This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer File: l7y-5E9M7wkZheVGpoVPnMsq2oo.cer (raw, json) Hash identifier: lhSM4l7atkIXNuM1hUkAW1DA7J0I1qAstyyszPLM7t4= Subject key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE4A3739DF0685D534270AADAF06E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41179 IP: 185.85.0.0/22 IP: 2a05:a940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4a:37:39:df:06:85:d5:34:27:0a:ad:af:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:54:8b:05:af:4b:0f:18:9c:f5:b8:1f:a8: 4a:f9:42:ed:66:e4:24:e1:cd:dc:b2:16:3e:cf:c1: 28:43:6c:04:41:db:f7:90:14:ca:5a:10:52:ee:25: 00:5a:f4:ea:3e:fa:93:c3:ed:31:0e:15:01:81:0d: 6b:f0:a6:a6:a5:c2:cc:9b:7c:61:fa:75:06:dd:55: 30:9b:92:88:76:1a:f3:8e:2b:30:10:2d:bc:dc:cd: 3f:4b:b7:bd:a3:f4:42:b4:c1:7d:a9:14:a6:71:ad: 30:32:94:09:fe:b2:aa:85:61:20:95:02:42:54:5c: 7c:44:18:eb:e8:50:7e:6a:4e:23:c3:86:a5:ac:a6: a1:1d:f8:cd:39:c7:93:29:2c:f9:ca:bf:fb:a0:4b: 73:8c:9a:67:91:6a:6d:1b:c1:b9:80:26:19:52:06: fc:5d:14:97:b5:52:77:43:09:ed:4e:ab:05:d0:fa: 28:85:02:a1:8b:87:e2:2c:9a:63:88:75:88:b4:31: b6:c5:d1:08:88:6f:a4:c1:ed:f4:82:a8:14:07:7d: 50:1c:cb:4d:1f:d6:b5:b9:7d:23:d5:7e:66:df:31: 3d:90:fc:93:d2:cf:a3:19:65:e1:ae:34:d7:e3:45: a3:1a:7b:8e:83:14:b5:f4:39:6e:97:d2:76:dd:aa: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.0.0/22 IPv6: 2a05:a940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41179 Signature Algorithm: sha256WithRSAEncryption 3c:48:6a:6c:6c:a3:c2:1c:f8:43:09:41:a1:ae:e0:9c:df:46: a7:c8:1a:3e:be:e3:ae:38:74:e0:a4:a4:ad:a3:a3:77:fc:bd: a1:07:d5:3f:87:4c:02:3d:5c:16:0c:2a:53:3f:73:3a:d0:f6: b3:aa:0e:4c:f3:89:28:86:08:10:77:f7:56:4c:10:95:3a:5b: 48:df:f1:31:ea:82:5b:0b:7a:53:27:5b:cd:d1:80:eb:dc:4e: 48:cf:9d:46:63:e5:39:b2:a8:a4:c6:6d:34:6f:d8:18:8c:23: 99:6a:66:eb:26:77:59:74:b2:32:a0:5e:64:c5:72:0e:72:e1: b2:0d:7f:b7:d7:97:4d:5f:01:0f:c6:6f:47:a7:24:e7:c0:dd: 60:a0:be:78:0b:39:10:f7:91:53:de:d6:6c:2a:02:e8:c5:da: 90:43:2f:30:2a:6a:c8:5b:e6:4a:0c:00:96:cc:81:41:dc:7a: 26:bc:f5:85:69:49:f6:2a:f6:33:75:86:0d:4f:7b:5f:7d:50: 17:24:ed:cb:45:76:00:32:69:2e:69:97:34:8e:fb:aa:12:46: 0c:c3:78:c5:2c:96:cf:53:c3:37:9d:1f:a6:94:69:0a:0f:a4: a8:d2:ad:b0:8f:a0:cc:cb:78:5a:f2:1d:e8:6a:1f:62:f2:99: cd:95:58:6c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87ko3Od8GhdU0JwqtrwbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2JjYmVlNDRmNGNlZjA5MTk4NWU1NDZhNjg1NGY5Y2NiMmFkYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbtUiwWvSw8YnPW4H6hK+ULtZuQk 4c3cshY+z8EoQ2wEQdv3kBTKWhBS7iUAWvTqPvqTw+0xDhUBgQ1r8KampcLMm3xh +nUG3VUwm5KIdhrzjiswEC283M0/S7e9o/RCtMF9qRSmca0wMpQJ/rKqhWEglQJC VFx8RBjr6FB+ak4jw4alrKahHfjNOceTKSz5yr/7oEtzjJpnkWptG8G5gCYZUgb8 XRSXtVJ3QwntTqsF0PoohQKhi4fiLJpjiHWItDG2xdEIiG+kwe30gqgUB31QHMtN H9a1uX0j1X5m3zE9kPyT0s+jGWXhrjTX40WjGnuOgxS19Dlul9J23apD3QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJe8vuRPTO8JGYXlRqaFT5zLKtqKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzBiMmVl Zi03NWU5LTQzYjItOTA4OC04MzAzYWQxMzcxZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvMGIyZWVm LTc1ZTktNDNiMi05MDg4LTgzMDNhZDEzNzFkZC8xL2w3eS01RTlNN3drWmhlVkdw b1ZQbk1zcTJvby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVUAMA0EAgACMAcDBQMqBalAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCg2zANBgkqhkiG9w0BAQsFAAOCAQEAPEhqbGyjwhz4 QwlBoa7gnN9Gp8gaPr7jrjh04KSkraOjd/y9oQfVP4dMAj1cFgwqUz9zOtD2s6oO TPOJKIYIEHf3VkwQlTpbSN/xMeqCWwt6UydbzdGA69xOSM+dRmPlObKopMZtNG/Y GIwjmWpm6yZ3WXSyMqBeZMVyDnLhsg1/t9eXTV8BD8ZvR6ck58DdYKC+eAs5EPeR U97WbCoC6MXakEMvMCpqyFvmSgwAlsyBQdx6Jrz1hWlJ9ir2M3WGDU97X31QFyTt y0V2ADJpLmmXNI77qhJGDMN4xSyWz1PDN50fppRpCg+kqNKtsI+gzMt4WvId6Gof YvKZzZVYbA== -----END CERTIFICATE-----Generated at Tue Jan 27 04:25:24 2026 by rpki-client