This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer File: l0417CGA2uvRvz3URAOp4L_LVso.cer (raw, json) Hash identifier: nU528EUOM4oTBCwR/S589SIev7B7nr5qc6N+anQdFjw= Subject key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5948A2DAB1F1AE4B2DCEAA8D59D25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215686 IP: 91.229.236.0/24 IP: 194.39.242.0/24 IP: 2a0c:dd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:94:8a:2d:ab:1f:1a:e4:b2:dc:ea:a8:d5:9d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:71:46:85:fd:0e:c2:00:22:45:35:8a:ad:47: 94:6a:39:33:9d:85:11:21:ac:53:35:4d:69:bb:41: 0a:82:a6:f3:85:68:65:35:c6:13:dc:2a:72:ef:aa: 13:48:09:b2:45:4e:72:72:51:cc:a8:c3:5f:28:8e: 7e:13:22:4c:df:c5:cb:56:9a:82:e0:9d:16:8a:ce: 39:6c:75:8d:f5:03:58:29:b7:92:d4:21:06:1d:a2: 9d:32:f2:07:ee:59:e8:c7:1e:80:bd:c6:7d:df:9d: 53:a8:e3:5c:5d:aa:51:e0:e5:12:04:c1:92:74:f5: fc:f5:1f:68:b2:d7:63:22:59:9c:5c:50:7e:f7:ae: c9:db:94:3e:02:fb:e3:36:70:f3:b6:07:af:e5:73: 2b:e8:d0:ff:63:a8:94:7e:2b:14:9e:d6:df:de:83: 45:17:65:c0:a7:a2:ff:09:4b:23:c1:f5:b6:2d:96: 73:b9:c6:b0:52:bd:ac:7f:26:10:8b:1c:85:a3:8b: c0:c5:25:e7:99:ee:75:c8:36:11:dd:11:8c:df:fb: 9f:0b:0b:ba:5e:2a:80:f3:35:61:db:1f:a8:ae:6c: 5a:ca:6e:d4:3a:47:a6:13:c9:6c:4e:b4:33:04:20: 87:79:11:37:e5:6b:79:df:4d:5c:08:2f:54:b8:a8: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.236.0/24 194.39.242.0/24 IPv6: 2a0c:dd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215686 Signature Algorithm: sha256WithRSAEncryption 94:38:df:e2:9f:e1:26:c3:6f:e9:f7:45:14:13:4d:65:c4:77: dd:02:e3:b8:dc:db:b2:2b:3a:b8:47:8e:cc:ca:24:92:2a:4b: 84:cc:fa:08:b0:57:5c:f4:52:08:d9:24:86:04:55:96:d4:58: 57:7c:d8:cb:05:af:71:e6:41:09:4b:6d:fc:80:04:02:d7:e2: c9:44:fb:88:f8:78:31:df:b3:a3:a4:42:d9:17:07:d8:80:70: a3:c8:ac:ee:20:b3:b9:17:54:88:6e:94:6d:17:fa:8a:ff:b1: c5:72:64:16:6b:8d:c9:7e:5d:72:8f:9e:dc:3a:84:c7:92:60: e9:25:76:f3:2d:75:93:33:3a:f6:0e:83:c9:3d:c5:1f:d9:2a: 74:a6:b0:b5:02:7d:4b:d1:2b:72:b3:c1:ae:64:7e:68:19:e5: 7d:b7:8e:18:d6:a7:80:64:5b:07:9b:1e:b4:20:16:3a:c3:b7: da:e4:a1:d0:21:fd:d8:96:c2:6f:e5:9c:c6:9c:b6:d0:3f:1e: 40:92:ad:65:e2:4a:ef:3c:de:9b:d7:22:69:96:de:6e:a1:7d: 48:9c:31:ee:01:c4:5c:cc:4a:6e:bf:1a:dd:ed:84:1f:6f:c8: 75:95:e7:2b:03:b9:77:3c:aa:f6:0f:3b:19:2e:50:c6:55:c9: b4:35:7f:9f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pZSKLasfGuSy3Oqo1Z0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzRlMzVlYzIxODBkYWViZDFiZjNkZDQ0NDAzYTllMGJmY2I1NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XFGhf0OwgAiRTWKrUeUajkznYUR IaxTNU1pu0EKgqbzhWhlNcYT3Cpy76oTSAmyRU5yclHMqMNfKI5+EyJM38XLVpqC 4J0Wis45bHWN9QNYKbeS1CEGHaKdMvIH7lnoxx6AvcZ9351TqONcXapR4OUSBMGS dPX89R9ostdjIlmcXFB+967J25Q+AvvjNnDztgev5XMr6ND/Y6iUfisUntbf3oNF F2XAp6L/CUsjwfW2LZZzucawUr2sfyYQixyFo4vAxSXnme51yDYR3RGM3/ufCwu6 XiqA8zVh2x+ormxaym7UOkemE8lsTrQzBCCHeRE35Wt5301cCC9UuKgqDwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJdONewhgNrr0b891EQDqeC/y1bKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2RmNGEw YS1jMzNkLTRlMGUtYjE1ZS1jZGY0YzZiNDI0ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvZGY0YTBh LWMzM2QtNGUwZS1iMTVlLWNkZjRjNmI0MjRlMS8xL2wwNDE3Q0dBMnV2UnZ6M1VS QU9wNExfTFZzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW+XsAwQAwifyMA0EAgACMAcDBQMqDN0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKhjANBgkqhkiG9w0BAQsFAAOCAQEAlDjf 4p/hJsNv6fdFFBNNZcR33QLjuNzbsis6uEeOzMokkipLhMz6CLBXXPRSCNkkhgRV ltRYV3zYywWvceZBCUtt/IAEAtfiyUT7iPh4Md+zo6RC2RcH2IBwo8is7iCzuRdU iG6UbRf6iv+xxXJkFmuNyX5dco+e3DqEx5Jg6SV28y11kzM69g6DyT3FH9kqdKaw tQJ9S9ErcrPBrmR+aBnlfbeOGNangGRbB5setCAWOsO32uSh0CH92JbCb+Wcxpy2 0D8eQJKtZeJK7zzem9ciaZbebqF9SJwx7gHEXMxKbr8a3e2EH2/IdZXnKwO5dzyq 9g87GS5QxlXJtDV/nw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:41 2026 by rpki-client