This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer File: _dlCLeliA-XYc-CZVZGjppDdPZI.cer (raw, json) Hash identifier: qAvRvgLacFK+CDx3LXj4HX4C4ncRi7rx1Zs4JgNc9sk= Subject key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C4A8DFCED1C32F162F8ADC5603316 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.83.64.0/22 IP: 80.241.140.0/22 IP: 2a05:be80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4a:8d:fc:ed:1c:32:f1:62:f8:ad:c5:60:33:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:3e:8d:2a:fe:b0:f5:90:9e:33:70:00:d4: d6:eb:cb:92:7f:37:1f:17:8c:6b:2e:be:11:a9:c9: aa:7e:b6:fc:15:5e:47:fa:9c:0d:c5:27:2d:20:4b: f7:01:e8:b9:4a:94:5e:79:3f:56:30:1f:89:de:86: a9:78:64:d3:f3:25:30:de:64:99:8b:60:a2:00:6c: 15:97:1b:33:8f:29:9a:7d:83:a3:43:33:69:10:34: 11:cc:74:3f:b2:f7:88:f9:15:ff:32:13:60:7d:c0: e7:26:5a:ad:ac:43:dd:87:cd:7f:11:16:18:7a:08: d4:9a:ab:93:75:ee:21:e0:9a:60:1c:5a:4d:be:2d: 1e:62:1e:29:72:01:c0:e9:6c:1e:f9:f8:22:23:87: ab:6b:90:72:8b:ef:a0:cf:89:f5:db:3c:e2:0b:1f: ed:17:24:76:9c:35:4d:57:04:6f:2d:fa:8c:a1:21: 8d:be:3d:62:fe:df:04:c9:43:2f:33:fd:22:43:71: f7:8c:00:48:d5:ee:0e:30:6f:6e:98:53:eb:a3:06: c0:93:d4:68:1d:ff:d7:7e:e8:23:ab:b6:dd:6f:9e: b0:78:5c:9a:5e:e9:1d:c7:29:e4:d7:ac:31:7a:f9: 9e:a1:5a:70:2c:9f:f2:48:a3:8d:09:84:25:ce:68: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.64.0/22 80.241.140.0/22 IPv6: 2a05:be80::/29 Signature Algorithm: sha256WithRSAEncryption 01:f3:14:42:06:57:f3:30:10:24:0b:02:0a:b6:05:ac:ac:00: 39:25:93:a8:b7:9a:70:aa:92:c5:8f:f4:c7:84:10:ea:df:fd: 4a:9e:b9:a5:12:fd:3b:52:01:60:39:ba:8d:78:35:11:5b:ba: c2:7d:af:5d:6e:31:d4:19:24:38:04:12:43:1c:93:28:eb:66: 21:f0:7e:d4:c2:47:06:0d:ea:9e:a3:ab:b4:12:3c:6b:e1:48: 62:a4:7a:73:5c:19:42:f7:c2:d4:65:48:3a:1e:85:ee:f5:d3: e2:47:8a:5b:b7:bd:36:e3:5a:3e:fe:27:0a:1c:8f:06:bf:bb: 32:4f:ee:89:40:c6:83:70:eb:5c:f2:76:84:24:f4:94:67:1b: 03:24:30:bb:e1:0a:25:82:80:71:c8:2e:3e:e8:94:f6:0f:5b: 16:57:07:dc:cb:51:11:95:bb:c0:df:ed:d2:5f:0d:1b:4b:9c: de:6b:f4:71:69:b4:e1:f0:06:ca:00:0b:25:cc:ef:94:bd:fc: 34:57:9c:37:2e:28:d5:ca:89:1c:82:0d:ce:4e:a9:42:47:ae: 83:5b:39:11:44:cb:44:3c:2a:f2:bb:48:fe:83:c3:2d:4e:9d: 2f:14:6f:fd:04:0c:5c:d0:d0:18:4d:3b:98:3b:e4:8a:00:eb: 04:44:98:ef -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9XEqN/O0cMvFi+K3FYDMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGQ5NDIyZGU5NjIwM2U1ZDg3M2UwOTk1NTkxYTNhNjkwZGQzZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQY+jSr+sPWQnjNwANTW68uSfzcf F4xrLr4Rqcmqfrb8FV5H+pwNxSctIEv3Aei5SpReeT9WMB+J3oapeGTT8yUw3mSZ i2CiAGwVlxszjymafYOjQzNpEDQRzHQ/sveI+RX/MhNgfcDnJlqtrEPdh81/ERYY egjUmquTde4h4JpgHFpNvi0eYh4pcgHA6Wwe+fgiI4era5Byi++gz4n12zziCx/t FyR2nDVNVwRvLfqMoSGNvj1i/t8EyUMvM/0iQ3H3jABI1e4OMG9umFProwbAk9Ro Hf/Xfugjq7bdb56weFyaXukdxynk16wxevmeoVpwLJ/ySKONCYQlzmhkgwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2FjZjJl Ni1jOGRkLTQ4YzQtODM4OS1hMTg1NTBhNjlmNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYWNmMmU2 LWM4ZGQtNDhjNC04Mzg5LWExODU1MGE2OWY2Ni8xL19kbENMZWxpQS1YWWMtQ1pW WkdqcHBEZFBaSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCTVNAAwQCUPGMMA0EAgACMAcDBQMqBb6AMA0G CSqGSIb3DQEBCwUAA4IBAQAB8xRCBlfzMBAkCwIKtgWsrAA5JZOot5pwqpLFj/TH hBDq3/1KnrmlEv07UgFgObqNeDURW7rCfa9dbjHUGSQ4BBJDHJMo62Yh8H7UwkcG Deqeo6u0Ejxr4UhipHpzXBlC98LUZUg6HoXu9dPiR4pbt70241o+/icKHI8Gv7sy T+6JQMaDcOtc8naEJPSUZxsDJDC74QolgoBxyC4+6JT2D1sWVwfcy1ERlbvA3+3S Xw0bS5zea/RxabTh8AbKAAslzO+Uvfw0V5w3LijVyokcgg3OTqlCR66DWzkRRMtE PCryu0j+g8MtTp0vFG/9BAxc0NAYTTuYO+SKAOsERJjv -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:30 2026 by rpki-client