This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer File: l0mtdlnaE07UgHT025NBzodRffQ.cer (raw, json) Hash identifier: xYbixd6+MMRZjzw8N280/7d9pzZALfjYVGRZQjimVbA= Subject key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759255E7D43D0BD480DF504CD7BD5D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206924 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:25:5e:7d:43:d0:bd:48:0d:f5:04:cd:7b:d5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9749ad7659da134ed48074f4db9341ce87517df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:2a:1d:16:86:7e:88:12:0e:5b:9e:cd:e2: c5:3c:fb:eb:10:ca:d6:12:8c:e9:a6:95:7d:62:b2: 90:9d:c7:15:6e:f2:0d:15:07:20:df:02:0c:c9:b0: 18:0d:e2:cb:fe:c4:99:eb:27:77:01:fb:fc:60:2c: cd:ea:8c:6d:29:a1:2b:8b:5e:35:9b:9e:99:05:45: ba:2a:ef:ff:78:d8:7e:70:12:2f:94:bc:17:1f:dc: 45:a6:21:64:20:a8:bc:6b:49:c2:53:77:56:43:0a: b4:2d:03:f4:d1:fd:dc:7c:72:d6:18:fc:37:98:f9: b9:d4:ce:68:17:a8:85:30:d9:71:99:b1:48:4b:b5: 92:27:68:e8:8e:7b:20:e1:e6:63:e7:5f:cf:d7:51: d1:58:6b:21:fc:69:9d:b0:7c:79:fe:67:40:aa:5a: a7:ad:ac:2d:46:54:8e:86:d8:d3:d5:fe:37:fe:e3: 2e:ce:0d:70:38:94:4a:86:3a:28:66:b6:ae:ba:bd: 42:d4:91:d3:75:54:22:9a:88:49:ab:b7:91:68:32: 39:3c:d1:5f:59:ff:bc:8f:05:06:a6:d3:86:3a:93: f9:a6:83:eb:9b:0d:38:e8:0e:95:f9:18:23:25:89: f5:52:40:e8:a2:09:0f:d7:fa:25:62:29:37:cf:69: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206924 Signature Algorithm: sha256WithRSAEncryption 41:82:fd:15:6a:0a:b4:fc:a2:e9:94:ba:4c:45:30:35:89:1b: d7:7e:ec:6c:d3:5e:ab:a6:e2:27:04:e1:84:f0:c3:78:58:a8: f0:6a:5e:19:5e:93:b5:98:88:29:77:7b:63:28:d1:1b:b0:16: d7:c1:a2:08:06:be:4c:cd:ec:f6:09:da:6a:b3:22:89:1d:b7: 44:84:ad:22:62:55:8a:79:18:7a:87:2f:79:8e:1e:02:c6:db: bb:fa:db:40:90:48:11:0e:c6:f7:82:c2:5c:86:4f:77:3f:10: 0f:4f:ca:75:30:5e:2f:ff:3b:d5:10:ce:13:09:ea:7a:ad:f7: bf:db:17:6a:6e:71:76:b5:37:cb:da:5d:a4:cb:d0:eb:8f:31: 06:d2:3c:8c:67:dd:00:ea:05:90:af:51:a7:66:d8:41:07:ab: d3:dc:f4:fb:d6:01:37:1d:20:b7:67:c8:54:02:69:7e:34:5e: 40:7d:09:81:a4:fa:95:ee:2d:e6:21:6a:2b:2c:51:83:a1:bb: 7d:5a:b6:ad:c3:51:a9:40:48:d7:24:a0:8f:c1:7f:db:90:53: 2c:76:df:62:a6:e3:3b:f5:27:ce:53:4a:e6:e6:5b:1d:d1:e3: 16:b7:64:b5:c1:eb:76:ee:e0:b6:cc:7a:7a:5a:28:3b:bd:4d: 23:19:d4:87 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WSVefUPQvUgN9QTNe9XQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzQ5YWQ3NjU5ZGExMzRlZDQ4MDc0ZjRkYjkzNDFjZTg3NTE3ZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V0qHRaGfogSDluezeLFPPvrEMrW EozpppV9YrKQnccVbvINFQcg3wIMybAYDeLL/sSZ6yd3Afv8YCzN6oxtKaEri141 m56ZBUW6Ku//eNh+cBIvlLwXH9xFpiFkIKi8a0nCU3dWQwq0LQP00f3cfHLWGPw3 mPm51M5oF6iFMNlxmbFIS7WSJ2jojnsg4eZj51/P11HRWGsh/GmdsHx5/mdAqlqn rawtRlSOhtjT1f43/uMuzg1wOJRKhjooZrauur1C1JHTdVQimohJq7eRaDI5PNFf Wf+8jwUGptOGOpP5poPrmw046A6V+RgjJYn1UkDoogkP1/olYik3z2lvfQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJdJrXZZ2hNO1IB09NuTQc6HUX30MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2E3MDEx YS02ZTE1LTRlOWItYmE5ZS0zMmQ3OWNjNDlmMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYTcwMTFh LTZlMTUtNGU5Yi1iYTllLTMyZDc5Y2M0OWYyMi8xL2wwbXRkbG5hRTA3VWdIVDAy NU5Cem9kUmZmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMoTDANBgkqhkiG9w0BAQsFAAOCAQEAQYL9FWoKtPyi 6ZS6TEUwNYkb137sbNNeq6biJwThhPDDeFio8GpeGV6TtZiIKXd7YyjRG7AW18Gi CAa+TM3s9gnaarMiiR23RIStImJVinkYeocveY4eAsbbu/rbQJBIEQ7G94LCXIZP dz8QD0/KdTBeL/871RDOEwnqeq33v9sXam5xdrU3y9pdpMvQ648xBtI8jGfdAOoF kK9Rp2bYQQer09z0+9YBNx0gt2fIVAJpfjReQH0JgaT6le4t5iFqKyxRg6G7fVq2 rcNRqUBI1ySgj8F/25BTLHbfYqbjO/UnzlNK5uZbHdHjFrdktcHrdu7gtsx6eloo O71NIxnUhw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:49:31 2026 by rpki-client