This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer File: _L65swLOtvWNMntJTYFFlDO-c40.cer (raw, json) Hash identifier: n5dlk/kyegaZEYzoHE1Dj3FUpV1qQIRFNtT/zTRN+5o= Subject key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79110CFE82A2F3F1CAE94390ADF52E52 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25318 IP: 193.47.162.0/24 IP: 195.234.177.0/24 IP: 2001:67c:154::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0c:fe:82:a2:f3:f1:ca:e9:43:90:ad:f5:2e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcbeb9b302ceb6f58d327b494d81459433be738d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:ca:7b:93:a9:3b:5d:54:94:33:10:0a:dd: c0:ab:df:74:9a:3b:03:86:f0:58:de:a6:7f:8d:8a: 28:62:e2:3b:87:99:39:af:73:46:b4:63:dd:8b:fd: d1:12:be:a9:43:e8:d9:bb:20:94:d5:9b:16:a8:40: ec:d7:f0:0e:98:6a:af:04:89:b1:a0:dd:9e:5a:5f: 56:a7:cf:82:69:10:72:32:41:66:af:0a:49:ad:23: 07:d9:fa:57:59:e9:a9:ea:f8:fb:0f:97:00:a7:29: 50:35:42:b8:9f:f7:81:2f:c7:90:a3:97:38:e5:76: 97:0d:24:bc:ca:c2:94:eb:1e:fc:5b:66:92:7c:5f: 0a:9c:a8:08:ab:d1:e4:e6:01:2f:73:dd:7e:c1:63: 6f:64:de:cb:af:a9:81:ad:99:09:9f:ab:53:ef:76: b1:3f:79:a4:62:47:39:b5:9d:38:9b:86:5e:7a:05: f0:1b:e2:8e:c0:70:3a:36:0b:73:dc:8d:6a:7b:78: 7a:10:00:dc:65:40:b6:93:79:0e:da:37:34:92:af: 41:fc:f9:e2:7e:86:42:64:36:9a:df:9a:20:6d:3b: 99:ef:7f:d5:3a:f2:f3:28:85:55:79:7b:4b:6a:4d: 28:33:87:f3:36:3e:00:11:2d:62:e5:89:9a:81:01: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.162.0/24 195.234.177.0/24 IPv6: 2001:67c:154::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25318 Signature Algorithm: sha256WithRSAEncryption 8a:ed:de:e8:cb:0b:3a:69:43:14:03:55:e2:0a:dd:cc:27:b1: 13:cd:af:6c:45:6b:55:49:0d:66:4e:50:78:09:a6:73:2a:1d: 6a:fc:46:fc:76:95:0b:f5:5e:00:d1:50:5f:02:e4:0c:da:98: 77:33:6a:1d:30:15:49:8a:7d:b7:87:24:63:1b:62:7e:0b:89: ea:89:df:53:a0:df:6c:fc:2b:3c:95:c4:48:2d:62:9c:9f:9a: cf:e1:a4:3b:1a:ad:14:1c:cb:4c:9c:3a:e0:82:1f:ca:cb:d9: 6c:cd:0e:ca:d9:84:46:af:62:db:fa:27:51:be:07:74:ae:50: 7e:fa:9e:f1:3a:b6:c6:41:66:ff:f3:4c:13:84:ac:0f:81:c2: dd:66:46:76:0d:27:55:1e:94:6a:b2:41:cf:01:fb:0c:7f:1d: d1:7e:54:dd:08:63:53:7e:43:58:5e:e8:a8:a3:36:71:a3:5d: f6:53:06:d0:79:3b:6c:52:9b:d2:fe:c9:96:bc:ca:60:fb:b9: 37:e3:18:26:77:db:af:3f:90:39:52:98:04:82:4f:0e:53:d4: ac:10:99:05:f8:9f:cc:58:19:84:bf:3b:f1:f1:68:5d:1c:5a: 95:6e:97:94:7b:40:51:c6:a2:6d:c2:02:84:a3:24:c5:bf:51: 13:31:4e:47 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt5EQz+gqLz8crpQ5Ct9S5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2JlYjliMzAyY2ViNmY1OGQzMjdiNDk0ZDgxNDU5NDMzYmU3MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bzKe5OpO11UlDMQCt3Aq990mjsD hvBY3qZ/jYooYuI7h5k5r3NGtGPdi/3REr6pQ+jZuyCU1ZsWqEDs1/AOmGqvBImx oN2eWl9Wp8+CaRByMkFmrwpJrSMH2fpXWemp6vj7D5cApylQNUK4n/eBL8eQo5c4 5XaXDSS8ysKU6x78W2aSfF8KnKgIq9Hk5gEvc91+wWNvZN7Lr6mBrZkJn6tT73ax P3mkYkc5tZ04m4ZeegXwG+KOwHA6Ngtz3I1qe3h6EADcZUC2k3kO2jc0kq9B/Pni foZCZDaa35ogbTuZ73/VOvLzKIVVeXtLak0oM4fzNj4AES1i5YmagQH/hwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPy+ubMCzrb1jTJ7SU2BRZQzvnONMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzFjOGI2 OS00YjdiLTRiZmQtYmNlNS0zN2FmYmRmNGQ4NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvMWM4YjY5 LTRiN2ItNGJmZC1iY2U1LTM3YWZiZGY0ZDg0Ny8xL19MNjVzd0xPdHZXTk1udEpU WUZGbERPLWM0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwS+iAwQAw+qxMA8EAgACMAkDBwAgAQZ8AVQw GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICYuYwDQYJKoZIhvcNAQELBQADggEBAIrt 3ujLCzppQxQDVeIK3cwnsRPNr2xFa1VJDWZOUHgJpnMqHWr8Rvx2lQv1XgDRUF8C 5AzamHczah0wFUmKfbeHJGMbYn4LieqJ31Og32z8KzyVxEgtYpyfms/hpDsarRQc y0ycOuCCH8rL2WzNDsrZhEavYtv6J1G+B3SuUH76nvE6tsZBZv/zTBOErA+Bwt1m RnYNJ1UelGqyQc8B+wx/HdF+VN0IY1N+Q1he6KijNnGjXfZTBtB5O2xSm9L+yZa8 ymD7uTfjGCZ3268/kDlSmASCTw5T1KwQmQX4n8xYGYS/O/HxaF0cWpVul5R7QFHG om3CAoSjJMW/URMxTkc= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:15 2026 by rpki-client