This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer File: _L5iN4u1gK9O1wv6NavIQJRdeAM.cer (raw, json) Hash identifier: 52eYDqTyIS70fYMRB3z6gJ1iTGfmkg3/5aknU/N7RE8= Subject key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11C39F59B6B3BA547ACAC635233743 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42300 IP: 77.240.240.0/22 IP: 178.236.200.0 -- 178.236.202.255 IP: 194.15.248.0/22 IP: 2a00:c700::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c3:9f:59:b6:b3:ba:54:7a:ca:c6:35:23:37:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcbe62378bb580af4ed70bfa35abc840945d7803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:9f:54:ad:09:16:e6:f3:71:85:74:8d:a0: bf:69:a7:1a:69:93:ad:a8:bb:cd:65:6d:d3:8d:2e: b2:34:78:ec:aa:27:b4:81:9e:e0:43:df:d8:14:27: 65:e6:0b:92:a8:31:a9:50:b9:a3:cf:ee:08:7e:ff: 60:1c:6b:38:e5:4d:c1:7b:4f:cb:42:82:c0:84:6e: e4:94:c1:ad:b7:65:76:a0:7d:1c:59:d0:e5:8f:f6: ec:88:84:3d:32:ec:53:8f:23:41:5a:14:ee:5e:8d: e2:7e:0a:ad:fe:56:51:54:b8:29:a2:4e:1c:f2:87: b9:88:0f:18:f7:ce:20:d8:5b:3f:36:19:9c:3b:5e: 51:3f:aa:72:f4:82:0d:6a:fa:75:a9:b1:66:42:dd: de:b2:9b:92:18:b4:bd:c7:0b:ab:87:15:93:1c:aa: ed:c6:9c:7e:c4:b8:c9:3d:87:e7:99:0a:68:b6:30: ff:71:29:b6:89:2a:05:bc:38:54:57:05:dc:23:8c: 63:59:19:ae:82:e3:77:dc:17:95:ff:9e:a0:fe:b9: a5:10:bb:74:43:5c:cd:de:46:25:e3:34:00:7e:69: a7:99:87:d4:e5:40:87:6d:53:64:c9:59:2d:6b:5d: d9:02:0a:b8:73:e4:02:70:fa:41:a4:31:84:75:fb: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.240.0/22 178.236.200.0-178.236.202.255 194.15.248.0/22 IPv6: 2a00:c700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42300 Signature Algorithm: sha256WithRSAEncryption 76:8b:12:32:01:b9:cd:e0:3c:e5:1c:60:2b:33:cb:98:ea:5a: 25:b2:da:92:de:49:39:02:78:15:b3:bb:fe:b3:27:72:0e:58: d4:28:eb:21:87:85:b0:34:0a:39:2d:e8:18:b4:c1:cd:58:e4: 4b:82:fa:61:38:d5:bb:7f:97:5d:e9:00:ae:46:10:28:ab:94: 5c:fb:38:a5:c2:01:95:a4:83:21:76:3e:bd:04:2b:52:4c:79: d7:91:0f:e3:04:42:e4:1b:65:1f:f9:49:35:59:6b:ab:84:bd: 0b:b0:c9:9f:65:fb:40:e8:a7:56:24:32:1a:4b:0d:63:bc:07: a2:bc:8a:cf:56:8a:7f:a3:1b:ee:96:0c:78:61:1c:b0:c8:21: fc:9a:0b:aa:7a:10:c6:f3:db:71:f3:8c:b1:3c:9d:4c:3a:ef: b8:f0:05:f6:f7:07:1b:1b:d3:43:5e:61:df:d5:c9:d6:5a:50: bf:69:82:1c:2c:c8:ca:5e:f1:3a:10:f0:9e:87:51:5c:65:a5: da:b6:ee:e2:aa:72:f2:19:18:e8:14:60:61:49:9f:93:e7:e2: 77:6d:e9:49:eb:36:fb:5d:99:21:d7:b3:4e:ca:52:e4:8a:00: 73:ee:55:83:b1:7c:bf:ba:02:9f:4d:34:f5:7c:f2:4c:f7:ab: 9a:ac:9a:ac -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt8EcOfWbazulR6ysY1IzdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2JlNjIzNzhiYjU4MGFmNGVkNzBiZmEzNWFiYzg0MDk0NWQ3ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIifVK0JFubzcYV0jaC/aacaaZOt qLvNZW3TjS6yNHjsqie0gZ7gQ9/YFCdl5guSqDGpULmjz+4Ifv9gHGs45U3Be0/L QoLAhG7klMGtt2V2oH0cWdDlj/bsiIQ9MuxTjyNBWhTuXo3ifgqt/lZRVLgpok4c 8oe5iA8Y984g2Fs/NhmcO15RP6py9IINavp1qbFmQt3espuSGLS9xwurhxWTHKrt xpx+xLjJPYfnmQpotjD/cSm2iSoFvDhUVwXcI4xjWRmuguN33BeV/56g/rmlELt0 Q1zN3kYl4zQAfmmnmYfU5UCHbVNkyVkta13ZAgq4c+QCcPpBpDGEdfvWBwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFPy+YjeLtYCvTtcL+jWryECUXXgDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2I4ZDI5 Yy0zMzMzLTQ5M2MtOTczOS1kZjU2ZWM2NzBkZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvYjhkMjlj LTMzMzMtNDkzYy05NzM5LWRmNTZlYzY3MGRlNy8xL19MNWlONHUxZ0s5TzF3djZO YXZJUUpSZGVBTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQCTfDwMAwDBAOy7MgDBACy7MoDBALCD/gwDQQC AAIwBwMFACoAxwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKU8MA0GCSqGSIb3 DQEBCwUAA4IBAQB2ixIyAbnN4DzlHGArM8uY6lolstqS3kk5AngVs7v+sydyDljU KOshh4WwNAo5LegYtMHNWORLgvphONW7f5dd6QCuRhAoq5Rc+zilwgGVpIMhdj69 BCtSTHnXkQ/jBELkG2Uf+Uk1WWurhL0LsMmfZftA6KdWJDIaSw1jvAeivIrPVop/ oxvulgx4YRywyCH8mguqehDG89tx84yxPJ1MOu+48AX29wcbG9NDXmHf1cnWWlC/ aYIcLMjKXvE6EPCeh1FcZaXatu7iqnLyGRjoFGBhSZ+T5+J3belJ6zb7XZkh17NO ylLkigBz7lWDsXy/ugKfTTT1fPJM96uarJqs -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:21 2026 by rpki-client