This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer (raw, json) Hash identifier: 0ysxz2rQJ82AY3DkBfHo+7LIoJ2Qfi9q5kRlebGqIfc= Subject key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1549BBD44E45A513FC4E1C95D2199A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.199.171.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:49:bb:d4:4e:45:a5:13:fc:4e:1c:95:d2:19:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97c60d4d458cec3b8d618a01300642b588c3173b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:94:5b:5a:3c:cc:98:49:12:55:5c:19:cc: 05:8d:b1:e4:72:a0:0e:40:4f:f6:83:e9:38:fc:e3: 74:6b:5e:ae:31:28:50:96:c1:23:90:15:79:46:6b: 20:89:a6:f0:ad:55:f5:42:bd:ae:dd:4d:0a:19:8f: 51:7b:ea:ab:3e:9f:f5:7a:d2:cb:00:ed:03:ab:bf: f0:fc:50:0e:85:0c:ee:97:ab:da:61:18:c4:92:9c: dc:59:ba:2a:3b:4d:76:40:fd:5a:0e:e1:c0:25:32: 00:26:d9:0c:69:e4:80:2d:2a:c5:8d:2c:3a:38:e4: c0:cb:65:c2:ec:4e:3e:50:83:37:ee:73:a5:ce:d6: 09:4b:3a:52:18:37:a3:6e:e0:e4:5b:da:17:28:8a: 9c:95:43:10:16:ea:04:91:1e:8c:ef:10:c4:17:7a: ae:bd:c1:77:1f:71:f9:c2:b2:c2:b4:cf:be:0f:1c: 6e:9e:e6:34:6b:5b:e3:34:cd:b5:6b:15:59:9d:82: 6f:48:24:61:c2:93:34:e9:98:55:a1:fc:ea:7c:a6: de:d1:c3:40:5c:a7:7c:0d:da:ad:17:5a:64:27:b3: 19:86:1b:4a:4a:db:e0:6f:71:af:be:0b:04:00:9e: 34:ed:a1:31:b1:29:06:ec:7e:d4:ea:87:d8:84:4e: 34:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.171.0/24 Signature Algorithm: sha256WithRSAEncryption 42:c8:7a:00:5c:da:7c:a6:61:25:ca:95:ac:0f:eb:fb:3e:ea: 35:78:01:b8:ac:82:a5:8c:de:45:4e:67:1c:aa:bd:59:c1:e2: d5:14:49:e8:fe:0c:63:cc:1f:b3:6c:16:5f:f9:70:42:7a:08: 67:d1:a1:ca:87:2d:46:f7:13:0d:36:a9:57:d8:eb:e1:a0:42: f5:02:b0:f2:7c:45:53:8e:3d:cb:2c:f3:4d:98:7c:2b:d5:00: 0f:92:04:bd:66:c1:55:1b:49:c1:09:bf:75:de:f9:bb:99:a0: f0:c2:11:09:2e:79:72:91:e6:2c:e1:39:45:69:f6:97:82:ce: e1:7b:6a:a3:5f:9b:86:fe:76:cc:9c:f4:ef:05:fd:a2:e2:09: 60:3f:b9:fc:e9:31:7f:ef:7e:54:db:bf:3a:38:d1:be:ea:5c: ad:e3:cc:4e:36:95:5d:73:9a:cc:26:b7:f2:a9:96:93:04:5f: 90:20:f8:46:0c:e8:d2:4d:70:ee:e2:b0:b1:b2:0a:e7:be:7b: 17:2f:c4:65:aa:08:43:af:cd:6c:e4:da:ec:fe:d7:c2:7f:0a: 94:a7:3d:33:d9:14:4e:e1:ff:82:be:ad:fb:f1:03:ed:e1:20: d8:52:5d:4f:fd:8d:14:57:d4:74:10:a1:67:40:88:b7:95:59: 35:e1:88:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FUm71E5FpRP8ThyV0hmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2M2MGQ0ZDQ1OGNlYzNiOGQ2MThhMDEzMDA2NDJiNTg4YzMxNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mOUW1o8zJhJElVcGcwFjbHkcqAO QE/2g+k4/ON0a16uMShQlsEjkBV5RmsgiabwrVX1Qr2u3U0KGY9Re+qrPp/1etLL AO0Dq7/w/FAOhQzul6vaYRjEkpzcWboqO012QP1aDuHAJTIAJtkMaeSALSrFjSw6 OOTAy2XC7E4+UIM37nOlztYJSzpSGDejbuDkW9oXKIqclUMQFuoEkR6M7xDEF3qu vcF3H3H5wrLCtM++DxxunuY0a1vjNM21axVZnYJvSCRhwpM06ZhVofzqfKbe0cNA XKd8DdqtF1pkJ7MZhhtKStvgb3GvvgsEAJ407aExsSkG7H7U6ofYhE40CwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJfGDU1FjOw7jWGKATAGQrWIwxc7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2ViNGIx Ny1hYTZiLTRmYzItYTAzZi03YzAzNjE3ODEyNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZWI0YjE3 LWFhNmItNGZjMi1hMDNmLTdjMDM2MTc4MTI2Yy8xL2w4WU5UVVdNN0R1TllZb0JN QVpDdFlqREZ6cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8erMA0GCSqGSIb3DQEBCwUAA4IBAQBCyHoA XNp8pmElypWsD+v7Puo1eAG4rIKljN5FTmccqr1ZweLVFEno/gxjzB+zbBZf+XBC eghn0aHKhy1G9xMNNqlX2OvhoEL1ArDyfEVTjj3LLPNNmHwr1QAPkgS9ZsFVG0nB Cb913vm7maDwwhEJLnlykeYs4TlFafaXgs7he2qjX5uG/nbMnPTvBf2i4glgP7n8 6TF/735U2786ONG+6lyt48xONpVdc5rMJrfyqZaTBF+QIPhGDOjSTXDu4rCxsgrn vnsXL8RlqghDr81s5Nrs/tfCfwqUpz0z2RRO4f+Cvq378QPt4SDYUl1P/Y0UV9R0 EKFnQIi3lVk14YjO -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:57 2026 by rpki-client