This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer File: l2U-VqlPj_3pS15PKKeeRffvDNw.cer (raw, json) Hash identifier: Rhht4RYqOWHU01iwu1YLJIiQ66wK5TeQfJPtvZ/oh9U= Subject key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3657452E89051DB463981C5E44A0F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202808 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:65:74:52:e8:90:51:db:46:39:81:c5:e4:4a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:ab:9a:65:df:91:02:f7:af:6e:cf:e5:2b: ef:47:1c:f4:74:13:99:03:7f:25:b3:4d:31:c9:0a: 57:77:fe:fb:b5:f9:08:40:1c:83:a1:5c:0b:73:1e: e9:ab:19:26:0e:14:c8:ea:e3:58:4c:d7:ae:a1:1d: 03:af:4a:b6:d0:31:a7:36:55:bb:6b:a0:52:32:1a: a3:96:94:5f:a9:6e:5b:99:ed:dd:58:d2:ac:e0:f1: 18:60:0f:55:33:3b:5f:70:4e:0e:0b:19:86:51:50: fa:01:d2:4e:63:d0:4d:2d:f5:90:8f:e7:c9:a2:e7: cd:53:49:c9:9f:70:9d:03:47:14:da:bd:8e:6a:54: c9:ad:1a:89:6d:de:65:e6:8d:a3:bb:8f:be:54:42: 85:06:f5:ab:34:17:55:2f:8e:c6:18:ea:38:b0:f8: 28:8c:7f:25:5e:4e:4a:e3:e7:f9:0f:ce:38:9e:94: bc:40:59:48:b5:96:e3:9c:96:d9:50:2a:28:b9:01: 3c:71:db:de:08:2b:26:c7:af:d3:7b:90:35:6e:7c: e1:c9:0e:c1:f0:13:79:4d:52:2d:a2:d2:26:1a:2a: 8a:92:bd:9d:dc:1b:64:46:3f:bb:08:4b:08:27:0c: 0f:69:5e:eb:ce:76:b1:75:c3:15:7e:87:c2:01:57: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202808 Signature Algorithm: sha256WithRSAEncryption a4:44:32:c0:48:75:7a:0a:2b:25:78:2c:8c:a4:73:ad:4a:9a: 32:d8:fa:80:c0:6e:a2:72:c3:fa:8c:63:7a:4a:cc:8f:d0:d4: f8:4d:0e:54:4e:2f:50:32:77:a4:5d:24:0b:18:e1:e4:fc:48: cb:b8:8d:65:6d:f3:11:b3:24:b1:9a:cf:36:dd:20:17:0f:a5: df:42:e6:2e:bc:95:99:6a:5a:b5:d3:52:76:f7:d7:0e:47:91: f5:9e:42:8c:c7:27:53:8b:10:b5:8b:19:76:33:cc:31:84:ad: 65:52:5a:dd:1c:8e:bb:ba:20:4b:c0:f0:f4:52:4c:ff:38:63: 2d:8c:56:1a:5d:a7:63:1a:26:c4:69:06:a2:fa:9b:48:2c:e7: 6e:dc:0a:85:4c:99:b9:82:6a:69:3e:48:20:a0:84:be:bc:c5: 60:3e:6b:c0:22:ad:ff:fb:2a:61:d1:39:3e:2f:e9:57:52:7b: 9f:63:d8:02:ac:7b:ff:4d:b1:92:c4:96:01:46:2e:5b:4c:70: db:2c:b0:18:2f:d7:52:00:bc:86:33:01:6c:db:e1:2d:ce:2f: 0a:08:66:79:b6:e5:79:6f:fc:cc:53:f9:01:81:97:c4:12:69: b0:dc:ec:93:67:aa:4e:03:04:30:a0:c1:fd:a0:a7:5e:66:46: 8f:26:1d:0e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4o2V0UuiQUdtGOYHF5EoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzY1M2U1NmE5NGY4ZmZkZTk0YjVlNGYyOGE3OWU0NWY3ZWYwY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5irmmXfkQL3r27P5SvvRxz0dBOZ A38ls00xyQpXd/77tfkIQByDoVwLcx7pqxkmDhTI6uNYTNeuoR0Dr0q20DGnNlW7 a6BSMhqjlpRfqW5bme3dWNKs4PEYYA9VMztfcE4OCxmGUVD6AdJOY9BNLfWQj+fJ oufNU0nJn3CdA0cU2r2OalTJrRqJbd5l5o2ju4++VEKFBvWrNBdVL47GGOo4sPgo jH8lXk5K4+f5D844npS8QFlItZbjnJbZUCoouQE8cdveCCsmx6/Te5A1bnzhyQ7B 8BN5TVItotImGiqKkr2d3BtkRj+7CEsIJwwPaV7rznaxdcMVfofCAVetLwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJdlPlapT4/96UteTyinnkX37wzcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzhjZTE0 Ni1lMDdkLTQxZDAtYjEyNy0yOGM4OWM1MWI0YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvOGNlMTQ2 LWUwN2QtNDFkMC1iMTI3LTI4Yzg5YzUxYjRiMC8xL2wyVS1WcWxQal8zcFMxNVBL S2VlUmZmdkROdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYODANBgkqhkiG9w0BAQsFAAOCAQEApEQywEh1egor JXgsjKRzrUqaMtj6gMBuonLD+oxjekrMj9DU+E0OVE4vUDJ3pF0kCxjh5PxIy7iN ZW3zEbMksZrPNt0gFw+l30LmLryVmWpatdNSdvfXDkeR9Z5CjMcnU4sQtYsZdjPM MYStZVJa3RyOu7ogS8Dw9FJM/zhjLYxWGl2nYxomxGkGovqbSCznbtwKhUyZuYJq aT5IIKCEvrzFYD5rwCKt//sqYdE5Pi/pV1J7n2PYAqx7/02xksSWAUYuW0xw2yyw GC/XUgC8hjMBbNvhLc4vCghmebbleW/8zFP5AYGXxBJpsNzsk2eqTgMEMKDB/aCn XmZGjyYdDg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:13 2026 by rpki-client