This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer File: cL9VMELxpDgn3ANFALvRBopyl8o.cer (raw, json) Hash identifier: jZ+EvVkukn2pxnE36beFogVJ3VBgXQWsb9Z8iM9uR1E= Subject key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA72120F21CB5C17868DDEEA26595FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207137 IP: 149.174.0.0/16 IP: 153.53.0.0 -- 153.54.255.255 IP: 185.135.45.0/24 IP: 2a13:240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:21:20:f2:1c:b5:c1:78:68:dd:ee:a2:65:95:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70bf553042f1a43827dc034500bbd1068a7297ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b4:c5:64:0b:ad:2a:ed:1a:f2:d7:8f:63:f2: d7:c1:db:35:67:32:00:ca:b7:be:43:db:20:b5:18: 57:0d:00:9b:6c:6d:16:c9:70:3e:dd:b1:e2:1a:fc: 41:84:06:6a:a8:11:b7:32:b6:e6:8c:ad:9c:f8:00: 13:9b:50:2a:af:42:b6:e8:a1:7e:82:64:65:d1:cb: 1a:1f:53:40:6a:b8:ce:67:74:9d:4e:c6:69:24:8c: 4a:5f:68:10:af:ec:ca:7c:4f:a3:70:93:33:fa:f8: d9:16:7d:49:27:b3:cd:78:93:0c:71:89:5f:95:6d: 43:53:8d:b6:63:59:4e:29:ce:68:3b:43:f1:54:b5: af:cc:7a:02:cd:d5:94:ac:55:01:44:6b:aa:02:d9: 86:f6:b7:8f:52:35:ab:e4:21:a1:11:0a:c9:91:87: c3:a7:5b:b0:ed:3a:02:f8:29:50:27:ce:79:7a:11: 6e:59:03:f8:72:8a:22:af:63:d7:5f:88:31:e9:72: 42:b1:08:ad:5b:e9:97:17:44:01:29:a7:ba:9e:fa: 46:e4:0f:bc:28:42:6a:f0:52:ee:1a:68:4e:b8:08: 35:19:bf:d8:31:d3:7d:9b:9d:be:96:a6:a3:b3:8e: 35:ae:0d:b4:5f:09:6b:02:8f:45:65:47:ff:12:04: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.174.0.0/16 153.53.0.0-153.54.255.255 185.135.45.0/24 IPv6: 2a13:240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207137 Signature Algorithm: sha256WithRSAEncryption 46:dc:73:8f:b0:96:b4:89:fa:7b:c5:c0:25:eb:08:46:08:d6: 36:f5:3c:99:46:1b:6e:41:cf:b9:ca:61:6e:df:ff:f2:72:fe: c6:d2:de:e9:39:ef:29:34:9c:87:82:d2:2f:fb:c1:16:64:28: 1c:29:78:12:83:e6:6b:f8:6d:bc:b7:1b:9c:d2:66:d6:2b:8f: f4:bd:20:4f:54:0c:01:1b:ac:d4:3b:11:74:cf:c6:e5:4c:bb: 32:57:62:a8:31:ea:78:a7:37:f9:ff:de:ce:a6:57:5f:bb:ea: 13:0f:ec:74:4c:b6:a9:b9:6e:86:d0:09:fa:4e:fa:21:ef:2d: 7c:86:1f:6a:68:8d:a4:bb:a9:82:6b:13:9c:01:91:0b:b1:fb: 13:ff:d9:7e:57:3b:6a:b6:9b:cf:4e:65:31:7b:21:d2:00:06: b9:1b:09:bb:16:5f:01:d9:ee:86:13:5f:dd:3f:a3:22:af:29: 61:0d:f9:08:79:27:4e:56:f9:2f:9d:dd:2b:4a:3b:93:02:59: 97:a2:a3:46:1d:c4:72:6b:c2:bc:56:99:2c:9c:78:fd:61:03: 79:cc:b5:7f:bb:68:72:cc:76:59:45:d5:10:3f:86:d8:eb:ab: 1b:9d:66:6c:13:0b:13:c4:3f:f8:c8:89:67:31:c9:13:f8:8e: 2d:74:fc:2b -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt+pyEg8hy1wXho3e6iZZX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGJmNTUzMDQyZjFhNDM4MjdkYzAzNDUwMGJiZDEwNjhhNzI5N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LTFZAutKu0a8tePY/LXwds1ZzIA yre+Q9sgtRhXDQCbbG0WyXA+3bHiGvxBhAZqqBG3MrbmjK2c+AATm1Aqr0K26KF+ gmRl0csaH1NAarjOZ3SdTsZpJIxKX2gQr+zKfE+jcJMz+vjZFn1JJ7PNeJMMcYlf lW1DU422Y1lOKc5oO0PxVLWvzHoCzdWUrFUBRGuqAtmG9rePUjWr5CGhEQrJkYfD p1uw7ToC+ClQJ855ehFuWQP4cooir2PXX4gx6XJCsQitW+mXF0QBKae6nvpG5A+8 KEJq8FLuGmhOuAg1Gb/YMdN9m52+lqajs441rg20XwlrAo9FZUf/EgTaCQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFHC/VTBC8aQ4J9wDRQC70QaKcpfKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2RmNzk0 NC0yNTg5LTQ3Y2ItYWI1Ni01MzU4NDAxZmI3OTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvZGY3OTQ0 LTI1ODktNDdjYi1hYjU2LTUzNTg0MDFmYjc5Ni8xL2NMOVZNRUx4cERnbjNBTkZB THZSQm9weWw4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUF BwEHAQH/BDAwLjAdBAIAATAXAwMAla4wCgMDAJk1AwMAmTYDBAC5hy0wDQQCAAIw BwMFAyoTAkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAykhMA0GCSqGSIb3DQEB CwUAA4IBAQBG3HOPsJa0ifp7xcAl6whGCNY29TyZRhtuQc+5ymFu3//ycv7G0t7p Oe8pNJyHgtIv+8EWZCgcKXgSg+Zr+G28txuc0mbWK4/0vSBPVAwBG6zUOxF0z8bl TLsyV2KoMep4pzf5/97Opldfu+oTD+x0TLapuW6G0An6Tvoh7y18hh9qaI2ku6mC axOcAZELsfsT/9l+VztqtpvPTmUxeyHSAAa5Gwm7Fl8B2e6GE1/dP6MirylhDfkI eSdOVvkvnd0rSjuTAlmXoqNGHcRya8K8VpksnHj9YQN5zLV/u2hyzHZZRdUQP4bY 66sbnWZsEwsTxD/4yIlnMckT+I4tdPwr -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:12 2026 by rpki-client