This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer File: l5SL1vKtFY5iT9jonp718b2x05o.cer (raw, json) Hash identifier: 5s5Ia3CKn2+0LIHiqoZkSe/URDICda2ZigBXSsV9wFI= Subject key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80D9603282C4444B57EB94928EF13C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209087 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d9:60:32:82:c4:44:4b:57:eb:94:92:8e:f1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:ed:77:c7:7b:34:f7:f6:58:6b:03:df:fc: 0c:66:93:32:ce:11:43:19:6e:2b:51:74:7a:7f:fc: 8a:de:8f:d7:c8:81:d0:a1:9b:d6:74:32:25:fb:a3: 4a:68:54:50:f2:53:10:8c:b7:40:a2:49:b0:fb:1d: 77:76:a3:bd:09:25:7a:93:1a:12:72:5d:cc:2c:93: 3d:f4:5e:2e:e0:2b:15:df:7a:a6:de:82:65:36:4b: 67:4a:8b:c7:1b:f0:64:d0:ae:fc:fc:7d:8c:0e:0f: db:4b:a5:e9:a8:46:ff:87:54:b4:a0:ae:30:44:a4: 55:40:14:0a:10:43:9a:a5:80:6b:0a:a8:b2:0b:0d: 3c:27:3c:3f:60:36:22:5b:74:aa:88:da:3a:14:f4: 80:8e:c4:94:a1:6b:0f:11:3b:77:6d:2a:22:fc:05: bc:14:9e:2a:08:14:c6:c8:f2:b4:a5:4a:6d:cb:f1: be:cc:92:29:8a:a3:14:2c:5c:87:14:c7:7e:83:56: e3:06:f0:17:29:04:66:f4:da:bf:8b:25:52:74:ee: 82:07:81:47:48:d4:42:d3:1e:73:a4:36:35:9b:d5: 47:f5:6a:52:42:07:39:37:7f:ec:b4:c6:7b:ff:58: 46:45:0a:b7:a7:7e:b7:1d:86:c2:b2:4d:a7:f1:e0: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209087 Signature Algorithm: sha256WithRSAEncryption 92:06:fa:10:49:4a:80:59:7e:f9:28:d3:91:d7:2b:f6:6a:86: 87:87:2a:6f:a1:1b:2a:1f:2f:44:a0:db:b2:2d:9b:c5:ef:47: 58:cd:dd:f9:73:b2:b4:a3:9f:78:a2:45:31:9c:09:0a:2e:e9: f7:a7:f1:4d:cc:da:8b:63:66:a9:36:79:27:41:81:f4:3f:3e: 72:4d:05:9f:17:02:49:53:75:0b:24:19:8a:b2:15:d6:da:51: 35:fa:b5:42:02:c1:8c:7a:ce:6d:8b:63:42:9a:ee:73:36:c4: d0:29:e4:3a:7c:b1:9c:f1:24:2f:d6:14:13:81:19:d6:65:d0: 43:c4:fc:8f:f6:62:32:22:1c:d3:9e:7c:9b:68:24:bd:35:98: 37:aa:30:48:4b:ab:ec:32:2f:16:87:22:38:f9:70:0e:51:48: cf:69:ba:c3:77:00:cb:e5:9e:c3:8f:0b:29:8e:3a:a2:cc:78: f6:ea:2a:cb:71:60:47:41:5e:97:92:3d:39:57:62:7c:79:39: ad:81:b6:04:6b:40:74:21:d2:49:da:c4:3f:cb:9c:bf:d7:df: 23:5c:f7:95:ca:bc:3c:fa:48:75:77:33:ba:b5:c3:8e:2b:43: c8:3c:a0:ae:18:92:d8:8e:eb:4a:71:77:77:7e:94:d5:7c:a3: fa:73:2e:c2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8gNlgMoLEREtX65SSjvE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzk0OGJkNmYyYWQxNThlNjI0ZmQ4ZTg5ZTllZjVmMWJkYjFkMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxvtd8d7NPf2WGsD3/wMZpMyzhFD GW4rUXR6f/yK3o/XyIHQoZvWdDIl+6NKaFRQ8lMQjLdAokmw+x13dqO9CSV6kxoS cl3MLJM99F4u4CsV33qm3oJlNktnSovHG/Bk0K78/H2MDg/bS6XpqEb/h1S0oK4w RKRVQBQKEEOapYBrCqiyCw08Jzw/YDYiW3SqiNo6FPSAjsSUoWsPETt3bSoi/AW8 FJ4qCBTGyPK0pUpty/G+zJIpiqMULFyHFMd+g1bjBvAXKQRm9Nq/iyVSdO6CB4FH SNRC0x5zpDY1m9VH9WpSQgc5N3/stMZ7/1hGRQq3p363HYbCsk2n8eB0uQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJeUi9byrRWOYk/Y6J6e9fG9sdOaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2M3Mjdi Zi03NzA5LTRiMzMtYjYxOC1hNmM1MDAwYzcxODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYzcyN2Jm LTc3MDktNGIzMy1iNjE4LWE2YzUwMDBjNzE4NC8xL2w1U0wxdkt0Rlk1aVQ5am9u cDcxOGIyeDA1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwvzANBgkqhkiG9w0BAQsFAAOCAQEAkgb6EElKgFl+ +SjTkdcr9mqGh4cqb6EbKh8vRKDbsi2bxe9HWM3d+XOytKOfeKJFMZwJCi7p96fx Tczai2NmqTZ5J0GB9D8+ck0FnxcCSVN1CyQZirIV1tpRNfq1QgLBjHrObYtjQpru czbE0CnkOnyxnPEkL9YUE4EZ1mXQQ8T8j/ZiMiIc0558m2gkvTWYN6owSEur7DIv FociOPlwDlFIz2m6w3cAy+Wew48LKY46osx49uoqy3FgR0Fel5I9OVdifHk5rYG2 BGtAdCHSSdrEP8ucv9ffI1z3lcq8PPpIdXczurXDjitDyDygrhiS2I7rSnF3d36U 1Xyj+nMuwg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:21 2026 by rpki-client