This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer File: l2lJAzf2c8ZOORJK6JgbA05QEno.cer (raw, json) Hash identifier: Xd1IQEzfozwgmgdrJIQOFZ3DTfFDG8Y/KH5zMchWb1k= Subject key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6EA25406CE30EBCB8363E0A1AF020 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197599 IP: 91.223.221.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ea:25:40:6c:e3:0e:bc:b8:36:3e:0a:1a:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9769490337f673c64e39124ae8981b034e50127a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:66:66:37:67:86:11:3a:b8:fe:20:96:44: 53:6c:ef:bb:d9:d1:2c:65:67:bc:d9:db:e2:00:77: e9:d1:2f:eb:3c:c2:6e:89:76:9b:d6:fb:9a:ca:1d: 82:6c:98:5e:5c:2e:a3:1d:d0:4d:1f:ff:96:ba:5c: 73:c1:66:1c:4d:f2:8c:47:8f:f8:de:18:e2:95:2c: 0e:4a:b8:e2:68:b7:c7:d2:09:ca:a7:92:46:c2:e7: 4e:c0:29:bd:27:79:0d:0d:e0:6a:40:81:3a:ee:03: 6a:05:fa:0c:98:60:f2:37:b5:d2:ed:67:39:c7:52: cf:65:61:1e:07:a6:1b:9c:7f:75:f7:25:1f:4f:c7: aa:04:25:fe:81:8e:37:5e:a9:b4:44:60:6c:7a:4f: 9e:a5:47:97:52:e2:69:3d:fe:56:5e:ce:70:1c:99: 2c:0f:a5:c7:c4:59:43:80:27:4f:c6:66:b9:6d:a6: 87:ad:f0:3f:7a:f8:74:98:0d:77:13:11:9e:5b:11: c8:1e:b4:99:c5:4e:bc:3b:a8:3e:2f:d0:3b:13:f1: 68:0f:73:f7:f9:6d:aa:82:d9:6f:26:17:f7:bd:33: d1:7f:35:81:ba:1d:63:5a:9d:80:0d:e2:be:5a:3e: 01:48:06:3e:0d:5e:60:73:2e:33:55:62:3e:06:bd: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.221.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197599 Signature Algorithm: sha256WithRSAEncryption 12:d2:c4:aa:58:b2:55:84:8d:b0:4d:ec:a9:fe:81:d7:bb:4c: 79:09:8a:8e:7c:de:86:05:80:22:ff:91:14:fc:95:5a:a0:2a: db:09:89:5e:0c:b9:64:60:05:5e:42:20:cc:0b:21:3d:b1:6c: b8:0b:9d:4c:ee:60:19:51:30:27:4b:f6:be:8d:57:48:8d:5c: da:a8:f1:7e:11:11:a9:62:4e:d8:ca:e2:66:fe:da:8f:c6:9f: 4d:ff:9d:3a:3c:4c:99:2a:c6:3e:37:78:53:9f:45:5b:89:93: 5f:f8:5f:81:fb:b8:30:e3:47:ec:fe:ec:4c:33:1c:e5:81:fc: 55:14:46:ec:21:b6:9c:e5:c3:f0:48:49:ee:bd:18:ef:b9:73: 44:a3:1d:57:12:e8:40:23:50:3e:12:8f:0c:90:52:b4:5c:7f: 56:8c:6c:19:31:16:00:c5:88:e6:14:06:cf:2e:f8:85:1c:1c: 78:85:66:d2:ad:15:e7:56:bf:38:fd:29:78:33:a0:08:33:29: 11:d7:1b:e9:84:81:8b:a1:55:d2:d4:54:1c:5b:50:6d:14:ba: 2d:47:57:ab:4d:c0:df:52:93:27:76:6c:48:7d:23:01:af:09: c1:1b:64:91:a4:2c:00:5c:ff:90:db:46:b3:2d:2d:f3:99:51: fe:b1:99:0f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+puolQGzjDry4Nj4KGvAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzY5NDkwMzM3ZjY3M2M2NGUzOTEyNGFlODk4MWIwMzRlNTAxMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuZmZjdnhhE6uP4glkRTbO+72dEs ZWe82dviAHfp0S/rPMJuiXab1vuayh2CbJheXC6jHdBNH/+WulxzwWYcTfKMR4/4 3hjilSwOSrjiaLfH0gnKp5JGwudOwCm9J3kNDeBqQIE67gNqBfoMmGDyN7XS7Wc5 x1LPZWEeB6YbnH919yUfT8eqBCX+gY43Xqm0RGBsek+epUeXUuJpPf5WXs5wHJks D6XHxFlDgCdPxma5baaHrfA/evh0mA13ExGeWxHIHrSZxU68O6g+L9A7E/FoD3P3 +W2qgtlvJhf3vTPRfzWBuh1jWp2ADeK+Wj4BSAY+DV5gcy4zVWI+Br24LQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJdpSQM39nPGTjkSSuiYGwNOUBJ6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2M4N2I3 Ni0xYjhhLTRiOGEtYjQ3Yy1jMTIzZjc2NjI4Y2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvYzg3Yjc2 LTFiOGEtNGI4YS1iNDdjLWMxMjNmNzY2MjhjYi8xL2wybEpBemYyYzhaT09SSks2 SmdiQTA1UUVuby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9/dMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMD3zANBgkqhkiG9w0BAQsFAAOCAQEAEtLEqliyVYSNsE3sqf6B17tMeQmKjnze hgWAIv+RFPyVWqAq2wmJXgy5ZGAFXkIgzAshPbFsuAudTO5gGVEwJ0v2vo1XSI1c 2qjxfhERqWJO2MriZv7aj8afTf+dOjxMmSrGPjd4U59FW4mTX/hfgfu4MONH7P7s TDMc5YH8VRRG7CG2nOXD8EhJ7r0Y77lzRKMdVxLoQCNQPhKPDJBStFx/VoxsGTEW AMWI5hQGzy74hRwceIVm0q0V51a/OP0peDOgCDMpEdcb6YSBi6FV0tRUHFtQbRS6 LUdXq03A31KTJ3ZsSH0jAa8JwRtkkaQsAFz/kNtGsy0t85lR/rGZDw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:34 2026 by rpki-client