This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer File: lN7qVibZ6DJkDx7N9_i7clckCEc.cer (raw, json) Hash identifier: 6MOjsoD+M1BTBuDkSD0LbpEybk1gtPqlOf2JbCIw9uY= Subject key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36C51F474E9220C7267A86615F016C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8635 AS: 13013 -- 13014 AS: 60410 AS: 203211 AS: 210873 IP: 2a02:9f8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c5:1f:47:4e:92:20:c7:26:7a:86:61:5f:01:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94deea5626d9e832640f1ecdf7f8bb7257240847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:bc:fa:20:7f:e1:74:12:56:85:30:9e:b6: 7b:f8:b7:87:8b:b9:a1:3d:06:f7:ad:eb:df:63:5b: fb:3e:23:7f:ea:e5:29:af:8b:9f:8b:f2:d1:f3:74: 1e:20:5f:d2:49:30:fa:54:d6:21:96:79:c5:02:e1: 19:64:c2:f1:67:c8:fc:52:b5:22:5e:94:95:24:b4: 77:3c:00:9a:24:fc:a3:96:72:9b:8d:f6:4e:7b:32: d1:dc:7e:88:ca:d2:cb:5f:ec:42:23:a7:06:79:d1: 3e:e8:5e:71:e5:33:60:b5:f2:d6:2a:f5:f8:73:33: 7c:9a:79:c3:db:fc:6b:51:48:9f:d6:ad:97:f3:92: 39:da:bd:8d:ef:30:89:e7:b8:56:eb:6e:da:d5:0d: de:8b:19:9f:28:e3:3a:6e:6f:83:df:b4:a3:4a:bb: f9:ae:7e:e4:df:7e:c6:9f:dd:78:b6:09:21:a5:16: ef:35:24:ac:4c:00:c4:7b:00:0e:1e:0f:2d:fc:60: dc:29:ad:05:bc:16:11:9a:1d:e4:6c:b8:31:02:83: 4e:91:d8:4f:24:69:6e:a8:b4:83:16:d8:80:91:52: f6:5f:f6:7c:5d:cd:8f:69:bc:f6:3a:a6:5e:42:be: 7e:6c:14:1d:a0:69:09:cd:ae:48:92:c6:8b:71:32: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:9f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8635 13013-13014 60410 203211 210873 Signature Algorithm: sha256WithRSAEncryption a8:93:90:30:07:5c:a7:99:21:eb:2d:52:b5:af:df:68:05:8e: 30:9f:c7:25:ef:7f:97:bc:6a:5e:b3:a3:71:7f:dd:67:cd:61: 23:50:36:b5:f5:f8:dd:6d:f3:a7:c0:6a:6d:f2:e6:6b:54:26: 34:67:4e:1d:0c:b6:d6:07:56:1c:3b:89:92:61:e6:48:33:57: ce:42:59:2b:27:11:f6:df:02:c8:0e:05:c5:81:4f:18:d4:a1: 9b:d7:56:4a:32:d2:f3:40:a2:68:73:d6:0b:21:9b:b3:7d:8a: 0d:97:29:bc:9b:15:69:6b:32:f9:2a:21:ed:60:9a:e6:16:6b: 08:45:04:3c:f8:cd:8d:54:89:78:51:45:7b:c5:73:89:e8:41: 27:39:40:61:f1:b9:5a:a5:da:b2:2d:ba:56:85:0f:ea:8a:b0: 9f:88:07:34:3d:ce:72:4e:47:22:08:7e:e7:22:9f:20:77:69: 2d:6c:1b:6c:e2:84:bb:2c:5b:aa:e3:d1:bd:c7:04:b4:45:38: c2:cb:d1:e7:04:ac:ca:3b:f5:ea:4f:91:15:f3:38:7f:30:c8: 91:76:df:dc:6e:51:ba:a2:0e:e3:58:6e:fe:f8:6e:7d:7b:e2: 3d:44:50:8f:5f:8b:29:01:f2:2e:be:94:78:2e:f3:0a:f9:cb: a8:ce:3b:7c -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt7NsUfR06SIMcmeoZhXwFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGRlZWE1NjI2ZDllODMyNjQwZjFlY2RmN2Y4YmI3MjU3MjQwODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8G8+iB/4XQSVoUwnrZ7+LeHi7mh PQb3revfY1v7PiN/6uUpr4ufi/LR83QeIF/SSTD6VNYhlnnFAuEZZMLxZ8j8UrUi XpSVJLR3PACaJPyjlnKbjfZOezLR3H6IytLLX+xCI6cGedE+6F5x5TNgtfLWKvX4 czN8mnnD2/xrUUif1q2X85I52r2N7zCJ57hW627a1Q3eixmfKOM6bm+D37SjSrv5 rn7k337Gn914tgkhpRbvNSSsTADEewAOHg8t/GDcKa0FvBYRmh3kbLgxAoNOkdhP JGluqLSDFtiAkVL2X/Z8Xc2Pabz2OqZeQr5+bBQdoGkJza5IksaLcTKQjwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFJTe6lYm2egyZA8ezff4u3JXJAhHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzM0NDdk ZC04ZGM0LTQwNWQtOWMwYi02ZmZjNWQ5ZTBmZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvMzQ0N2Rk LThkYzQtNDA1ZC05YzBiLTZmZmM1ZDllMGZlZC8xL2xON3FWaWJaNkRKa0R4N045 X2k3Y2xja0NFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgIJ+DAyBggrBgEFBQcBCAEB/wQjMCGgHzAd AgIhuzAIAgIy1QICMtYCAwDr+gIDAxnLAgMDN7kwDQYJKoZIhvcNAQELBQADggEB AKiTkDAHXKeZIestUrWv32gFjjCfxyXvf5e8al6zo3F/3WfNYSNQNrX1+N1t86fA am3y5mtUJjRnTh0MttYHVhw7iZJh5kgzV85CWSsnEfbfAsgOBcWBTxjUoZvXVkoy 0vNAomhz1gshm7N9ig2XKbybFWlrMvkqIe1gmuYWawhFBDz4zY1UiXhRRXvFc4no QSc5QGHxuVql2rItulaFD+qKsJ+IBzQ9znJORyIIfucinyB3aS1sG2zihLssW6rj 0b3HBLRFOMLL0ecErMo79epPkRXzOH8wyJF239xuUbqiDuNYbv74bn174j1EUI9f iykB8i6+lHgu8wr5y6jOO3w= -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:12 2026 by rpki-client