This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer File: leBbGUrhvlKWmltBBFV_8ELBYCo.cer (raw, json) Hash identifier: GqWLXaAYgV3jNgQ6/NANdXR4Q5TKqnK+CGsus209ihU= Subject key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3D2A74D97CA4CD97CEDDF7A1A621 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.47.245.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3d:2a:74:d9:7c:a4:cd:97:ce:dd:f7:a1:a6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95e05b194ae1be52969a5b4104557ff042c1602a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:ea:de:2b:c9:57:0e:3d:bb:32:f3:68:9e: 34:a5:1d:48:64:53:75:97:60:f3:d2:4b:ec:d4:09: 2c:36:03:ca:b9:6c:11:21:98:24:a2:c5:90:b2:b8: fd:83:d4:39:50:30:ca:c4:12:5c:2d:3b:b1:12:e5: 56:3b:d2:c8:8e:af:1b:dc:f1:43:ae:7a:50:52:83: 58:ae:c8:6d:76:fe:e9:c8:58:cd:f5:66:05:5b:2f: a4:e0:ca:20:c6:93:8c:a6:e2:19:98:7e:e7:b4:07: 4e:26:df:63:9e:c0:16:07:66:e5:24:0a:5a:0f:a7: 6a:46:d0:f2:ea:61:ea:a3:94:c9:ad:fc:aa:94:a6: c9:49:46:94:3d:d8:8b:8d:39:6f:90:1c:32:30:c9: b1:c2:0a:22:a1:b7:6e:6e:20:a6:15:73:76:03:2f: a8:08:c2:41:48:3c:4c:7e:3a:36:01:45:3f:df:1c: 96:3e:92:0f:d1:6d:0f:36:37:f2:5c:c8:4f:7e:6c: c4:b1:eb:6b:df:06:33:3d:c1:7a:ca:43:95:20:d3: 54:c6:3e:6e:30:8d:08:e2:23:81:c5:c3:bf:09:27: 55:c8:0f:8b:5c:3a:52:38:2d:06:3d:c7:9a:dd:dd: 07:56:f4:d0:09:5f:93:80:23:ce:56:df:65:a7:01: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.245.0/24 Signature Algorithm: sha256WithRSAEncryption 17:a6:52:28:98:76:f2:f3:3a:40:fe:16:ba:6c:06:47:b7:d7: 24:1c:59:e7:fd:17:b6:71:b3:fe:21:94:ed:05:bb:12:b0:fd: aa:55:0b:9b:2d:03:7c:d3:59:8d:8e:74:69:6b:fc:c6:b3:f0: 8a:05:93:58:c9:cf:56:bc:e0:0f:7e:45:ef:e3:9e:da:c5:8f: 00:db:44:91:1d:a0:0d:e1:84:80:ea:fa:1f:59:42:2c:18:37: 39:1d:c8:71:12:d6:94:55:47:c1:f0:8a:aa:88:b3:04:94:0c: 33:5f:d7:7a:53:3e:b4:4c:fb:bb:48:fd:05:15:5f:77:77:82: d1:95:33:e9:90:ef:17:7c:dc:86:dd:34:ce:ea:70:7f:fc:9e: 96:18:c9:85:09:65:fe:61:b9:47:ea:48:ee:0b:90:a3:7d:0a: 21:c8:e5:ca:6c:4f:11:40:e4:d9:05:ec:b2:3b:db:b1:d9:eb: 30:e7:00:f1:82:98:ef:81:73:83:51:ac:5f:a0:61:8a:15:80: 0c:bd:3e:c6:1f:29:08:41:2b:24:16:d8:41:67:75:90:f8:a4: ad:67:f2:66:22:de:d0:37:e5:f6:10:9b:58:4f:e3:7b:74:57: a3:52:74:a7:d8:bc:07:78:83:bf:b4:b2:a8:c8:99:40:29:3c: cb:03:3d:57 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57T0qdNl8pM2Xzt33oaYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWUwNWIxOTRhZTFiZTUyOTY5YTViNDEwNDU1N2ZmMDQyYzE2MDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKXq3ivJVw49uzLzaJ40pR1IZFN1 l2Dz0kvs1AksNgPKuWwRIZgkosWQsrj9g9Q5UDDKxBJcLTuxEuVWO9LIjq8b3PFD rnpQUoNYrshtdv7pyFjN9WYFWy+k4MogxpOMpuIZmH7ntAdOJt9jnsAWB2blJApa D6dqRtDy6mHqo5TJrfyqlKbJSUaUPdiLjTlvkBwyMMmxwgoiobdubiCmFXN2Ay+o CMJBSDxMfjo2AUU/3xyWPpIP0W0PNjfyXMhPfmzEsetr3wYzPcF6ykOVINNUxj5u MI0I4iOBxcO/CSdVyA+LXDpSOC0GPcea3d0HVvTQCV+TgCPOVt9lpwGf5QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJXgWxlK4b5SlppbQQRVf/BCwWAqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzhlZmMw Zi1iOTY4LTQ2ZWQtOTkyNC1kZDE4NWM3MzU1YjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvOGVmYzBm LWI5NjgtNDZlZC05OTI0LWRkMTg1YzczNTViOC8xL2xlQmJHVXJodmxLV21sdEJC RlZfOEVMQllDby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwy/1MA0GCSqGSIb3DQEBCwUAA4IBAQAXplIo mHby8zpA/ha6bAZHt9ckHFnn/Re2cbP+IZTtBbsSsP2qVQubLQN801mNjnRpa/zG s/CKBZNYyc9WvOAPfkXv457axY8A20SRHaAN4YSA6vofWUIsGDc5HchxEtaUVUfB 8IqqiLMElAwzX9d6Uz60TPu7SP0FFV93d4LRlTPpkO8XfNyG3TTO6nB//J6WGMmF CWX+YblH6kjuC5CjfQohyOXKbE8RQOTZBeyyO9ux2esw5wDxgpjvgXODUaxfoGGK FYAMvT7GHykIQSskFthBZ3WQ+KStZ/JmIt7QN+X2EJtYT+N7dFejUnSn2LwHeIO/ tLKoyJlAKTzLAz1X -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:10 2026 by rpki-client