This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.cer (raw, json) Hash identifier: 89VKcUxWILuDHtINKL4EPY4ybX2Ju3V+MhGImVy2CSQ= Subject key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A73790CAF6A95D0B9C8BDD336FEF5FDB7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 15:11:44 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203244 AS: 216003 IP: 45.80.85.0 -- 45.80.87.255 IP: 177.8.68.0/24 IP: 185.140.216.0/22 IP: 185.246.196.0/22 IP: 2a13:dc40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:79:0c:af:6a:95:d0:b9:c8:bd:d3:36:fe:f5:fd:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 15:11:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:00:00:27:cb:1e:7a:93:67:cc:b0:ba:c2: 0a:2b:3f:f6:c7:c9:19:a3:cf:45:a9:51:d4:fb:92: f0:15:6f:42:5c:81:3f:bb:27:d6:d9:22:9c:88:6c: 37:66:f7:f1:33:fd:b3:74:48:18:b1:64:c1:2e:c5: e1:f9:6e:46:44:07:a3:a5:03:c6:8d:31:69:31:9f: 31:7b:9c:be:1e:79:2d:dd:ad:60:51:29:9b:7a:de: ed:7f:21:15:43:27:b4:65:e7:a5:d7:5f:3a:f8:b1: 2b:db:93:2b:e0:c2:e1:94:9e:0d:67:22:09:ac:6e: e9:a8:5b:d0:b3:bd:e5:75:51:95:5c:a6:04:06:38: d7:7a:68:f8:e3:0f:cd:1f:4e:de:1e:a0:cc:1c:5e: 16:1b:2a:80:d3:ea:59:4d:2c:d2:4d:3d:00:ad:83: a7:96:73:f3:45:95:df:12:48:27:ad:a2:c2:6e:44: fe:dd:45:5a:9e:e8:90:c4:e7:7f:f7:3f:65:bd:9e: 8f:1e:89:0d:42:ff:ec:c2:fc:e9:46:45:aa:1d:c6: dd:d6:cf:e8:6f:88:f0:f2:97:aa:61:f0:1c:2e:e2: 80:2d:f2:5a:1c:a0:3c:ff:c6:49:bc:5c:b0:9c:66: 2b:e8:bf:55:1e:2e:d9:70:48:42:d1:66:3c:a8:6f: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.85.0-45.80.87.255 177.8.68.0/24 185.140.216.0/22 185.246.196.0/22 IPv6: 2a13:dc40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203244 216003 Signature Algorithm: sha256WithRSAEncryption 54:84:eb:6a:85:62:4b:e2:25:b2:8a:d7:aa:9b:d2:73:fd:6f: 22:1d:e1:7c:d3:78:de:59:69:c1:10:2c:87:e4:81:3a:68:07: 49:1c:5a:44:10:b0:a8:d1:dd:c9:33:ba:18:59:67:1d:d4:34: fd:0d:5a:02:76:45:a9:bd:e7:01:94:75:1d:ee:c7:d8:96:fb: af:b7:89:5d:d5:2f:0c:a3:7d:a8:7f:95:79:59:c6:ef:ff:d3: cc:be:af:24:a6:fb:50:6f:22:af:95:dd:92:cf:6e:aa:78:4b: c4:44:6c:62:ce:a4:f3:81:09:ed:3d:2c:91:f2:15:19:3b:2f: 0d:cf:13:cb:22:70:25:c2:9d:ab:d7:19:f8:6b:ed:06:be:4e: 02:68:e6:20:a4:d7:00:6d:cb:2b:5a:21:06:08:e2:d4:26:aa: 02:db:85:d7:79:d9:1f:87:62:7a:97:78:b0:3e:14:36:92:b5: e9:f3:79:66:7b:8d:2a:61:49:ca:3d:77:8c:9e:30:25:6d:1d: 64:6b:e8:30:cf:87:b5:48:d2:3f:8e:4a:b7:92:e9:70:02:46: 7b:21:a1:94:87:06:01:22:81:99:b5:f5:9c:52:1f:e9:58:de: 55:05:31:41:7f:65:75:30:6c:e5:cf:84:ac:ea:23:41:53:4c: fb:b5:5f:e4 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZpzeQyvapXQuci90zb+9f23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMTUxMTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2I2YjE3YmQyZTVmMTRiZDM3NWEwYzBlNjlkZmM3N2Q5NzAyZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp8AACfLHnqTZ8ywusIKKz/2x8kZ o89FqVHU+5LwFW9CXIE/uyfW2SKciGw3ZvfxM/2zdEgYsWTBLsXh+W5GRAejpQPG jTFpMZ8xe5y+Hnkt3a1gUSmbet7tfyEVQye0Zeel1186+LEr25Mr4MLhlJ4NZyIJ rG7pqFvQs73ldVGVXKYEBjjXemj44w/NH07eHqDMHF4WGyqA0+pZTSzSTT0ArYOn lnPzRZXfEkgnraLCbkT+3UVanuiQxOd/9z9lvZ6PHokNQv/swvzpRkWqHcbd1s/o b4jw8peqYfAcLuKALfJaHKA8/8ZJvFywnGYr6L9VHi7ZcEhC0WY8qG+Q7wIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFPy2sXvS5fFL03WgwOad/HfZcC9KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzAxYTQy MS1iZGJmLTQzZTAtOGFlYi0yYzQ4Y2IyOTg2NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMDFhNDIx LWJkYmYtNDNlMC04YWViLTJjNDhjYjI5ODY0Ni8xL19MYXhlOUxsOFV2VGRhREE1 cDM4ZDlsd0wwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgMAwDBAAtUFUDBAMtUFADBACxCEQDBAK5jNgDBAK5 9sQwDQQCAAIwBwMFAyoT3EAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAxnsAgMD S8MwDQYJKoZIhvcNAQELBQADggEBAFSE62qFYkviJbKK16qb0nP9byId4XzTeN5Z acEQLIfkgTpoB0kcWkQQsKjR3ckzuhhZZx3UNP0NWgJ2Ram95wGUdR3ux9iW+6+3 iV3VLwyjfah/lXlZxu//08y+rySm+1BvIq+V3ZLPbqp4S8REbGLOpPOBCe09LJHy FRk7Lw3PE8sicCXCnavXGfhr7Qa+TgJo5iCk1wBtyytaIQYI4tQmqgLbhdd52R+H YnqXeLA+FDaStenzeWZ7jSphSco9d4yeMCVtHWRr6DDPh7VI0j+OSreS6XACRnsh oZSHBgEigZm19ZxSH+lY3lUFMUF/ZXUwbOXPhKzqI0FTTPu1X+Q= -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:16 2025 by rpki-client