This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer File: L6FqsGAgBndApMH7R6kSYi8dByI.cer (raw, json) Hash identifier: b+JHcDhr7lxoXl9UkgkoDaYqu6G/rCw2dXuqsl3Wytc= Subject key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36D5644DD5F19E5E6A03A42937CD6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13115 IP: 85.115.208.0/22 IP: 213.145.64.0/19 IP: 2001:41f8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d5:64:4d:d5:f1:9e:5e:6a:03:a4:29:37:cd:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9e:87:41:79:12:55:0d:c1:c9:41:22:bd:77: 81:f8:f4:3d:11:3c:d8:09:18:30:d7:0b:ce:6b:0e: 40:33:dc:c1:54:29:76:bd:a5:06:f3:e6:e1:19:7a: 54:78:10:f2:12:2e:90:f1:11:e1:41:4b:e8:ed:3c: 40:0a:37:bf:81:1a:3a:99:35:97:11:98:e8:11:0f: d1:64:b8:cb:ad:01:d2:52:f1:c6:18:38:a3:bc:51: 5b:b6:1c:93:bc:76:95:00:bd:23:23:10:f2:a5:e7: 4c:a2:2d:b1:7b:99:c6:68:6e:ee:8f:32:aa:f0:05: 15:72:b4:0a:ca:ee:f4:df:a1:ba:f7:e0:5f:f7:6a: 6b:ac:14:2c:f9:9e:7d:ac:78:1f:ca:0a:3a:5a:be: a2:7b:6e:58:f4:8f:4a:c4:37:7f:6a:cd:2b:d7:17: 51:8d:bc:05:4f:60:0a:62:8a:63:2e:b6:34:b8:51: 8c:ab:ef:7a:f7:d4:ea:10:24:88:4c:ce:cc:2c:21: f7:2c:68:36:e7:24:15:7d:ed:13:fe:31:9b:14:a7: 69:90:aa:98:a1:d3:55:6b:f7:0e:03:5d:19:80:f9: ab:7e:4c:f7:74:29:ef:d8:22:21:3d:c6:de:74:36: 44:85:54:92:ef:7d:e7:52:c7:f8:3e:cb:94:bc:83: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.208.0/22 213.145.64.0/19 IPv6: 2001:41f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13115 Signature Algorithm: sha256WithRSAEncryption 5b:25:49:03:60:2b:44:7f:77:13:5a:c1:4a:24:60:8d:82:f0: 41:4b:92:82:57:e4:bc:be:ca:9f:b3:1b:2a:a3:0a:b3:70:c0: 0e:a2:de:ef:f0:ee:88:80:3e:1b:9a:e2:3b:61:30:da:3a:9c: fe:4c:74:3d:57:60:e7:82:ae:e7:50:1b:3c:6c:ed:86:c1:aa: 52:20:83:b9:25:52:09:63:82:63:aa:bb:13:f5:86:3a:27:a2: 16:4f:96:ab:ae:a6:a6:bb:9f:34:3f:d9:ff:82:23:48:8b:22: d8:55:ae:76:0d:4a:de:6f:f1:98:af:3f:69:bc:71:3d:cc:7f: 38:87:51:44:96:09:db:72:48:2f:29:83:8b:bc:94:64:cc:61: 77:6d:ca:d4:3d:a3:d7:74:93:89:95:10:74:f7:fa:ce:14:04: 27:09:22:0a:a5:c5:a9:5a:22:4e:87:e5:27:78:46:e9:b3:01: 98:69:53:75:b3:d1:b2:fb:ea:3d:f6:16:38:af:11:f5:cb:75: a8:4f:35:87:82:18:66:29:47:33:1f:80:74:4e:24:d7:5b:83: bd:30:71:f9:f0:c9:59:d8:eb:cc:99:16:09:36:06:12:8a:0b: 11:44:ac:97:e0:2d:66:c6:3f:7e:c0:5a:c2:22:ac:b8:f6:e1: 02:f5:cd:28 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7NtVkTdXxnl5qA6QpN81sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmExNmFiMDYwMjAwNjc3NDBhNGMxZmI0N2E5MTI2MjJmMWQwNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9J6HQXkSVQ3ByUEivXeB+PQ9ETzY CRgw1wvOaw5AM9zBVCl2vaUG8+bhGXpUeBDyEi6Q8RHhQUvo7TxACje/gRo6mTWX EZjoEQ/RZLjLrQHSUvHGGDijvFFbthyTvHaVAL0jIxDypedMoi2xe5nGaG7ujzKq 8AUVcrQKyu7036G69+Bf92prrBQs+Z59rHgfygo6Wr6ie25Y9I9KxDd/as0r1xdR jbwFT2AKYopjLrY0uFGMq+9699TqECSITM7MLCH3LGg25yQVfe0T/jGbFKdpkKqY odNVa/cOA10ZgPmrfkz3dCnv2CIhPcbedDZEhVSS733nUsf4PsuUvIOslQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFC+harBgIAZ3QKTB+0epEmIvHQciMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzdmMjM5 My1kMDFhLTQxZjctYTUyZS1kMjQyYjZmM2E4YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvN2YyMzkz LWQwMWEtNDFmNy1hNTJlLWQyNDJiNmYzYThhMS8xL0w2RnFzR0FnQm5kQXBNSDdS NmtTWWk4ZEJ5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCVXPQAwQF1ZFAMA0EAgACMAcDBQAgAUH4MBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjM7MA0GCSqGSIb3DQEBCwUAA4IBAQBbJUkD YCtEf3cTWsFKJGCNgvBBS5KCV+S8vsqfsxsqowqzcMAOot7v8O6IgD4bmuI7YTDa Opz+THQ9V2Dngq7nUBs8bO2GwapSIIO5JVIJY4JjqrsT9YY6J6IWT5arrqamu580 P9n/giNIiyLYVa52DUreb/GYrz9pvHE9zH84h1FElgnbckgvKYOLvJRkzGF3bcrU PaPXdJOJlRB09/rOFAQnCSIKpcWpWiJOh+UneEbpswGYaVN1s9Gy++o99hY4rxH1 y3WoTzWHghhmKUczH4B0TiTXW4O9MHH58MlZ2OvMmRYJNgYSigsRRKyX4C1mxj9+ wFrCIqy49uEC9c0o -----END CERTIFICATE-----Generated at Sun Jan 25 18:23:31 2026 by rpki-client