This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer File: levYBm8QkMMRnNtp6dTcQNkDBPg.cer (raw, json) Hash identifier: O3PTAm+UbmMmN3Glahsb0zQAPX0ZQp+GXjVmZ4rCNkI= Subject key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13B0FEB40046CC3C011F48DBF29612 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.51.24.0/22 IP: 2a01:af20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b0:fe:b4:00:46:cc:3c:01:1f:48:db:f2:96:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:5a:f1:b9:c5:7a:9d:af:71:a6:de:84:ea: 04:e3:17:70:32:9b:07:b3:5d:75:b3:78:08:20:58: 12:9a:29:9c:40:7d:24:42:d1:b3:2f:d6:ec:da:47: 1d:2c:ce:72:33:af:d1:eb:00:9a:9f:e5:69:e6:91: 12:4b:b1:60:75:f6:0d:c1:c2:0d:eb:80:c7:ae:d3: 2e:23:f3:31:57:ad:a8:ad:7c:bc:c8:2c:77:5a:7c: 76:7f:63:32:57:18:36:88:15:cc:a0:3f:03:f4:52: d2:2a:61:c8:30:09:57:73:cf:cd:c8:29:ea:34:f0: db:c7:3b:ed:99:2e:61:95:12:be:bc:95:53:3a:c1: 35:26:ef:bc:8b:57:a9:b6:b2:71:35:5d:73:8f:88: 8f:13:93:f6:d6:c7:a8:2e:a1:24:82:1d:b5:f0:88: e2:56:dd:e4:a8:ac:de:24:c0:e8:e6:60:62:33:db: fe:81:4a:e1:bf:c1:06:de:ae:ea:a9:20:c3:f7:83: 3d:ae:b5:83:73:51:8f:db:84:b7:b4:c3:5f:eb:79: 82:80:5b:f2:11:e8:52:12:59:bf:76:57:90:54:6a: 46:0b:4f:80:69:1b:30:65:b9:0d:f2:fa:6f:75:80: a7:9c:27:46:9b:df:cb:ba:52:d7:92:c2:e5:a4:bb: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.24.0/22 IPv6: 2a01:af20::/32 Signature Algorithm: sha256WithRSAEncryption a1:c4:7e:b3:02:2f:38:5b:4d:39:07:88:a7:74:40:ac:7e:cf: a4:26:8a:4f:30:3f:f1:96:db:a9:cb:6e:5f:e0:89:71:34:a7: b6:26:a1:ab:b1:40:b4:a4:39:b9:c1:da:af:87:b5:72:9a:4c: 6b:73:16:a4:a8:60:1f:d7:d6:99:aa:ba:64:14:06:7a:11:91: 4c:69:af:b8:e2:df:d6:4c:61:e3:06:ac:d3:dc:39:b4:0d:30: 88:15:a2:53:b7:13:12:0b:40:cc:ba:30:93:9e:a0:d3:98:75: 33:7d:8c:c9:93:80:bb:bf:e8:49:ae:fd:f8:f5:d3:37:d1:1a: 72:6e:c8:08:b0:66:b3:bd:60:98:33:cd:0e:b4:68:d7:c3:d4: 4b:98:c0:30:aa:f3:38:79:6a:f1:c9:07:d1:6b:86:4c:4e:24: 68:ea:d6:1e:12:89:2d:6d:3f:93:f4:06:7e:d3:f0:5f:d5:73: 2e:67:89:00:65:9d:7a:ba:1d:ce:3c:76:cf:83:4d:d7:59:ac: 41:29:91:58:93:b5:1a:11:b1:22:db:0f:0b:65:da:ea:cf:cc: 29:47:93:fe:dd:e6:b6:62:2d:28:da:72:6c:d2:05:18:64:d8: 2f:40:05:cc:9a:34:c6:f2:2b:10:d3:4c:95:4d:41:4a:8a:cb: 34:45:ec:d3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/E7D+tABGzDwBH0jb8pYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWViZDgwNjZmMTA5MGMzMTE5Y2RiNjllOWQ0ZGM0MGQ5MDMwNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Ba8bnFep2vcabehOoE4xdwMpsH s111s3gIIFgSmimcQH0kQtGzL9bs2kcdLM5yM6/R6wCan+Vp5pESS7FgdfYNwcIN 64DHrtMuI/MxV62orXy8yCx3Wnx2f2MyVxg2iBXMoD8D9FLSKmHIMAlXc8/NyCnq NPDbxzvtmS5hlRK+vJVTOsE1Ju+8i1eptrJxNV1zj4iPE5P21seoLqEkgh218Iji Vt3kqKzeJMDo5mBiM9v+gUrhv8EG3q7qqSDD94M9rrWDc1GP24S3tMNf63mCgFvy EehSElm/dleQVGpGC0+AaRswZbkN8vpvdYCnnCdGm9/LulLXksLlpLtLbQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJXr2AZvEJDDEZzbaenU3EDZAwT4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzBkZmYx Mi00ZTcyLTQzMGUtOWRmNi1iZGFhNmZiZDQzNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvMGRmZjEy LTRlNzItNDMwZS05ZGY2LWJkYWE2ZmJkNDM0Ny8xL2xldllCbThRa01NUm5OdHA2 ZFRjUU5rREJQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTMYMA0EAgACMAcDBQAqAa8gMA0GCSqGSIb3 DQEBCwUAA4IBAQChxH6zAi84W005B4indECsfs+kJopPMD/xltupy25f4IlxNKe2 JqGrsUC0pDm5wdqvh7VymkxrcxakqGAf19aZqrpkFAZ6EZFMaa+44t/WTGHjBqzT 3Dm0DTCIFaJTtxMSC0DMujCTnqDTmHUzfYzJk4C7v+hJrv349dM30RpybsgIsGaz vWCYM80OtGjXw9RLmMAwqvM4eWrxyQfRa4ZMTiRo6tYeEoktbT+T9AZ+0/Bf1XMu Z4kAZZ16uh3OPHbPg03XWaxBKZFYk7UaEbEi2w8LZdrqz8wpR5P+3ea2Yi0o2nJs 0gUYZNgvQAXMmjTG8isQ00yVTUFKiss0RezT -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:48 2026 by rpki-client