This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer (raw, json) Hash identifier: B59CiJ4AzkqVEy7t8RfZRPhRjDG7YERWs4D3IGi9P2A= Subject key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B8829FD3E5A83CFB465DE37D9EAB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43096 IP: 80.83.90.0/24 IP: 185.61.236.0/22 IP: 2a02:7d20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b8:82:9f:d3:e5:a8:3c:fb:46:5d:e3:7d:9e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:3d:fa:8b:52:92:89:d0:e2:4f:b6:fd:03: f7:50:6f:5e:fc:dc:fc:c4:b8:41:63:7a:a3:c6:d3: 18:5f:d0:44:6c:b5:99:ea:d9:a0:ae:3e:b4:ba:04: 28:bd:2c:7f:9b:88:93:b3:7b:ce:5c:69:aa:88:fb: 61:97:8b:ec:48:7a:f1:d1:ce:f2:43:51:16:e9:45: c1:e0:6d:87:b3:6a:bc:29:6f:08:3c:c0:0d:94:e4: 25:14:c0:d0:46:59:61:0c:26:4a:24:60:f3:5a:b5: a8:63:a8:dc:b1:02:9c:50:31:bb:da:34:02:db:01: 6b:61:d2:c7:d4:be:69:6d:14:35:d1:70:2e:2d:db: 0c:dc:73:59:bd:4f:4d:74:a2:77:33:86:3a:30:8a: 12:a5:c7:b2:46:13:d5:b0:d2:5d:8a:44:95:4b:08: a0:48:d2:86:5d:e2:32:93:2e:27:13:76:7f:1a:a8: 1e:67:4c:a3:43:ff:16:2f:06:0a:0b:07:83:4a:3f: 97:bc:0b:32:f8:6b:2f:c9:ef:ba:b1:30:f1:5a:6c: 0e:07:87:d8:c4:a5:e6:d8:38:77:c7:df:41:a1:fe: a4:cd:a6:38:a5:8a:f8:91:0f:8a:5c:4d:f5:0c:2f: e4:34:d8:cf:1d:3a:ca:64:80:d0:96:8c:a6:fa:f1: a2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.90.0/24 185.61.236.0/22 IPv6: 2a02:7d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43096 Signature Algorithm: sha256WithRSAEncryption 43:e0:2d:3a:3f:71:83:6e:2f:33:66:d5:09:52:7e:bc:5c:69: 11:17:23:a7:8d:96:c6:58:47:3d:1d:ea:fa:cf:2d:4d:c3:d8: ea:0e:39:d9:ce:96:ef:3a:63:10:b5:14:ea:4d:24:92:99:d3: 5c:bc:99:39:e8:11:91:0e:51:7b:16:68:84:fb:58:da:7c:c3: 8f:3f:31:3b:0e:ca:a2:f6:4c:73:08:1e:74:be:52:32:e5:a5: d9:be:20:ff:3f:d9:3c:6a:a0:52:eb:a9:81:03:5b:61:9c:3e: 55:ac:3b:12:1d:ea:53:01:13:e4:de:2d:e2:84:7c:b7:28:32: 7c:28:54:76:60:cd:7e:6a:10:56:95:a7:5f:d9:07:ea:1a:e2: 80:82:0a:2a:d8:24:7b:aa:cc:5a:f6:5b:d9:38:7c:35:dd:97: c1:7f:0a:67:62:81:e2:de:2b:eb:4b:de:b4:64:6f:ce:52:bb: d8:29:54:b8:eb:9a:47:be:07:c7:6c:8a:9b:0c:67:76:b3:8b: bb:d9:70:e8:22:69:24:99:91:c7:79:5f:9b:85:f3:95:32:31: 8f:26:ca:0b:62:38:40:e8:54:4b:90:2f:e9:ed:e2:63:a5:96: 40:c7:f3:97:69:dd:c9:b2:ad:be:ca:03:4c:4a:8e:ee:df:60: fa:e9:d2:cd -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WLiCn9PlqDz7Rl3jfZ6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDMyZjYxYmJkM2ZkMTFkN2ZhY2JiMTU0M2E3NTFhNjVhM2Y2NGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupg9+otSkonQ4k+2/QP3UG9e/Nz8 xLhBY3qjxtMYX9BEbLWZ6tmgrj60ugQovSx/m4iTs3vOXGmqiPthl4vsSHrx0c7y Q1EW6UXB4G2Hs2q8KW8IPMANlOQlFMDQRllhDCZKJGDzWrWoY6jcsQKcUDG72jQC 2wFrYdLH1L5pbRQ10XAuLdsM3HNZvU9NdKJ3M4Y6MIoSpceyRhPVsNJdikSVSwig SNKGXeIyky4nE3Z/GqgeZ0yjQ/8WLwYKCweDSj+XvAsy+Gsvye+6sTDxWmwOB4fY xKXm2Dh3x99Bof6kzaY4pYr4kQ+KXE31DC/kNNjPHTrKZIDQloym+vGiawIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEQy9hu9P9Edf6y7FUOnUaZaP2TDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzY2NGVi MS1mMjIwLTQ4MDQtOGM1YS05Mjc4ODQwYzQ5NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNjY0ZWIx LWYyMjAtNDgwNC04YzVhLTkyNzg4NDBjNDk3MC8xL1JETDJHNzBfMFIxX3JMc1ZR NmRScGxvX1pNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAUFNaAwQCuT3sMA0EAgACMAcDBQAqAn0gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCoWDANBgkqhkiG9w0BAQsFAAOCAQEAQ+At Oj9xg24vM2bVCVJ+vFxpERcjp42WxlhHPR3q+s8tTcPY6g452c6W7zpjELUU6k0k kpnTXLyZOegRkQ5RexZohPtY2nzDjz8xOw7KovZMcwgedL5SMuWl2b4g/z/ZPGqg UuupgQNbYZw+Vaw7Eh3qUwET5N4t4oR8tygyfChUdmDNfmoQVpWnX9kH6hrigIIK Ktgke6rMWvZb2Th8Nd2XwX8KZ2KB4t4r60vetGRvzlK72ClUuOuaR74Hx2yKmwxn drOLu9lw6CJpJJmRx3lfm4XzlTIxjybKC2I4QOhUS5Av6e3iY6WWQMfzl2ndybKt vsoDTEqO7t9g+unSzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:13 2026 by rpki-client