This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer File: iLLLBJMgYFaclyBofe2JHDTrttU.cer (raw, json) Hash identifier: I0Qhqwtw/8j1ubj6o8GVr+c57TCUy1JDvMS1SRR4teE= Subject key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59FACCC74CB62FF8724DCE1E559710 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203415 IP: 2001:67c:228c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:fa:cc:c7:4c:b6:2f:f8:72:4d:ce:1e:55:97:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b2cb04932060569c9720687ded891c34ebb6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:af:5d:58:cf:5d:d2:c7:55:68:d8:bd:41: 81:62:6e:45:f2:d2:ae:a6:f5:c3:5c:74:6e:40:f2: cf:9a:ce:a3:4e:65:45:08:41:86:db:ac:77:8a:c3: 1c:6e:60:90:5c:88:a7:ca:b7:a0:f1:6b:82:0c:70: 4f:5d:13:54:0e:a5:ee:4d:f2:c6:aa:17:76:e2:9d: 24:64:05:50:8a:e6:65:5c:59:28:8b:8e:c2:fb:ff: 9c:74:33:5a:7e:8c:ef:ee:5c:b7:88:e2:9c:3e:12: 47:92:90:8f:53:91:0d:d8:0d:7f:60:9b:a8:75:2b: 0b:43:46:f4:3f:f0:ae:51:9f:38:1b:1c:53:75:6f: f7:75:87:1e:b0:76:5d:14:3f:11:d1:59:dd:e6:e9: e8:ca:c4:4b:33:1c:df:00:63:57:11:0c:51:de:6c: 3b:c8:ea:1b:91:10:02:0e:f4:2a:a3:07:e9:15:4e: f6:57:1a:df:08:4b:f5:6e:dd:59:64:3a:57:74:4a: f2:68:e5:0f:09:f2:1f:6f:69:b6:28:74:2f:e5:8c: f3:46:e6:9c:3e:1b:85:df:e7:1a:19:40:fb:58:4a: c4:d0:b7:19:5d:6c:e9:9b:c3:b7:8d:84:de:30:c7: 35:b4:d8:7f:d4:fa:92:16:ae:3e:84:c3:2f:e3:74: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:228c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203415 Signature Algorithm: sha256WithRSAEncryption 33:2e:27:c6:ea:b3:9d:35:29:a0:66:c5:63:9d:7a:42:62:13: db:38:13:b5:ce:16:f5:da:64:6a:ba:66:53:29:ac:6f:f3:75: 63:d5:fd:ff:1b:6e:44:7c:2f:bd:78:32:54:55:02:8a:c7:90: d0:dd:9c:66:da:d7:5d:dc:22:81:06:a7:fd:95:91:d4:d0:b2: 46:32:69:ce:ac:ca:21:7f:84:9a:62:50:af:d8:f0:ad:c6:a5: f1:2a:a1:12:a9:4a:00:92:64:2b:6e:a6:51:25:cb:a3:80:10: df:de:77:ed:61:44:5b:56:13:c9:c7:60:a9:03:ea:5d:3c:d2: 35:01:30:60:56:13:b3:ac:77:b6:c8:6a:7f:6b:04:aa:0c:bc: 6b:bd:de:25:38:2e:9f:77:83:98:2f:a8:48:81:40:1e:4d:41: 35:2f:55:1e:fd:43:e1:17:f2:85:28:72:2e:8d:55:94:40:24: cf:86:db:46:d2:88:a3:56:94:5d:a0:eb:da:b9:28:10:16:d7: 38:54:49:55:8c:56:d2:ca:73:00:55:c1:84:6e:57:a5:4d:64: 4b:87:df:e3:54:40:81:bc:59:c8:ea:24:01:a0:31:50:03:f9: b5:ee:7a:1b:0f:8d:47:92:4c:31:1b:c2:ce:bd:c3:c7:e7:5a: 2f:47:ae:24 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6WfrMx0y2L/hyTc4eVZcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGIyY2IwNDkzMjA2MDU2OWM5NzIwNjg3ZGVkODkxYzM0ZWJiNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmKvXVjPXdLHVWjYvUGBYm5F8tKu pvXDXHRuQPLPms6jTmVFCEGG26x3isMcbmCQXIinyreg8WuCDHBPXRNUDqXuTfLG qhd24p0kZAVQiuZlXFkoi47C+/+cdDNafozv7ly3iOKcPhJHkpCPU5EN2A1/YJuo dSsLQ0b0P/CuUZ84GxxTdW/3dYcesHZdFD8R0Vnd5unoysRLMxzfAGNXEQxR3mw7 yOobkRACDvQqowfpFU72VxrfCEv1bt1ZZDpXdEryaOUPCfIfb2m2KHQv5YzzRuac PhuF3+caGUD7WErE0LcZXWzpm8O3jYTeMMc1tNh/1PqSFq4+hMMv43ShiwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFIiyywSTIGBWnJcgaH3tiRw067bVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwL2JhNTU5 ZC1lMWJjLTQ3MjctODJkYy00YWQ4ZGE0N2M5YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvYmE1NTlk LWUxYmMtNDcyNy04MmRjLTRhZDhkYTQ3YzlhNi8xL2lMTExCSk1nWUZhY2x5Qm9m ZTJKSERUcnR0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCKMMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMalzANBgkqhkiG9w0BAQsFAAOCAQEAMy4nxuqznTUpoGbFY516QmIT2zgT tc4W9dpkarpmUymsb/N1Y9X9/xtuRHwvvXgyVFUCiseQ0N2cZtrXXdwigQan/ZWR 1NCyRjJpzqzKIX+EmmJQr9jwrcal8SqhEqlKAJJkK26mUSXLo4AQ39537WFEW1YT ycdgqQPqXTzSNQEwYFYTs6x3tshqf2sEqgy8a73eJTgun3eDmC+oSIFAHk1BNS9V Hv1D4RfyhShyLo1VlEAkz4bbRtKIo1aUXaDr2rkoEBbXOFRJVYxW0spzAFXBhG5X pU1kS4ff41RAgbxZyOokAaAxUAP5te56Gw+NR5JMMRvCzr3Dx+daL0euJA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:47 2026 by rpki-client