This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer File: R-lMy3tgHaDKCUafYPZTZA_tjBw.cer (raw, json) Hash identifier: SM3PrZWrT3yv706vSeFe+COxxv+5tCFDtD0k3jihLOI= Subject key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9DF738E8FF4B40AE1733DAE6AB939 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15829 AS: 29137 AS: 34444 IP: 84.22.64.0/19 IP: 128.140.128.0/20 IP: 185.23.96.0/22 IP: 195.234.248.0/22 IP: 213.180.224.0/19 IP: 2a04:5e0::/29 IP: 2a05:a480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:df:73:8e:8f:f4:b4:0a:e1:73:3d:ae:6a:b9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:7f:6d:8b:fa:cf:92:72:55:06:2f:97:f7: 62:32:22:14:65:c0:a6:3f:f6:12:dd:02:87:04:bd: 56:b4:5d:da:a8:ef:37:07:a3:0b:49:50:6a:75:c3: 85:74:d5:ef:18:9c:4b:9e:af:53:ac:49:5b:f8:cd: b0:2b:43:c0:0a:d2:2d:f3:72:15:4e:e6:9f:98:6f: 56:c1:09:9e:bc:43:3b:06:8d:ba:0e:68:4c:6e:40: b3:0c:13:40:28:67:2d:5f:d4:68:03:5c:0b:f5:8c: cb:9d:20:fa:c8:c8:bb:55:ca:f2:3c:00:df:e2:d3: d0:87:af:08:6e:36:9f:cd:69:20:35:5d:18:69:81: 5f:11:fe:30:d9:82:47:0d:10:dc:79:c6:ef:9e:0b: c5:34:8f:df:69:64:86:bc:38:d8:c2:0b:04:6f:b4: 80:f0:0b:f9:42:c7:2c:cc:5a:ef:b1:2b:cd:ee:42: ca:0c:b5:78:9e:f4:70:d6:5f:b5:cc:d7:8f:a0:61: c3:48:00:63:2c:8f:14:fb:61:e7:73:67:7c:b4:c6: 46:5a:05:10:45:88:2a:82:99:89:ab:9e:b3:9f:37: b4:7d:6e:82:30:21:68:2d:fa:95:44:17:22:a3:d2: 90:e4:f6:7f:8b:74:ea:30:d8:65:02:76:28:59:02: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.22.64.0/19 128.140.128.0/20 185.23.96.0/22 195.234.248.0/22 213.180.224.0/19 IPv6: 2a04:5e0::/29 2a05:a480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15829 29137 34444 Signature Algorithm: sha256WithRSAEncryption 83:c0:bd:1c:6d:f1:61:92:9b:4b:82:5e:0b:79:c7:19:39:e8: 03:00:c2:e1:34:78:03:f2:c7:79:4e:86:f6:d6:1a:e9:80:6b: 50:a3:1e:51:da:e3:73:15:1c:18:b2:d6:5a:85:7c:38:93:d2: 90:ec:c6:9c:3a:8e:09:5c:fa:6c:0f:ca:98:32:8f:ae:ce:c5: 1d:7e:6a:dc:0f:f4:89:7a:e2:4a:d7:17:45:14:91:70:3d:9e: 7b:7e:cb:90:4a:eb:93:e0:8c:1e:9a:02:d7:b7:2c:b7:a4:04: 44:5e:9c:54:52:4e:6d:09:db:40:7b:da:c2:cf:38:d9:59:08: 8a:94:ad:cc:31:ed:e4:91:f8:4d:9b:c3:97:86:99:c6:59:0d: 79:2d:b4:bb:7c:52:c7:a3:fe:d7:5d:e6:83:6a:c0:39:2f:66: ca:90:a0:fa:e7:d7:5e:66:26:0e:09:75:15:a5:4c:82:42:75: dd:ab:ed:77:d9:ab:f2:57:fb:25:2b:15:d8:ef:16:35:c3:53: 1f:ba:7b:d1:45:9f:4a:0f:9c:85:67:eb:1d:85:3c:6d:2f:3c: 75:a2:aa:95:2b:86:19:52:d6:21:1b:85:fc:35:cd:fb:15:4c: f5:61:02:6d:26:c4:63:1d:29:16:49:46:ab:5f:c2:76:3d:9c: 53:06:df:9f -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt9yd9zjo/0tArhcz2uark5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2U5NGNjYjdiNjAxZGEwY2EwOTQ2OWY2MGY2NTM2NDBmZWQ4YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7R/bYv6z5JyVQYvl/diMiIUZcCm P/YS3QKHBL1WtF3aqO83B6MLSVBqdcOFdNXvGJxLnq9TrElb+M2wK0PACtIt83IV TuafmG9WwQmevEM7Bo26DmhMbkCzDBNAKGctX9RoA1wL9YzLnSD6yMi7VcryPADf 4tPQh68IbjafzWkgNV0YaYFfEf4w2YJHDRDcecbvngvFNI/faWSGvDjYwgsEb7SA 8Av5QscszFrvsSvN7kLKDLV4nvRw1l+1zNePoGHDSABjLI8U+2Hnc2d8tMZGWgUQ RYgqgpmJq56znze0fW6CMCFoLfqVRBcio9KQ5PZ/i3TqMNhlAnYoWQLadwIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFEfpTMt7YB2gyglGn2D2U2QP7YwcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzllMjlk Yy1jZWM5LTQ5ZTItYmNlNC1iZDkwYTNmMDZlMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvOWUyOWRj LWNlYzktNDllMi1iY2U0LWJkOTBhM2YwNmUxNi8xL1ItbE15M3RnSGFES0NVYWZZ UFpUWkFfdGpCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQFVBZAAwQEgIyAAwQCuRdgAwQCw+r4AwQF1bTg MBQEAgACMA4DBQMqBAXgAwUDKgWkgDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgI9 1QICcdECAwCGjDANBgkqhkiG9w0BAQsFAAOCAQEAg8C9HG3xYZKbS4JeC3nHGTno AwDC4TR4A/LHeU6G9tYa6YBrUKMeUdrjcxUcGLLWWoV8OJPSkOzGnDqOCVz6bA/K mDKPrs7FHX5q3A/0iXriStcXRRSRcD2ee37LkErrk+CMHpoC17cst6QERF6cVFJO bQnbQHvaws842VkIipStzDHt5JH4TZvDl4aZxlkNeS20u3xSx6P+113mg2rAOS9m ypCg+ufXXmYmDgl1FaVMgkJ13avtd9mr8lf7JSsV2O8WNcNTH7p70UWfSg+chWfr HYU8bS88daKqlSuGGVLWIRuF/DXN+xVM9WECbSbEYx0pFklGq1/Cdj2cUwbfnw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:17 2026 by rpki-client