This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer File: L3W8c3nxFbBnFVLJuvK-2FvegYk.cer (raw, json) Hash identifier: GWWwcy0B449HbZ/pnG25X9fpRDxBs2r6BntR9KThxL0= Subject key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED55C29123A96FB21A3CF03FDB0C63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201832 IP: 185.62.148.0/22 IP: 185.248.148.0/22 IP: 2a03:560::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:55:c2:91:23:a9:6f:b2:1a:3c:f0:3f:db:0c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:3f:2c:98:89:2e:62:0d:e8:fb:a4:09:73: d2:f4:ab:8e:d7:52:f6:34:73:33:c4:b5:93:12:4a: 88:84:1c:d0:c9:13:82:2b:fd:66:fa:d7:99:eb:42: 06:52:78:b5:77:a6:fa:8e:27:a0:12:52:f0:8f:54: 67:04:d9:03:55:df:8a:09:cf:dd:f5:0f:50:f2:92: c2:f5:34:ad:c1:91:db:c5:0b:fe:f2:32:0d:7c:1a: 21:4f:40:60:63:c8:be:1c:73:d3:2d:62:04:75:ec: 7b:de:38:53:29:dc:a2:fd:08:d4:88:d6:61:11:83: 6b:d7:d3:60:98:7d:21:56:f0:5b:50:64:7a:b1:01: 51:43:ea:68:b3:dc:58:6d:d0:e7:ca:25:c5:98:a2: 10:ea:5f:82:10:d1:03:30:22:f1:ec:f5:c9:28:bd: f0:04:2e:6a:3c:15:c1:d1:f8:35:08:66:c3:b3:78: 6d:b1:a9:30:39:ef:74:8c:86:c6:3e:de:f9:6a:c1: 0f:78:69:28:3a:69:c9:e4:69:f0:43:77:3f:a5:bf: 37:ab:b6:70:c0:ae:b1:7c:70:c8:a0:92:0f:fd:81: 91:a2:41:54:95:9e:12:aa:66:c5:60:53:4f:ae:45: b8:6e:86:e6:45:e6:3c:df:ee:b1:6a:ca:15:46:ef: 56:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.148.0/22 185.248.148.0/22 IPv6: 2a03:560::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201832 Signature Algorithm: sha256WithRSAEncryption 07:ec:12:15:d3:9f:3c:a2:da:7a:c5:cd:86:a4:44:e8:d4:d0: 4f:64:11:a5:57:4d:60:ec:a9:0f:62:3c:2c:bc:5a:35:3a:50: 70:69:2d:d5:26:b4:74:e8:aa:01:5e:4e:74:94:e0:86:01:04: 79:44:ec:b8:c6:c2:1c:45:72:b0:df:f1:a7:ff:a3:e8:a4:33: 10:04:42:10:fe:22:f0:31:ce:ba:4a:5b:53:77:7a:b4:da:e0: 8e:49:c0:ef:97:84:2d:d6:49:42:cb:1b:30:1f:b8:a1:89:11: 95:f5:2d:7f:53:e2:42:85:40:c4:96:f5:c8:d4:55:f3:99:5f: b5:32:db:2d:f8:3b:6b:40:3f:7c:37:af:3d:86:30:cf:86:b2: 00:b3:74:27:d8:27:c0:3b:ef:31:c2:04:d6:cc:7a:67:44:a8: 46:f8:98:46:f6:47:90:c0:e9:d9:0c:e9:f5:53:4a:7b:9b:cb: 14:10:f5:6f:47:72:9c:08:19:6d:07:d4:01:b5:f4:99:b5:d4: 00:c6:e7:b7:9d:5a:1c:47:92:8b:16:a3:6e:04:bd:3b:3d:83: 6f:43:49:6a:92:6d:6a:eb:91:fc:27:a8:37:5a:4f:c0:4a:5f: 5d:34:d8:fd:95:a1:34:30:fa:78:1c:09:1d:6f:1e:c3:f5:a6: ff:2d:fd:0c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87VXCkSOpb7IaPPA/2wxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjc1YmM3Mzc5ZjExNWIwNjcxNTUyYzliYWYyYmVkODViZGU4MTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZk/LJiJLmIN6PukCXPS9KuO11L2 NHMzxLWTEkqIhBzQyROCK/1m+teZ60IGUni1d6b6jiegElLwj1RnBNkDVd+KCc/d 9Q9Q8pLC9TStwZHbxQv+8jINfBohT0BgY8i+HHPTLWIEdex73jhTKdyi/QjUiNZh EYNr19NgmH0hVvBbUGR6sQFRQ+pos9xYbdDnyiXFmKIQ6l+CENEDMCLx7PXJKL3w BC5qPBXB0fg1CGbDs3htsakwOe90jIbGPt75asEPeGkoOmnJ5GnwQ3c/pb83q7Zw wK6xfHDIoJIP/YGRokFUlZ4SqmbFYFNPrkW4bobmReY83+6xasoVRu9WgQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFC91vHN58RWwZxVSybryvthb3oGJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzgxMGQy OS0wYzg1LTQwNTctYjYyNi1hZjBlNDE3ZDRjM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvODEwZDI5 LTBjODUtNDA1Ny1iNjI2LWFmMGU0MTdkNGMzYS8xL0wzVzhjM254RmJCbkZWTEp1 dkstMkZ2ZWdZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuT6UAwQCufiUMA0EAgACMAcDBQMqAwVgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMUaDANBgkqhkiG9w0BAQsFAAOCAQEAB+wS FdOfPKLaesXNhqRE6NTQT2QRpVdNYOypD2I8LLxaNTpQcGkt1Sa0dOiqAV5OdJTg hgEEeUTsuMbCHEVysN/xp/+j6KQzEARCEP4i8DHOukpbU3d6tNrgjknA75eELdZJ QssbMB+4oYkRlfUtf1PiQoVAxJb1yNRV85lftTLbLfg7a0A/fDevPYYwz4ayALN0 J9gnwDvvMcIE1sx6Z0SoRviYRvZHkMDp2Qzp9VNKe5vLFBD1b0dynAgZbQfUAbX0 mbXUAMbnt51aHEeSixajbgS9Oz2Db0NJapJtauuR/CeoN1pPwEpfXTTY/ZWhNDD6 eBwJHW8ew/Wm/y39DA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:26 2026 by rpki-client