This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer File: L65BLP-oy1z7k7sxq16YkDh4TX8.cer (raw, json) Hash identifier: 5aWNkOSvfuywmGUC/1+yrtHxw5Xo1UCXgz7BW7iaFZE= Subject key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A278623A34C7F2A19902E08AB1341D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.96.0/24 IP: 2001:67c:da4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:78:62:3a:34:c7:f2:a1:99:02:e0:8a:b1:34:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:11:1a:2e:69:c5:aa:2f:03:d3:68:44:61: 25:a3:db:16:d4:4b:13:c0:6f:56:40:70:cc:51:83: 11:2a:8c:e3:c8:8c:40:7d:dc:1d:ff:e2:74:09:22: 45:b1:79:38:dc:c7:db:db:79:67:16:6c:23:0d:60: f7:5b:50:c3:7a:bf:02:0c:70:62:f0:92:e4:6c:55: 94:6c:fc:43:ac:4b:8a:99:a3:80:98:ed:50:ad:f4: b2:92:0b:3c:e5:ef:55:9a:d4:7a:fa:67:82:c1:0f: d9:0c:a6:f4:3d:ef:08:8e:2e:0c:c9:9f:c3:66:87: 84:6d:50:0e:07:13:92:e6:ce:5f:63:7f:81:46:38: dd:5b:1f:35:30:c3:5b:b2:1b:3e:b2:0c:c4:6f:7a: c0:30:3c:a2:a8:50:bc:b9:d2:1d:f4:b7:ff:7b:d8: a8:dc:fe:2e:e5:a3:ad:3e:4f:3c:23:1e:d6:04:73: 3a:d8:1d:81:53:4e:0f:0b:82:af:82:88:38:3f:64: 43:b6:46:3d:91:95:3b:3f:34:e8:75:96:91:4c:4d: 88:b4:02:74:90:b3:09:9d:66:9d:35:8c:cb:f5:50: e5:a7:ef:97:2d:f2:00:36:ff:47:1f:e2:cd:1d:25: 7b:39:91:cb:23:3e:76:45:01:e6:bd:b4:b9:9e:4e: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.96.0/24 IPv6: 2001:67c:da4::/48 Signature Algorithm: sha256WithRSAEncryption 19:6f:0a:cc:6d:5c:c9:c2:36:35:8c:9f:ab:5e:1f:39:b1:a6: 29:e1:ad:1c:1f:ea:31:15:0d:08:02:ca:08:8f:49:46:b3:f9: 10:14:cf:ba:0d:65:b4:df:40:c7:6f:f9:0f:77:d5:fd:6b:b8: ab:de:28:da:b0:1e:e3:c0:06:07:20:72:69:2a:49:12:ff:be: c4:34:c6:6f:c6:68:0f:bc:b1:39:6b:32:92:9b:37:53:af:65: ee:f0:c8:fd:73:26:2f:cb:a6:79:2f:ac:5e:3c:fb:56:1f:1f: 09:7d:9f:d1:6e:46:d3:ab:ca:e9:b6:bf:33:38:84:ed:b3:66: 6f:3e:4a:c9:07:48:9c:59:58:a9:52:ed:a5:4e:12:db:75:be: 37:69:97:9b:7e:4e:ad:ec:ac:2f:a6:2a:6b:80:4c:3f:35:32: 46:89:2b:a4:a1:19:af:93:d8:62:91:7e:71:2e:a2:bd:e0:34: 20:43:e8:9b:f7:5a:b2:7e:a3:b7:bc:a6:52:35:56:c7:f2:d2: 92:b4:0c:c4:82:4d:d2:ec:aa:cc:ef:c9:63:07:3e:04:d4:d1: 72:46:bb:5f:88:f5:60:6d:ff:8c:37:77:9a:5e:9f:e2:18:dc: 38:a7:fe:97:83:1b:e3:46:18:b5:42:b8:88:46:69:a2:49:92: 15:af:2a:df -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt4onhiOjTH8qGZAuCKsTQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmFlNDEyY2ZmYThjYjVjZmI5M2JiMzFhYjVlOTg5MDM4Nzg0ZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04IRGi5pxaovA9NoRGElo9sW1EsT wG9WQHDMUYMRKozjyIxAfdwd/+J0CSJFsXk43Mfb23lnFmwjDWD3W1DDer8CDHBi 8JLkbFWUbPxDrEuKmaOAmO1QrfSykgs85e9VmtR6+meCwQ/ZDKb0Pe8Iji4MyZ/D ZoeEbVAOBxOS5s5fY3+BRjjdWx81MMNbshs+sgzEb3rAMDyiqFC8udId9Lf/e9io 3P4u5aOtPk88Ix7WBHM62B2BU04PC4Kvgog4P2RDtkY9kZU7PzTodZaRTE2ItAJ0 kLMJnWadNYzL9VDlp++XLfIANv9HH+LNHSV7OZHLIz52RQHmvbS5nk6yDQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFC+uQSz/qMtc+5O7MatemJA4eE1/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzk0ZDVh MS0xY2MzLTQ4ZmMtOTljYy04MzBiMjJkZDJkZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvOTRkNWEx LTFjYzMtNDhmYy05OWNjLTgzMGIyMmRkMmRlYS8xL0w2NUJMUC1veTF6N2s3c3hx MTZZa0RoNFRYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9VgMA8EAgACMAkDBwAgAQZ8DaQwDQYJKoZI hvcNAQELBQADggEBABlvCsxtXMnCNjWMn6teHzmxpinhrRwf6jEVDQgCygiPSUaz +RAUz7oNZbTfQMdv+Q931f1ruKveKNqwHuPABgcgcmkqSRL/vsQ0xm/GaA+8sTlr MpKbN1OvZe7wyP1zJi/LpnkvrF48+1YfHwl9n9FuRtOryum2vzM4hO2zZm8+SskH SJxZWKlS7aVOEtt1vjdpl5t+Tq3srC+mKmuATD81MkaJK6ShGa+T2GKRfnEuor3g NCBD6Jv3WrJ+o7e8plI1Vsfy0pK0DMSCTdLsqszvyWMHPgTU0XJGu1+I9WBt/4w3 d5pen+IY3Din/peDG+NGGLVCuIhGaaJJkhWvKt8= -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:36 2026 by rpki-client