This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer File: l6qlVaMp7dhmBswOPilr1Hisc94.cer (raw, json) Hash identifier: f4SAYBKCbTvXPhgpH149xz1mGaVrfRC10uRz3pqePRw= Subject key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1E3A46B1EBFC638BEE03DD9A8299 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204431 IP: 185.249.16.0/22 IP: 2a0d:f980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1e:3a:46:b1:eb:fc:63:8b:ee:03:dd:9a:82:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97aaa555a329edd86606cc0e3e296bd478ac73de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:e1:d1:07:53:dc:ed:54:d5:8b:3f:97:7f: 76:51:f0:a6:6e:8e:3c:b5:ec:0e:01:bd:ce:a8:db: 1e:55:51:b1:26:88:0d:90:74:be:7c:56:ce:f1:b4: 6f:68:24:e1:66:45:50:b0:7f:e2:99:ca:13:51:de: a1:a6:5f:c1:dc:3c:aa:b2:c3:8b:07:2c:95:91:cd: 27:7e:7d:41:7b:4c:b2:17:6a:37:04:7a:50:43:c3: fd:5f:83:66:63:b3:d6:e0:fb:b6:18:e5:ff:01:d8: 6d:e6:b7:0f:fc:57:b2:da:03:e0:9d:4c:e4:7d:50: 28:5f:1e:f0:ea:3f:98:22:06:2d:a0:e9:0e:8d:87: 91:3a:e6:eb:20:ed:89:86:9a:71:80:df:ab:9c:05: 37:49:53:1a:c1:29:c1:50:88:c9:5d:f8:42:28:4f: 15:1f:c5:8b:45:4f:13:d2:12:0c:a5:c8:4e:4e:28: 9c:b5:8b:c8:f7:4d:8d:7b:7b:53:d0:bb:d3:5f:41: 75:33:85:ad:79:2e:14:ab:0e:3b:73:9c:ab:23:1b: 2d:9b:49:cd:5c:02:bd:70:02:7d:a2:38:08:3d:6a: ea:e9:d5:ef:a2:32:c0:8d:26:93:6f:93:40:a5:38: a3:e6:b5:17:4a:d1:e4:b1:da:fc:d4:4e:2c:e1:e7: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.16.0/22 IPv6: 2a0d:f980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204431 Signature Algorithm: sha256WithRSAEncryption 2d:0d:9b:51:48:ea:15:ca:c6:f2:48:8f:26:1e:25:76:2a:1b: b0:4f:73:99:1e:df:39:13:12:b4:9f:8f:fd:93:e8:a1:f5:17: ba:8a:a7:fe:8e:db:f0:90:e5:24:35:cc:48:42:9d:06:3c:fd: a8:f0:90:65:a8:15:2e:fd:50:33:68:0b:d5:bb:72:90:9a:dd: f9:0b:a6:36:a5:98:90:53:59:b4:12:02:c7:57:7e:8b:b5:f4: 87:0e:d4:48:87:c3:68:88:01:ee:c2:4f:95:60:b3:b1:5b:96: 92:84:84:2b:46:6b:f8:f1:df:b7:27:d6:50:cc:7b:12:4d:21: 7e:4c:83:3d:54:9e:ff:56:df:c1:99:01:83:16:05:a8:e5:f0: 27:66:3f:02:ec:65:10:9e:14:f4:d4:5b:ef:fa:8c:6a:3a:bc: bb:f9:c5:06:25:13:de:65:0c:fe:3b:fa:1e:19:57:1a:f6:b4: 36:d1:b8:f7:ea:2a:7b:ef:60:eb:d6:5f:e9:9c:21:43:2e:58: c4:99:a4:07:d9:1e:fa:ae:14:ce:b3:d3:12:ef:27:39:c8:f3: 79:46:93:a4:ff:b8:bf:b9:66:68:2b:b7:50:7d:c6:58:50:ac: 06:0e:8f:2e:75:0c:19:13:b6:59:73:4d:0e:a2:8d:ac:5e:b0: e9:a1:56:d4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26x46RrHr/GOL7gPdmoKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2FhYTU1NWEzMjllZGQ4NjYwNmNjMGUzZTI5NmJkNDc4YWM3M2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvfh0QdT3O1U1Ys/l392UfCmbo48 tewOAb3OqNseVVGxJogNkHS+fFbO8bRvaCThZkVQsH/imcoTUd6hpl/B3DyqssOL ByyVkc0nfn1Be0yyF2o3BHpQQ8P9X4NmY7PW4Pu2GOX/Adht5rcP/Fey2gPgnUzk fVAoXx7w6j+YIgYtoOkOjYeROubrIO2JhppxgN+rnAU3SVMawSnBUIjJXfhCKE8V H8WLRU8T0hIMpchOTiictYvI902Ne3tT0LvTX0F1M4WteS4Uqw47c5yrIxstm0nN XAK9cAJ9ojgIPWrq6dXvojLAjSaTb5NApTij5rUXStHksdr81E4s4efU7QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJeqpVWjKe3YZgbMDj4pa9R4rHPeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzExOTVh Yi1lZDQxLTQ1MmYtYmMyMi03ZmQwZGVhZTMyYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvMTE5NWFi LWVkNDEtNDUyZi1iYzIyLTdmZDBkZWFlMzJjNS8xL2w2cWxWYU1wN2RobUJzd09Q aWxyMUhpc2M5NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufkQMA0EAgACMAcDBQMqDfmAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMejzANBgkqhkiG9w0BAQsFAAOCAQEALQ2bUUjqFcrG 8kiPJh4ldiobsE9zmR7fORMStJ+P/ZPoofUXuoqn/o7b8JDlJDXMSEKdBjz9qPCQ ZagVLv1QM2gL1btykJrd+QumNqWYkFNZtBICx1d+i7X0hw7USIfDaIgB7sJPlWCz sVuWkoSEK0Zr+PHftyfWUMx7Ek0hfkyDPVSe/1bfwZkBgxYFqOXwJ2Y/AuxlEJ4U 9NRb7/qMajq8u/nFBiUT3mUM/jv6HhlXGva0NtG49+oqe+9g69Zf6ZwhQy5YxJmk B9ke+q4UzrPTEu8nOcjzeUaTpP+4v7lmaCu3UH3GWFCsBg6PLnUMGRO2WXNNDqKN rF6w6aFW1A== -----END CERTIFICATE-----Generated at Tue Jan 27 09:58:21 2026 by rpki-client