This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer File: ADoNFLA-o0Lt47L0mtjKor904XA.cer (raw, json) Hash identifier: cAJSZwCBsF1uf+8wxKMRc0pMZnzf+fYDBGhlejV4Pjg= Subject key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36AF579BF487BA5775EFB6496C3FF8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.84.192.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:af:57:9b:f4:87:ba:57:75:ef:b6:49:6c:3f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:b3:dd:f7:89:5c:e9:f6:79:82:c2:b3:52: ae:d5:5d:63:d0:78:78:dc:b8:00:7e:e4:31:b6:ed: a3:79:bc:22:be:56:ad:d0:79:a8:ae:c2:45:c0:05: f9:ec:0b:b3:30:68:3c:5a:0d:e7:3a:04:12:14:8b: 27:6e:98:54:49:68:ac:d0:89:12:0d:dc:b2:6d:ac: 5b:1f:e8:54:e9:ec:35:00:20:b5:5e:d0:42:54:b0: db:9d:b2:f3:47:36:6c:93:14:9b:f3:3c:54:3e:92: 7b:b1:99:07:c4:ed:0a:fa:a8:23:0e:7b:4a:d8:de: 7e:06:5d:15:dc:cd:72:48:29:74:05:70:79:37:1e: e5:dd:fc:5d:ad:d0:b4:f1:df:ba:34:b1:d8:8d:1a: 50:38:19:f7:7b:41:1d:2d:2f:48:23:5f:af:64:38: cc:aa:ef:bd:80:07:3d:8d:2a:27:76:94:3b:bc:62: 71:b1:da:3b:f7:ff:31:15:12:c3:49:aa:09:5a:ea: 86:06:a2:c7:5a:61:11:54:b5:40:b0:95:d0:4d:ed: 54:2f:94:de:b0:be:05:87:ba:a5:cb:46:08:87:69: a9:de:b3:b9:b2:5f:3e:bd:76:86:0e:ca:f9:92:06: 3f:84:b2:aa:56:94:8a:ac:72:74:e0:26:96:03:5d: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.192.0/19 Signature Algorithm: sha256WithRSAEncryption 26:fa:09:89:89:4d:a3:ab:66:3c:37:05:01:50:e2:30:52:d1: 3c:c9:13:85:b5:7d:6f:b3:e0:73:b7:d1:f3:3b:6f:ff:fe:93: d9:ac:92:fd:99:5c:2d:41:51:61:ed:97:d3:8d:ce:bd:1f:e5: 87:66:fc:2e:82:8d:d6:94:6b:90:48:1a:30:d1:db:1e:4b:02: d3:ad:44:de:e6:1e:10:63:da:cc:03:42:ee:34:36:30:28:7f: ec:d1:69:d0:d1:b1:70:5d:f5:8b:0c:eb:d0:e2:43:d4:7d:fb: df:15:ee:b8:c2:fd:63:25:d6:50:7e:d3:c4:a5:a5:15:49:72: 8e:4f:61:10:60:ec:16:9d:d8:79:73:54:46:ab:e1:f9:1f:2c: 6d:ef:19:fa:02:c2:67:71:e8:c6:62:a8:a9:73:43:12:0b:b0: 49:67:45:ee:0f:f8:1a:b1:22:f3:b7:b1:bc:3e:ef:3a:25:3e: 3e:58:b3:97:81:34:ab:08:74:c4:c2:4a:fd:19:fc:3b:d8:ad: 6b:1d:eb:ef:89:a8:fa:75:66:3a:1c:c4:57:95:2a:a6:1f:da: 5f:1b:d0:36:fd:38:77:77:3f:b6:ae:2e:dc:35:26:77:03:02: b6:4b:b3:bf:37:13:68:37:72:14:62:f1:e7:37:87:69:18:20: c3:bb:14:3e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7Nq9Xm/SHuld177ZJbD/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDNhMGQxNGIwM2VhMzQyZWRlM2IyZjQ5YWQ4Y2FhMmJmNzRlMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsqz3feJXOn2eYLCs1Ku1V1j0Hh4 3LgAfuQxtu2jebwivlat0HmorsJFwAX57AuzMGg8Wg3nOgQSFIsnbphUSWis0IkS DdyybaxbH+hU6ew1ACC1XtBCVLDbnbLzRzZskxSb8zxUPpJ7sZkHxO0K+qgjDntK 2N5+Bl0V3M1ySCl0BXB5Nx7l3fxdrdC08d+6NLHYjRpQOBn3e0EdLS9II1+vZDjM qu+9gAc9jSondpQ7vGJxsdo79/8xFRLDSaoJWuqGBqLHWmERVLVAsJXQTe1UL5Te sL4Fh7qly0YIh2mp3rO5sl8+vXaGDsr5kgY/hLKqVpSKrHJ04CaWA13JkQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAA6DRSwPqNC7eOy9JrYyqK/dOFwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzNhMjUy YS1hZjRiLTRlZWEtYWNkYi0yZmRkMWZkOTk2NTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvM2EyNTJh LWFmNGItNGVlYS1hY2RiLTJmZGQxZmQ5OTY1Ny8xL0FEb05GTEEtbzBMdDQ3TDBt dGpLb3I5MDRYQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFwVTAMA0GCSqGSIb3DQEBCwUAA4IBAQAm+gmJ iU2jq2Y8NwUBUOIwUtE8yROFtX1vs+Bzt9HzO2///pPZrJL9mVwtQVFh7ZfTjc69 H+WHZvwugo3WlGuQSBow0dseSwLTrUTe5h4QY9rMA0LuNDYwKH/s0WnQ0bFwXfWL DOvQ4kPUffvfFe64wv1jJdZQftPEpaUVSXKOT2EQYOwWndh5c1RGq+H5Hyxt7xn6 AsJncejGYqipc0MSC7BJZ0XuD/gasSLzt7G8Pu86JT4+WLOXgTSrCHTEwkr9Gfw7 2K1rHevviaj6dWY6HMRXlSqmH9pfG9A2/Th3dz+2ri7cNSZ3AwK2S7O/NxNoN3IU YvHnN4dpGCDDuxQ+ -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:33 2026 by rpki-client