This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer File: mdXL9__sUlSnHvex7fem12x1liU.cer (raw, json) Hash identifier: Kyo4afK8vY7wnH0f6icDzlmwM8ejveCe10nIxAypKOY= Subject key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F222BA0947ED3609AAEF22A164D57 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60794 IP: 2001:67c:1744::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:22:2b:a0:94:7e:d3:60:9a:ae:f2:2a:16:4d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:a9:ea:ea:cd:4f:b0:67:ad:18:23:81:0e: 6a:7d:cd:3f:31:85:22:67:a0:46:ab:18:3a:64:99: ca:6e:1a:b0:e3:74:0a:7a:25:9c:c8:2d:b5:c2:7e: 2e:aa:16:dd:85:6a:41:ac:04:a9:de:02:48:7b:33: 24:70:31:fb:28:e3:a2:ed:19:21:09:89:4c:dc:ba: 6c:9d:6f:50:16:87:b2:f5:fa:6d:52:e3:45:fa:22: 4a:8b:40:20:7d:82:f9:ab:d0:c6:a7:d7:92:88:3c: 12:3d:c4:5e:b5:b1:5b:2e:ae:06:11:f6:ba:e2:d1: a5:5b:f0:23:93:2f:63:0d:30:b2:1b:3e:0e:88:a8: fd:6c:32:85:03:82:be:55:c2:d2:40:e2:ae:9e:7d: ca:43:34:f6:1e:45:60:43:5d:f5:13:3a:d7:d1:79: 34:99:fa:dc:2b:72:bf:a1:37:f2:e6:dd:68:7e:26: 2e:48:04:fd:a1:0e:4e:45:e9:f5:7b:26:3b:22:82: b1:79:c5:e4:0a:e5:c6:08:86:37:4e:77:1b:0b:86: 5d:33:0e:44:6c:5b:e8:d2:2e:84:f6:61:95:2b:f5: c6:ba:96:a9:3b:3f:21:ae:2f:3a:e7:2c:bb:aa:86: f4:d2:da:ac:a6:76:ab:fa:4e:21:98:79:ef:8c:80: 13:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1744::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60794 Signature Algorithm: sha256WithRSAEncryption 48:a6:e2:0e:70:e1:67:eb:ab:48:c0:ea:24:8a:79:bf:b1:9c: 5d:13:a0:1c:ad:5e:5d:5b:f4:26:ec:ac:6b:c5:fd:3b:0e:1a: 4c:35:94:cc:48:08:f7:94:33:c5:63:d4:09:60:fa:a7:ef:4e: 97:13:b7:65:11:c3:9d:21:b7:58:dd:58:9b:7f:b1:38:c9:c6: 28:5b:49:d2:af:79:56:30:a8:bd:d0:4a:5c:d1:5c:86:93:df: ae:9b:52:dc:82:5f:77:98:f7:0b:90:c7:5c:4a:7d:35:e5:ec: ae:c9:1a:9d:7e:2f:b7:68:04:05:ec:60:66:a7:d8:3a:19:0d: c5:12:7a:86:1f:29:fa:6e:5d:cc:eb:6c:66:eb:ed:ca:1a:3c: a5:a8:f2:5a:08:ca:84:1f:47:24:a0:af:03:d8:af:4d:f2:46: 47:a2:6d:41:c4:cf:2a:b7:e0:3a:40:a5:21:c4:e0:2c:79:6c: 0d:fc:0e:b5:25:2a:20:aa:7d:83:08:8f:b6:f7:79:e1:00:fb: 99:56:48:e9:62:7f:7e:e4:55:c7:cb:c0:af:6f:07:1a:8c:e6: 3b:1f:fa:ee:03:8e:14:c9:30:e4:c2:7e:01:64:07:bc:18:ba: f3:b2:aa:eb:b3:6c:2a:f5:32:1d:e1:c4:27:cc:71:00:a3:da: 11:2b:67:48 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8fyIroJR+02CarvIqFk1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWQ1Y2JmN2ZmZWM1MjU0YTcxZWY3YjFlZGY3YTZkNzZjNzU5NjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPmp6urNT7BnrRgjgQ5qfc0/MYUi Z6BGqxg6ZJnKbhqw43QKeiWcyC21wn4uqhbdhWpBrASp3gJIezMkcDH7KOOi7Rkh CYlM3LpsnW9QFoey9fptUuNF+iJKi0AgfYL5q9DGp9eSiDwSPcRetbFbLq4GEfa6 4tGlW/Ajky9jDTCyGz4OiKj9bDKFA4K+VcLSQOKunn3KQzT2HkVgQ131EzrX0Xk0 mfrcK3K/oTfy5t1ofiYuSAT9oQ5ORen1eyY7IoKxecXkCuXGCIY3TncbC4ZdMw5E bFvo0i6E9mGVK/XGupapOz8hri865yy7qob00tqspnar+k4hmHnvjIATcwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJnVy/f/7FJUpx73se33ptdsdZYlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzUyMzZl OS1mZjVhLTQwMTktOTRkNC1hZWFlNmUzNTkzYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvNTIzNmU5 LWZmNWEtNDAxOS05NGQ0LWFlYWU2ZTM1OTNhNy8xL21kWEw5X19zVWxTbkh2ZXg3 ZmVtMTJ4MWxpVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBdEMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDtejANBgkqhkiG9w0BAQsFAAOCAQEASKbiDnDhZ+urSMDqJIp5v7GcXROg HK1eXVv0Juysa8X9Ow4aTDWUzEgI95QzxWPUCWD6p+9OlxO3ZRHDnSG3WN1Ym3+x OMnGKFtJ0q95VjCovdBKXNFchpPfrptS3IJfd5j3C5DHXEp9NeXsrskanX4vt2gE BexgZqfYOhkNxRJ6hh8p+m5dzOtsZuvtyho8pajyWgjKhB9HJKCvA9ivTfJGR6Jt QcTPKrfgOkClIcTgLHlsDfwOtSUqIKp9gwiPtvd54QD7mVZI6WJ/fuRVx8vAr28H GozmOx/67gOOFMkw5MJ+AWQHvBi687Kq67NsKvUyHeHEJ8xxAKPaEStnSA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:46 2026 by rpki-client