This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer (raw, json) Hash identifier: 95C0fWWxHO2RuQypwxxphP89IBIPb/SxXluuM6igJAE= Subject key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A218BF55487ED8E385EDB886937744 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205355 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:18:bf:55:48:7e:d8:e3:85:ed:b8:86:93:77:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe51bda6cdc898f674441fce5c7421b46f611d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:90:48:c4:75:d0:df:08:c4:58:de:01:7b: 2c:ca:66:17:09:f8:5d:c3:50:5c:f2:c0:8c:e1:7f: 6d:0b:42:ff:53:48:8f:73:61:8f:97:58:67:94:cf: 33:5d:d9:fc:39:9d:a0:f7:b4:63:34:c8:f6:3d:a3: 94:b7:25:9d:ab:0c:76:be:96:b1:5a:a8:fd:5c:8d: 3a:f8:16:e6:e6:fd:de:5e:a2:9b:ea:92:0e:6c:0b: 7c:bf:3e:72:d0:dc:38:94:61:4b:92:65:4f:54:49: 63:a3:b0:bb:08:9f:c6:a7:12:93:af:d8:ea:40:be: 90:00:f4:13:64:33:e3:9e:0e:ce:e8:ba:e9:a8:61: 61:9d:31:0b:a3:e2:32:d4:ab:d0:92:e6:58:c8:47: 55:bb:e8:7c:b8:e8:e9:fb:79:94:13:5b:5f:91:db: 3b:3a:43:5d:f9:42:f4:b7:ed:a8:33:f0:0e:5d:36: 09:61:da:1f:38:ea:cd:03:74:5f:f1:bf:1a:34:43: b5:c5:a0:73:e7:45:2d:4c:e1:f1:42:34:a1:f4:c0: 5f:f1:d5:41:e3:f6:a1:a7:4d:da:75:f3:4d:3c:02: 7d:97:20:dc:31:3a:bb:39:74:1d:74:b6:43:f6:42: 7b:ef:d8:99:22:d4:2a:7c:3d:6a:13:cf:f5:3f:31: a5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205355 Signature Algorithm: sha256WithRSAEncryption 93:2a:ac:49:a4:3c:6b:95:bb:51:f1:4d:7a:f5:13:59:d0:ce: f3:ce:43:9e:34:12:01:31:9d:ad:32:90:3d:31:26:f7:e2:ac: 23:ab:3d:1a:90:2a:67:4c:77:87:65:03:4d:c2:dd:39:58:28: a3:b7:2e:bd:83:a6:8b:a8:3d:57:d2:bb:66:60:fa:8b:70:b2: 2c:3d:19:8b:93:a0:da:0b:a8:8b:cd:d4:31:b3:dc:91:28:12: e5:01:56:55:a8:38:2c:80:98:b1:e8:37:6a:eb:44:10:22:cd: 52:a1:6c:ec:4e:4e:1c:e4:84:d0:c0:3d:1c:62:ec:d3:69:de: b6:6e:16:0a:fb:c7:5e:ae:55:08:db:27:82:99:54:9c:48:8c: 14:3e:fe:da:53:88:8c:3d:4a:b4:1b:08:57:8f:8a:02:d5:e5: 65:9c:cb:d3:bf:44:14:64:96:b5:b6:f3:4d:c9:a2:5a:18:4e: bf:37:ba:56:b9:44:9e:0d:d5:ad:00:00:cb:ac:ff:ac:09:0e: 76:a5:2a:8f:82:a1:f2:cc:37:51:58:b2:f4:d2:f0:a2:7a:65: b4:02:2d:94:2f:98:1e:7d:f7:27:07:f6:4c:86:d3:26:8d:9a: dc:6a:35:d2:18:c2:ca:61:d7:fd:14:9a:83:5a:22:aa:73:48: 37:fe:85:54 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4ohi/VUh+2OOF7biGk3dEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTUxYmRhNmNkYzg5OGY2NzQ0NDFmY2U1Yzc0MjFiNDZmNjExZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyqQSMR10N8IxFjeAXssymYXCfhd w1Bc8sCM4X9tC0L/U0iPc2GPl1hnlM8zXdn8OZ2g97RjNMj2PaOUtyWdqwx2vpax Wqj9XI06+Bbm5v3eXqKb6pIObAt8vz5y0Nw4lGFLkmVPVEljo7C7CJ/GpxKTr9jq QL6QAPQTZDPjng7O6LrpqGFhnTELo+Iy1KvQkuZYyEdVu+h8uOjp+3mUE1tfkds7 OkNd+UL0t+2oM/AOXTYJYdofOOrNA3Rf8b8aNEO1xaBz50UtTOHxQjSh9MBf8dVB 4/ahp03adfNNPAJ9lyDcMTq7OXQddLZD9kJ779iZItQqfD1qE8/1PzGluQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFP5RvabNyJj2dEQfzlx0IbRvYR1ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzA0MDlh ZC1mNTY4LTQ5MTktYWRhNy1kNGMwYzg4YzA1ZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMDQwOWFk LWY1NjgtNDkxOS1hZGE3LWQ0YzBjODhjMDVkZi8xL19sRzlwczNJbVBaMFJCX09Y SFFodEc5aEhWay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMiKzANBgkqhkiG9w0BAQsFAAOCAQEAkyqsSaQ8a5W7 UfFNevUTWdDO885DnjQSATGdrTKQPTEm9+KsI6s9GpAqZ0x3h2UDTcLdOVgoo7cu vYOmi6g9V9K7ZmD6i3CyLD0Zi5Og2guoi83UMbPckSgS5QFWVag4LICYseg3autE ECLNUqFs7E5OHOSE0MA9HGLs02netm4WCvvHXq5VCNsngplUnEiMFD7+2lOIjD1K tBsIV4+KAtXlZZzL079EFGSWtbbzTcmiWhhOvze6VrlEng3VrQAAy6z/rAkOdqUq j4Kh8sw3UViy9NLwonpltAItlC+YHn33Jwf2TIbTJo2a3Go10hjCymHX/RSag1oi qnNIN/6FVA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:06 2026 by rpki-client