GCSqGSIb3DQEBCwUAA4IBAQBaV0m6FRVb7Gqj jPsJcDlmBiQIrvS37s5lwbmvlweT1wnjg3cUUZXgN9vJzZhaerN4QPreiQHkimpn htYoo7hMCpCfaAN42HDTSn8rE6tp7Vd90Y5MgANKoIsuYlWu6PvO87HZB/oibGAx 2TP4tXE2sbV03HrCsy/tsUL8+nVU2bewyoJ7bGc38PUI7Qw8K+Fd9R87sE+0YIgn qeqjLzWxUQZgaVy6pnzmXqMRy2qw9YzAsmm1f2DzpJrVuZiJEEgDsl/akoZCqiYF Xw4Cq8vLl/iu4ETcWhcFsFX6Fw6wErOQofBTq55bZ8YN9iHZGBil7+o4eOKJSgmR SR52hCIN -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:55 2026 by rpki-client