This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer (raw, json) Hash identifier: /Co7YNi4ohMxXZVYeUnXwWtbi1NK1RGt1d7H+uOf3W8= Subject key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38748557A9FBF71D6BBB59DDC963DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215655 IP: 164.138.203.0/24 IP: 2a05:7a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:74:85:57:a9:fb:f7:1d:6b:bb:59:dd:c9:63:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:08:48:a8:f6:a8:7e:27:a4:09:c6:48:c7: 0f:ff:1c:66:15:c2:ed:48:fb:3b:57:1b:cf:05:a5: 05:67:a8:82:46:5f:a3:e8:5b:62:5e:26:4b:54:cf: 02:dc:d1:af:e4:f9:81:4e:d9:90:7f:85:2a:fc:03: 24:5d:e4:40:80:cb:d1:50:10:33:d0:90:b3:f2:36: a7:25:5f:f1:34:13:66:00:42:28:a9:82:fd:7c:7a: a4:8c:d1:82:ab:6a:1b:c6:b2:0b:32:22:5b:bc:1b: 47:11:1b:54:f3:7e:38:4e:dc:08:2b:1e:e6:11:d0: 56:62:f2:bc:b2:42:57:46:c0:0f:c2:33:04:a7:34: a3:d4:b9:1c:92:54:e0:6c:a9:09:42:9a:88:e5:8c: 45:45:b9:5d:fa:25:fd:97:65:2e:15:0e:f3:0b:f1: 3d:e1:a6:90:70:b2:21:ae:32:74:bb:14:e3:fb:c3: 1f:1e:74:3c:9b:9c:57:44:df:8c:08:09:34:11:16: 4f:e0:34:26:24:b9:bd:ad:e0:f1:97:29:89:1c:37: 14:de:65:f5:88:1e:41:f3:20:d7:a6:b5:87:33:bf: ab:bf:28:86:10:96:d3:c0:10:30:3d:4b:8c:07:57: ce:89:70:3e:9d:83:a3:85:3b:7c:1f:9a:8e:3b:89: c6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.203.0/24 IPv6: 2a05:7a80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215655 Signature Algorithm: sha256WithRSAEncryption 1f:99:c3:85:b4:a8:11:1c:ec:fa:6c:0c:ee:e6:04:39:54:15: 26:3d:65:5f:f7:a2:76:74:e1:36:6b:d0:cc:3a:87:89:dd:01: 9a:ac:c5:fd:27:62:43:d0:ab:66:77:9e:47:6f:9c:54:43:53: 23:67:f4:ec:ff:91:d6:5e:96:d4:65:f6:b1:8d:19:82:ca:0e: 29:63:c7:bf:aa:72:a8:84:90:a1:be:93:2f:d6:66:14:9d:aa: c0:99:63:ef:49:f4:55:41:6a:45:3b:c6:00:1c:61:4f:ee:0d: b1:3f:1c:b6:08:b8:3c:5e:f2:7e:86:c9:6d:9d:fc:ad:b3:7e: 6a:3f:e1:c6:a3:33:d6:0e:32:db:c8:ce:2c:fb:50:e0:a0:44: e9:0d:9f:9d:b1:a4:dc:16:82:55:e9:30:aa:ce:d7:bb:c5:eb: 29:ab:f2:e3:92:0f:60:00:fa:1c:8b:7c:55:ad:e3:9c:61:49: c4:ba:12:d7:c5:21:b1:07:9e:b1:e8:6a:eb:b7:1f:84:50:2f: 77:60:66:3b:17:39:e3:d6:82:47:61:26:7e:06:69:04:ed:e0: 12:4c:bb:65:de:35:10:59:92:98:b1:b7:c6:e1:6d:9f:b3:ed: e7:a4:0e:c0:07:38:f5:5f:96:ca:31:85:ab:26:15:b8:80:ea: c6:24:e5:a7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OHSFV6n79x1ru1ndyWPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzUzMGNhYjNiYWU1YjUyOWZhYmViOTk3OWJkNjg1ZjdiMmJkYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsEISKj2qH4npAnGSMcP/xxmFcLt SPs7VxvPBaUFZ6iCRl+j6FtiXiZLVM8C3NGv5PmBTtmQf4Uq/AMkXeRAgMvRUBAz 0JCz8janJV/xNBNmAEIoqYL9fHqkjNGCq2obxrILMiJbvBtHERtU8344TtwIKx7m EdBWYvK8skJXRsAPwjMEpzSj1LkcklTgbKkJQpqI5YxFRbld+iX9l2UuFQ7zC/E9 4aaQcLIhrjJ0uxTj+8MfHnQ8m5xXRN+MCAk0ERZP4DQmJLm9reDxlymJHDcU3mX1 iB5B8yDXprWHM7+rvyiGEJbTwBAwPUuMB1fOiXA+nYOjhTt8H5qOO4nG+wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJdTDKs7rltSn6vrmXm9aF97K9qzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzYyNTJm OS02Nzg3LTQwNmEtYjkxZi05Y2ZhMmM3ZDgxNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNjI1MmY5 LTY3ODctNDA2YS1iOTFmLTljZmEyYzdkODE2ZS8xL2wxTU1xenV1VzFLZnEtdVpl YjFvWDNzcjJyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQApIrLMA0EAgACMAcDBQMqBXqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKZzANBgkqhkiG9w0BAQsFAAOCAQEAH5nDhbSoERzs +mwM7uYEOVQVJj1lX/eidnThNmvQzDqHid0BmqzF/SdiQ9CrZneeR2+cVENTI2f0 7P+R1l6W1GX2sY0ZgsoOKWPHv6pyqISQob6TL9ZmFJ2qwJlj70n0VUFqRTvGABxh T+4NsT8ctgi4PF7yfobJbZ38rbN+aj/hxqMz1g4y28jOLPtQ4KBE6Q2fnbGk3BaC Vekwqs7Xu8XrKavy45IPYAD6HIt8Va3jnGFJxLoS18UhsQeesehq67cfhFAvd2Bm Oxc549aCR2EmfgZpBO3gEky7Zd41EFmSmLG3xuFtn7Pt56QOwAc49V+WyjGFqyYV uIDqxiTlpw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:28:35 2026 by rpki-client