This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer File: x_BLeLLu35mO3VzB6IZxyNEPGGU.cer (raw, json) Hash identifier: ftw2y6M0S/caOudbHYdwffi++If8vemEwF6X9E/+kPE= Subject key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C800BDD253F19864708752417338FCC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206618 IP: 143.163.0.0/16 IP: 193.23.96.0/20 IP: 194.114.0.0/17 IP: 2a01:4dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0b:dd:25:3f:19:86:47:08:75:24:17:33:8f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:8a:c6:02:ce:2c:30:49:2b:22:bd:55:a7: 83:62:7a:da:95:d8:b0:fe:35:89:94:df:63:41:2a: e9:17:0b:f9:4b:4b:b7:ff:56:c0:2d:dd:05:92:f0: 77:f2:80:c7:de:3a:41:27:2b:d1:ad:96:7b:06:31: e0:eb:b6:49:45:f3:32:c8:2f:f3:9b:0b:5c:c6:32: eb:ac:88:c3:82:8a:4c:a4:f1:49:f9:3a:8e:2b:7d: 46:20:5c:bd:63:fc:f6:22:e9:bf:8f:7f:70:78:11: e8:97:d6:29:02:62:fc:8b:78:87:f5:2e:05:35:f1: bf:f5:a9:cd:6c:13:c6:c5:76:26:63:9f:78:cf:b0: 38:09:c8:53:c5:48:31:98:bb:65:df:5d:69:6c:37: 5f:9c:36:b6:51:8c:57:5b:ce:26:a7:42:25:d2:55: 79:27:d2:4c:ed:81:00:97:da:bb:3c:74:ed:cc:33: 34:93:26:a1:16:db:a4:57:c7:63:26:69:e6:d2:c0: f0:52:d8:3c:71:ec:54:55:ee:d4:07:d8:8c:9a:73: 2b:40:77:68:73:94:4a:55:9c:49:a6:19:af:5a:b2: 35:e5:6e:1c:d8:79:4f:ba:34:2e:01:e4:5c:57:3a: 06:67:da:9c:34:24:8e:ff:6f:21:b6:1d:de:46:1c: 5b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.163.0.0/16 193.23.96.0/20 194.114.0.0/17 IPv6: 2a01:4dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206618 Signature Algorithm: sha256WithRSAEncryption 49:29:fa:e2:78:da:c7:ba:a9:9f:21:5d:6f:ce:6d:7e:9a:08: a7:59:e3:62:f6:dd:b4:b8:e0:dc:ee:c7:5a:d6:db:23:74:84: 96:b5:f9:31:7a:5c:93:15:aa:b7:ac:8d:cd:cd:47:08:69:3f: d4:19:4e:a7:79:6a:5f:47:e5:7c:d0:05:ee:89:24:1f:4e:c9: d6:8a:bc:6f:04:45:a1:44:a1:f1:7d:0d:fd:ab:11:87:2d:c3: de:10:5a:6f:d8:64:2a:d7:ee:fd:b5:94:d0:38:0c:f2:eb:b7: 78:fa:55:3c:bc:25:6e:5b:d7:22:e8:5e:49:ad:ad:86:20:b6: 90:74:10:35:11:56:b6:a0:1a:e1:47:cb:0b:ab:4c:43:d9:4f: c7:43:78:76:cb:ee:d1:8b:0b:66:9b:0a:0d:e1:3b:3d:1b:5d: e3:23:04:9e:b2:ab:22:dc:c9:85:a1:38:b2:26:20:96:d7:b1: 59:1f:01:83:f8:da:5d:73:62:c8:52:b9:26:a1:45:b3:66:1c: 72:1e:bb:76:87:87:14:da:da:d4:3c:c2:62:38:d3:bd:14:07: a6:bc:36:85:aa:69:32:6b:6b:7c:92:78:a3:82:c3:dd:73:84: b9:d7:7a:7b:ab:2e:7f:68:68:13:66:76:4a:ba:dc:fc:b3:d0: d2:a0:5e:c0 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt8gAvdJT8ZhkcIdSQXM4/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2YwNGI3OGIyZWVkZjk5OGVkZDVjYzFlODg2NzFjOGQxMGYxODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKiKxgLOLDBJKyK9VaeDYnraldiw /jWJlN9jQSrpFwv5S0u3/1bALd0FkvB38oDH3jpBJyvRrZZ7BjHg67ZJRfMyyC/z mwtcxjLrrIjDgopMpPFJ+TqOK31GIFy9Y/z2Ium/j39weBHol9YpAmL8i3iH9S4F NfG/9anNbBPGxXYmY594z7A4CchTxUgxmLtl311pbDdfnDa2UYxXW84mp0Il0lV5 J9JM7YEAl9q7PHTtzDM0kyahFtukV8djJmnm0sDwUtg8cexUVe7UB9iMmnMrQHdo c5RKVZxJphmvWrI15W4c2HlPujQuAeRcVzoGZ9qcNCSO/28hth3eRhxbgwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFMfwS3iy7t+Zjt1cweiGccjRDxhlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzQ3Mzky NC02Zjk5LTQ3M2QtYTA3Ny1mNDM3ODM5MDk1ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNDczOTI0 LTZmOTktNDczZC1hMDc3LWY0Mzc4MzkwOTVkMS8xL3hfQkxlTEx1MzVtTzNWekI2 SVp4eU5FUEdHVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAXBAIAATARAwMAj6MDBATBF2ADBAfCcgAwDQQCAAIwBwMFAyoB TcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAycaMA0GCSqGSIb3DQEBCwUAA4IB AQBJKfrieNrHuqmfIV1vzm1+mginWeNi9t20uODc7sda1tsjdISWtfkxelyTFaq3 rI3NzUcIaT/UGU6neWpfR+V80AXuiSQfTsnWirxvBEWhRKHxfQ39qxGHLcPeEFpv 2GQq1+79tZTQOAzy67d4+lU8vCVuW9ci6F5Jra2GILaQdBA1EVa2oBrhR8sLq0xD 2U/HQ3h2y+7RiwtmmwoN4Ts9G13jIwSesqsi3MmFoTiyJiCW17FZHwGD+Npdc2LI UrkmoUWzZhxyHrt2h4cU2trUPMJiONO9FAemvDaFqmkya2t8knijgsPdc4S513p7 qy5/aGgTZnZKutz8s9DSoF7A -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:35 2026 by rpki-client