This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer (raw, json) Hash identifier: XQwsXbHMnyrSY5FDnOB6zndRFuWCQlzlaR9rjyxfgD0= Subject key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7B3551C168DB1776BF9B70349139F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204547 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b3:55:1c:16:8d:b1:77:6b:f9:b7:03:49:13:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:aa:a6:cb:92:44:22:00:f6:fb:ac:73:7a: bf:e9:a1:75:29:94:73:ee:1c:d8:bb:4c:20:df:ad: 20:8e:69:5b:b5:8d:32:62:d6:e4:32:b0:a4:88:28: cb:aa:93:09:8f:1f:03:07:99:77:3d:ce:e7:93:f9: fc:cb:fe:8c:ac:ff:b9:51:fd:01:c6:89:76:64:b3: 4d:f9:7f:b3:99:af:64:85:e6:40:af:32:b1:8a:5b: 64:c6:37:58:57:22:4a:69:9e:f1:35:01:2b:de:6a: 48:15:8a:f7:f1:90:35:88:b3:e1:92:f4:16:e3:7a: 8e:34:60:8a:68:f3:42:88:74:e9:5e:94:6a:9b:19: 73:60:e4:2f:a8:a9:d7:b5:84:65:44:7b:a7:cd:9f: 1d:b0:48:80:51:51:79:52:92:fa:31:aa:d6:7c:b2: e8:27:9b:e4:bf:48:9b:8b:29:b0:27:8d:c9:7e:ae: 23:e4:52:9d:03:01:b2:14:67:bd:90:dc:db:a4:e2: a6:ba:25:2e:e5:48:57:40:f5:03:de:df:f1:c0:0f: 27:c8:a3:e1:80:bc:0c:9e:04:06:94:07:a0:d2:16: b3:51:68:bb:73:83:e2:4f:d7:db:e1:d2:bd:52:f2: 56:4f:7d:ea:24:c2:84:c1:0b:06:64:d9:82:54:31: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204547 Signature Algorithm: sha256WithRSAEncryption 89:37:fc:a4:1b:37:ff:8e:2a:8f:fa:7f:7f:91:8a:4f:45:85: ff:c8:7f:81:1d:70:32:36:ac:47:97:a2:40:28:c0:41:47:b7: 6c:d4:66:b8:8c:71:62:b5:94:9d:a8:1e:d8:7f:a3:48:82:1b: af:16:4f:99:45:2f:b9:dd:24:86:b1:a3:a0:d0:1a:0c:05:63: 56:f8:95:cd:5d:8f:24:ac:dc:d8:97:d7:61:84:53:a8:ba:62: d2:07:58:4d:b5:61:35:2f:ae:52:6f:c0:e2:04:f1:75:b3:35: 05:dd:60:dc:0d:78:0e:07:35:93:44:9e:99:d0:37:3f:23:8f: 5a:78:4d:ac:4b:2d:bd:ff:87:f1:ad:47:bd:01:18:56:42:7c: b2:51:9d:51:27:3e:57:49:a8:f0:7a:4d:0b:db:a6:75:db:38: 90:5b:cd:a4:6e:62:e3:94:0f:f4:bc:4e:58:79:38:d7:12:40: 08:78:04:16:24:2e:80:0a:e4:39:c1:ed:e2:b9:c8:4f:56:b1: 49:85:78:ca:3c:f1:67:b8:3a:a0:d4:53:eb:1f:aa:7c:46:5b: 49:5b:5e:f8:bb:be:8a:9c:e2:00:75:2e:ef:57:36:97:f0:a4: 13:b7:53:23:f7:24:72:fc:25:cd:27:13:97:38:6e:93:29:05: 5e:d6:9d:9b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6x7NVHBaNsXdr+bcDSROfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzc4Y2M5YzU5NGJjOGU4ZjE0NTQ1NmY0MTU2NmQ4Y2JkNGFhZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLuqpsuSRCIA9vusc3q/6aF1KZRz 7hzYu0wg360gjmlbtY0yYtbkMrCkiCjLqpMJjx8DB5l3Pc7nk/n8y/6MrP+5Uf0B xol2ZLNN+X+zma9kheZArzKxiltkxjdYVyJKaZ7xNQEr3mpIFYr38ZA1iLPhkvQW 43qONGCKaPNCiHTpXpRqmxlzYOQvqKnXtYRlRHunzZ8dsEiAUVF5UpL6MarWfLLo J5vkv0ibiymwJ43Jfq4j5FKdAwGyFGe9kNzbpOKmuiUu5UhXQPUD3t/xwA8nyKPh gLwMngQGlAeg0hazUWi7c4PiT9fb4dK9UvJWT33qJMKEwQsGZNmCVDHuBQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJd4zJxZS8jo8UVFb0FWbYy9Sq0+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2M2MDVm Yi1kZGRjLTQ3NGMtOGQ0OC1lODAyY2Q2ZGE2MDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvYzYwNWZi LWRkZGMtNDc0Yy04ZDQ4LWU4MDJjZDZkYTYwOC8xL2wzak1uRmxMeU9qeFJVVnZR Vlp0akwxS3JUNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfAzANBgkqhkiG9w0BAQsFAAOCAQEAiTf8pBs3/44q j/p/f5GKT0WF/8h/gR1wMjasR5eiQCjAQUe3bNRmuIxxYrWUnage2H+jSIIbrxZP mUUvud0khrGjoNAaDAVjVviVzV2PJKzc2JfXYYRTqLpi0gdYTbVhNS+uUm/A4gTx dbM1Bd1g3A14Dgc1k0SemdA3PyOPWnhNrEstvf+H8a1HvQEYVkJ8slGdUSc+V0mo 8HpNC9umdds4kFvNpG5i45QP9LxOWHk41xJACHgEFiQugArkOcHt4rnIT1axSYV4 yjzxZ7g6oNRT6x+qfEZbSVte+Lu+ipziAHUu71c2l/CkE7dTI/ckcvwlzScTlzhu kykFXtadmw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:44 2026 by rpki-client