This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer File: L3oyxzesMHgHR2ppewuva5AEVo4.cer (raw, json) Hash identifier: E/OZaD1ISWVlCPZaGZOz7tmNjSZJ9AP7sHG3KhNROl8= Subject key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAF7C3963390A04B0D82433F88FEC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12486 IP: 185.112.200.0/22 IP: 195.94.0.0/19 IP: 2a02:e280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f7:c3:96:33:90:a0:4b:0d:82:43:3f:88:fe:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f7a32c737ac307807476a697b0baf6b9004568e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:a6:b9:4c:1d:4b:6d:ec:e1:22:fb:a9:13: a4:ca:76:57:98:a5:36:eb:c2:13:27:c1:01:1b:a9: b1:21:c2:1c:9e:27:62:50:55:a1:89:dc:4e:b3:5a: 5f:c1:c3:22:4e:74:39:96:9a:00:3e:ec:9d:ce:da: 51:47:5e:62:ec:ad:4f:f4:f7:f4:08:22:e9:3e:bf: c3:85:c5:5d:c4:29:06:43:86:92:fe:81:05:3f:30: 03:d4:fe:3d:09:ea:8a:d4:7c:d5:4c:2d:d7:96:8f: 29:6d:4c:a8:c6:80:ed:f4:a0:65:c4:68:e1:76:10: c3:9f:81:88:a8:17:9a:0d:19:c4:44:65:0c:2d:4a: df:7a:90:0f:83:a5:5c:e3:4f:31:bd:bb:88:48:4d: b0:02:96:16:e9:3c:4f:9c:14:30:d7:b8:4c:48:3a: b0:de:5f:09:4c:c8:60:cf:97:e2:6a:d4:78:b3:22: b7:86:69:42:a8:09:61:2b:44:bf:80:e3:67:1b:cd: 4a:d2:5b:8b:02:99:5d:44:03:72:2b:99:d4:73:4d: 2a:43:74:d1:b3:37:4a:ce:c3:79:71:ab:e8:23:0b: dc:2d:12:4c:c4:f9:19:28:8a:8d:68:9a:c4:ab:07: 77:e7:54:48:8e:65:90:8c:0f:5d:44:8b:f4:df:74: 68:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.200.0/22 195.94.0.0/19 IPv6: 2a02:e280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12486 Signature Algorithm: sha256WithRSAEncryption 8d:7c:e9:a2:2f:ee:65:ea:c5:a3:ae:3a:d8:c0:4f:74:8c:d5: 35:d3:3f:0e:7e:e1:f6:3f:4e:da:43:4b:99:29:2b:ec:43:86: 0b:18:13:c9:6d:1c:ea:45:0e:34:d3:af:c2:57:90:ce:bf:25: d6:8f:1f:05:ba:a0:d0:d4:89:d0:b6:16:4d:98:c0:23:5b:21: d2:69:ce:69:68:63:59:58:d4:a5:a3:30:9f:4b:42:68:9d:43: 0e:15:a6:53:98:64:40:dd:ce:94:1b:17:6e:f8:c9:8c:8a:48: 7b:d3:4c:69:0d:b1:db:24:ca:80:e9:59:a7:cc:78:e6:54:cb: 3a:0a:12:62:e0:11:84:fb:cc:5a:59:5f:34:1c:62:39:56:34: da:7f:21:0c:23:45:99:3a:66:73:cf:59:00:f0:1c:d8:05:c7: e4:fa:f6:8e:fa:77:1b:44:d0:f0:8f:e7:fa:c8:ad:c4:66:00: b9:e9:6e:73:e7:eb:e6:45:a1:50:f6:94:9d:4b:23:5d:15:f4: 04:64:be:cf:12:b5:75:8a:4a:69:5b:36:12:50:96:ae:42:2f: 31:20:0c:5b:69:b8:bf:1f:15:45:23:36:21:55:56:65:2e:2b: 70:39:70:76:d3:29:2b:5b:3c:c3:38:ce:55:92:42:36:f1:c9: 70:79:51:ef -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9yvfDljOQoEsNgkM/iP7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjdhMzJjNzM3YWMzMDc4MDc0NzZhNjk3YjBiYWY2YjkwMDQ1NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZWmuUwdS23s4SL7qROkynZXmKU2 68ITJ8EBG6mxIcIcnidiUFWhidxOs1pfwcMiTnQ5lpoAPuydztpRR15i7K1P9Pf0 CCLpPr/DhcVdxCkGQ4aS/oEFPzAD1P49CeqK1HzVTC3Xlo8pbUyoxoDt9KBlxGjh dhDDn4GIqBeaDRnERGUMLUrfepAPg6Vc408xvbuISE2wApYW6TxPnBQw17hMSDqw 3l8JTMhgz5fiatR4syK3hmlCqAlhK0S/gONnG81K0luLApldRANyK5nUc00qQ3TR szdKzsN5cavoIwvcLRJMxPkZKIqNaJrEqwd351RIjmWQjA9dRIv033RopwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFC96Msc3rDB4B0dqaXsLr2uQBFaOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzI0MDAw Yy1iNWQyLTQ4ZGMtYjk1OS1lOTVhMjQ5NjE1N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvMjQwMDBj LWI1ZDItNDhkYy1iOTU5LWU5NWEyNDk2MTU3ZS8xL0wzb3l4emVzTUhnSFIycHBl d3V2YTVBRVZvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuXDIAwQFw14AMA0EAgACMAcDBQMqAuKAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjDGMA0GCSqGSIb3DQEBCwUAA4IBAQCNfOmi L+5l6sWjrjrYwE90jNU10z8OfuH2P07aQ0uZKSvsQ4YLGBPJbRzqRQ4006/CV5DO vyXWjx8FuqDQ1InQthZNmMAjWyHSac5paGNZWNSlozCfS0JonUMOFaZTmGRA3c6U Gxdu+MmMikh700xpDbHbJMqA6VmnzHjmVMs6ChJi4BGE+8xaWV80HGI5VjTafyEM I0WZOmZzz1kA8BzYBcfk+vaO+ncbRNDwj+f6yK3EZgC56W5z5+vmRaFQ9pSdSyNd FfQEZL7PErV1ikppWzYSUJauQi8xIAxbabi/HxVFIzYhVVZlLitwOXB20ykrWzzD OM5VkkI28clweVHv -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:36 2026 by rpki-client