This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer File: q8Legg4C88P4bluMnEndxJMlEj8.cer (raw, json) Hash identifier: 9sd5sh0hayWfrzlxINGMV8ko263SKpjWpchnAJv8lJQ= Subject key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6506E95543146C58CE439546300DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201072 IP: 193.57.184.0 -- 193.57.199.255 IP: 193.57.204.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:50:6e:95:54:31:46:c5:8c:e4:39:54:63:00:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:fc:07:3e:89:32:0e:e6:d9:0c:92:62:7e: 05:a4:2c:84:b9:37:d3:6a:ab:91:92:74:84:1a:5d: 7b:b7:ee:32:5e:95:f9:3e:56:1d:09:9f:39:9d:c9: 75:f9:8e:4e:2e:bb:3f:af:c5:ce:4b:7b:f1:69:26: 0b:55:c5:26:5f:e4:47:e4:23:2d:85:5f:58:37:dd: ac:09:c1:2d:0e:ad:db:4c:1b:07:d8:c5:cc:f2:c1: 7c:13:16:e6:c5:72:0e:41:53:40:69:7c:a6:fc:70: f2:c7:e8:17:fa:3a:79:c9:2f:0f:43:8c:ae:79:28: 0f:0a:5f:c4:3a:98:50:f0:54:bb:49:f1:39:83:95: 6f:11:22:81:e7:a3:be:01:7d:3f:11:38:df:a8:3f: 5a:1a:14:a6:cd:f3:e1:7d:d8:59:66:5f:b6:e2:13: 81:94:4a:cf:8c:4f:0f:23:21:76:af:e3:4f:8e:4c: ad:11:af:c3:f6:b9:0c:85:7c:df:2d:4b:c3:f5:97: 2a:16:26:bb:33:23:04:a9:7f:7d:32:67:66:ec:b2: 45:45:10:f9:8d:be:47:48:ea:3b:95:80:7f:1c:a5: c7:60:d0:5b:1d:ad:ef:86:46:99:bd:54:b8:3d:c3: 79:8a:00:df:8e:11:d6:75:fd:57:69:ba:2e:5f:bd: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.184.0-193.57.199.255 193.57.204.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201072 Signature Algorithm: sha256WithRSAEncryption 6b:3b:d8:7c:c6:36:bb:c0:2f:35:1e:1a:b6:3c:fc:38:e0:f1: 79:c0:d4:c6:84:9d:d8:80:da:2e:98:a3:a8:30:ac:8d:49:9d: 51:04:6f:6b:05:07:ad:b3:d8:b2:43:1d:79:04:6c:d5:17:24: 36:aa:02:d8:95:80:3b:a6:d6:81:c8:5e:86:37:6f:b3:4f:34: 96:d4:8f:5f:61:aa:47:67:01:1b:3d:c1:b7:c1:93:a4:e5:94: af:3d:6f:45:9e:66:41:3d:58:ff:66:ed:b7:6f:b1:eb:43:29: b8:d6:2e:0f:68:f8:37:ff:9c:21:80:2c:f6:68:7b:cf:c7:dc: 99:a9:7f:85:67:56:ce:94:ec:56:2a:46:af:0b:9a:96:a5:63: d5:e9:8a:8a:90:4b:95:06:74:02:f7:ed:a3:c7:b7:cd:39:51: e9:7a:b2:03:c6:9f:e2:15:8c:7c:ef:f6:0e:4e:63:34:0b:be: e6:92:4d:d1:63:40:64:56:7e:f0:15:7f:67:c0:86:41:22:22: c3:87:a9:2d:b9:1d:3f:ef:02:51:ba:1b:f9:96:40:b2:da:68: af:8e:23:13:04:f0:bc:59:84:93:54:0a:56:c5:b2:0d:7f:68: 85:bf:2c:87:11:18:54:bd:65:2e:dd:c9:fe:b5:ec:8a:19:c5: e8:8d:28:6a -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt+plBulVQxRsWM5DlUYwDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmMyZGU4MjBlMDJmM2MzZjg2ZTViOGM5YzQ5ZGRjNDkzMjUxMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwH8Bz6JMg7m2QySYn4FpCyEuTfT aquRknSEGl17t+4yXpX5PlYdCZ85ncl1+Y5OLrs/r8XOS3vxaSYLVcUmX+RH5CMt hV9YN92sCcEtDq3bTBsH2MXM8sF8ExbmxXIOQVNAaXym/HDyx+gX+jp5yS8PQ4yu eSgPCl/EOphQ8FS7SfE5g5VvESKB56O+AX0/ETjfqD9aGhSmzfPhfdhZZl+24hOB lErPjE8PIyF2r+NPjkytEa/D9rkMhXzfLUvD9ZcqFia7MyMEqX99Mmdm7LJFRRD5 jb5HSOo7lYB/HKXHYNBbHa3vhkaZvVS4PcN5igDfjhHWdf1XabouX72DtwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFKvC3oIOAvPD+G5bjJxJ3cSTJRI/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzU2NzQ4 ZS1jMjk3LTRkZTctOGU5Ni04OTc4MzMxN2VhMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvNTY3NDhl LWMyOTctNGRlNy04ZTk2LTg5NzgzMzE3ZWEyOS8xL3E4TGVnZzRDODhQNGJsdU1u RW5keEpNbEVqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUMAwDBAPBObgDBAPBOcADBADBOcwwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAxFwMA0GCSqGSIb3DQEBCwUAA4IBAQBrO9h8xja7wC81 Hhq2PPw44PF5wNTGhJ3YgNoumKOoMKyNSZ1RBG9rBQets9iyQx15BGzVFyQ2qgLY lYA7ptaByF6GN2+zTzSW1I9fYapHZwEbPcG3wZOk5ZSvPW9FnmZBPVj/Zu23b7Hr Qym41i4PaPg3/5whgCz2aHvPx9yZqX+FZ1bOlOxWKkavC5qWpWPV6YqKkEuVBnQC 9+2jx7fNOVHperIDxp/iFYx87/YOTmM0C77mkk3RY0BkVn7wFX9nwIZBIiLDh6kt uR0/7wJRuhv5lkCy2mivjiMTBPC8WYSTVApWxbINf2iFvyyHERhUvWUu3cn+teyK GcXojShq -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:18 2026 by rpki-client