This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer File: L9N5NT48lI39mNoKWel5I1Ok0OM.cer (raw, json) Hash identifier: 6IKYb6ySDo83WcwGyZkmvog+RUaBmQQgiD+ZNT70xB4= Subject key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15465D138CE1455534CEE7A994865C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210479 IP: 176.116.16.0/24 IP: 2a11:e5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:46:5d:13:8c:e1:45:55:34:ce:e7:a9:94:86:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:72:96:9b:5b:1c:59:ee:9b:d0:2d:07:55: 28:d1:63:a7:da:02:04:e2:cd:54:e3:57:ff:8f:1f: cf:8d:e6:fe:65:22:84:6e:38:13:dc:42:6c:10:d1: 58:aa:6d:40:f1:52:7c:d0:b6:d4:b3:b0:8d:41:b1: 90:a1:ba:d0:b6:aa:71:89:18:35:6d:bf:ac:3a:64: a6:6b:de:76:32:c5:fe:d1:54:6c:70:72:43:1d:53: 08:86:60:10:2f:22:6e:a5:ad:95:19:4b:fc:4b:11: 91:80:d9:77:29:3d:af:04:54:be:dd:f5:43:ab:7e: 1b:5b:ec:ed:90:c8:89:77:68:d1:45:11:c1:ef:55: 26:9e:92:e5:16:00:0a:f6:71:bd:f4:54:e0:6b:9e: 3e:a5:15:a7:d4:f6:09:76:56:64:c5:c4:56:9c:aa: 0c:cd:d8:85:f8:e1:bd:4e:72:57:2e:d1:da:35:d9: e6:0a:99:76:92:1c:de:45:ff:fe:95:44:80:b9:93: a1:b2:29:a7:7b:62:5d:2d:6d:b1:67:6a:bc:65:2a: ef:f8:7b:4a:89:37:7c:e9:22:27:13:7d:fa:33:3f: 8c:8b:7b:73:a6:21:bd:72:b1:9c:77:20:02:29:cd: cc:a1:d6:ae:1b:df:54:e7:af:d1:54:91:c1:bf:7f: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.16.0/24 IPv6: 2a11:e5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210479 Signature Algorithm: sha256WithRSAEncryption 0e:16:9b:2c:b3:5e:1c:99:56:fe:e6:7f:10:23:d2:75:6b:00: 85:4b:e9:68:09:20:63:ea:fe:46:d5:92:aa:94:fd:de:88:51: 75:cb:61:fa:c2:9c:ba:6d:16:10:b0:e7:25:14:21:6f:5a:56: 7a:63:4a:1d:06:ee:41:2a:5d:1e:61:5d:99:25:97:f6:75:6d: 90:2f:8b:70:7b:39:e7:0c:72:ac:55:93:8b:3b:20:97:03:6e: 5b:10:f4:2d:b2:84:11:b2:7e:ea:82:6c:88:f5:08:26:eb:66: 17:93:49:90:90:0d:ae:0e:2e:34:3d:d1:ad:d7:9c:26:c1:90: a3:bf:88:7c:bd:8c:e7:33:f0:bc:5c:99:22:2c:5b:09:a8:82: 76:f1:4f:02:4e:3d:14:7b:e2:5a:12:2f:cd:99:87:59:17:f9: 46:27:4d:9f:30:6d:39:ec:f7:16:db:a9:0b:18:e8:e3:2b:73: 43:f1:74:d6:5e:07:b8:7a:78:96:07:2f:a7:27:07:e8:ae:39: 1e:3f:e0:a9:72:d0:6e:e3:73:5e:ab:fb:c0:8f:24:52:3b:35: fc:8e:fa:f3:15:56:ad:cf:78:3c:8b:a6:81:ad:c5:6f:10:df: 65:f6:7b:e9:75:fe:02:2c:c9:29:70:6c:34:57:c8:b3:aa:6a: bd:af:09:64 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FUZdE4zhRVU0zueplIZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmQzNzkzNTNlM2M5NDhkZmQ5OGRhMGE1OWU5NzkyMzUzYTRkMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr9ylptbHFnum9AtB1Uo0WOn2gIE 4s1U41f/jx/Pjeb+ZSKEbjgT3EJsENFYqm1A8VJ80LbUs7CNQbGQobrQtqpxiRg1 bb+sOmSma952MsX+0VRscHJDHVMIhmAQLyJupa2VGUv8SxGRgNl3KT2vBFS+3fVD q34bW+ztkMiJd2jRRRHB71UmnpLlFgAK9nG99FTga54+pRWn1PYJdlZkxcRWnKoM zdiF+OG9TnJXLtHaNdnmCpl2khzeRf/+lUSAuZOhsimne2JdLW2xZ2q8ZSrv+HtK iTd86SInE336Mz+Mi3tzpiG9crGcdyACKc3ModauG99U56/RVJHBv3/VVwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFC/TeTU+PJSN/ZjaClnpeSNTpNDjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzEzMjg4 YS1kOTI4LTQ2MmItOTRiYS05ZTIyNTYxYmNhODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvMTMyODhh LWQ5MjgtNDYyYi05NGJhLTllMjI1NjFiY2E4OC8xL0w5TjVOVDQ4bEkzOW1Ob0tX ZWw1STFPazBPTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAsHQQMA0EAgACMAcDBQMqEeXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM2LzANBgkqhkiG9w0BAQsFAAOCAQEADhabLLNeHJlW /uZ/ECPSdWsAhUvpaAkgY+r+RtWSqpT93ohRdcth+sKcum0WELDnJRQhb1pWemNK HQbuQSpdHmFdmSWX9nVtkC+LcHs55wxyrFWTizsglwNuWxD0LbKEEbJ+6oJsiPUI JutmF5NJkJANrg4uND3RrdecJsGQo7+IfL2M5zPwvFyZIixbCaiCdvFPAk49FHvi WhIvzZmHWRf5RidNnzBtOez3FtupCxjo4ytzQ/F01l4HuHp4lgcvpycH6K45Hj/g qXLQbuNzXqv7wI8kUjs1/I768xVWrc94PIumga3FbxDfZfZ76XX+AizJKXBsNFfI s6pqva8JZA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:36 2026 by rpki-client