This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer File: l0kuzDe64rn4HaApOFgX1DPFBGc.cer (raw, json) Hash identifier: Q71BVy6uMXadHGKYdv1X+WZMnn1KiSPf4K2APHBClTk= Subject key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA68F230C272E87ECF968588D71CA75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202371 IP: 2.56.131.0/24 IP: 185.133.127.0/24 IP: 2a0e:ff00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8f:23:0c:27:2e:87:ec:f9:68:58:8d:71:ca:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97492ecc37bae2b9f81da029385817d433c50467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:46:60:5b:0d:36:af:9d:ab:0f:7a:f0:ba: d3:4b:92:a1:17:ba:7c:d1:44:83:8f:f5:53:0e:03: 3f:ff:c4:c0:7c:7a:bb:34:16:50:cf:a8:3d:d0:7b: 23:19:66:fe:3a:53:92:75:2c:1f:79:ea:cf:44:3e: 9e:01:42:4f:40:3f:ce:c5:20:12:64:a3:45:d9:76: 55:29:ad:41:31:5b:b1:62:f9:15:d8:06:54:d9:56: 1f:d4:0e:59:b6:b8:12:6f:01:e1:49:03:a8:91:d6: b9:64:4d:b8:31:7e:1a:95:1d:4b:04:8b:de:0c:a0: da:e6:68:b1:4b:14:6d:63:fc:18:1e:23:d3:f7:65: e9:96:86:e3:44:de:eb:bf:4f:be:5d:93:a1:fa:72: 88:72:ab:f8:9d:13:22:4c:06:70:65:34:f3:31:51: d1:74:e7:96:a0:85:ea:de:b6:fe:cd:a6:1e:50:c2: 72:b7:c4:a3:bb:6e:f4:2c:31:30:0e:0b:cb:74:40: 77:89:63:cf:22:64:c4:2c:e4:fe:50:e6:f5:86:67: 68:3c:70:33:1b:a5:0b:d1:f1:93:30:d2:98:cd:91: 95:1b:6e:5e:82:40:b5:e9:db:bf:54:01:2c:1e:1e: 16:ea:c1:13:f4:e2:41:1c:b0:fd:d7:ed:09:5f:45: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.131.0/24 185.133.127.0/24 IPv6: 2a0e:ff00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202371 Signature Algorithm: sha256WithRSAEncryption a1:ef:0d:94:46:8d:0d:86:f1:f9:bb:df:8e:a8:e4:1c:17:fa: 7d:df:8e:0d:81:ea:03:4c:70:88:c1:ca:54:47:dc:10:e0:94: 00:65:3b:d0:9b:46:85:a9:43:f7:39:ae:90:f0:fc:72:ce:af: a5:1a:4c:44:65:84:f5:6b:b4:1d:21:e0:11:87:ee:4e:c4:04: c2:7a:1c:c9:c2:ab:c9:ab:dd:03:2d:8f:da:87:70:35:64:d9: 68:4d:54:a5:31:53:1c:cb:e5:e0:5f:72:c3:cb:cf:b3:90:f7: 5f:76:db:7f:cf:cc:b8:9c:9f:ca:d3:8b:07:2d:6f:41:84:61: fa:d3:21:26:1b:44:a9:ba:09:06:c5:4c:65:c7:ed:c1:33:d8: ae:35:6f:d7:3f:5d:80:d7:4f:86:71:c8:c8:3c:12:f5:4c:55: af:ab:a2:63:4f:f4:a4:c7:41:e5:4a:84:cc:a4:92:08:8e:58: 7c:82:b0:63:7f:92:c0:65:bd:ee:f5:42:5c:cb:50:54:9d:dc: 1f:5e:bf:dd:b4:51:3c:01:13:3a:3e:a9:56:5b:2f:b6:13:ac: 0e:1f:5c:e7:2c:40:7f:8e:b7:e2:ff:de:79:96:c8:ae:8a:26: 93:ff:fc:28:e2:d6:37:58:06:6f:b2:7b:74:30:c0:88:96:36: 13:4b:46:f6 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+po8jDCcuh+z5aFiNccp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzQ5MmVjYzM3YmFlMmI5ZjgxZGEwMjkzODU4MTdkNDMzYzUwNDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaNGYFsNNq+dqw968LrTS5KhF7p8 0USDj/VTDgM//8TAfHq7NBZQz6g90HsjGWb+OlOSdSwfeerPRD6eAUJPQD/OxSAS ZKNF2XZVKa1BMVuxYvkV2AZU2VYf1A5ZtrgSbwHhSQOokda5ZE24MX4alR1LBIve DKDa5mixSxRtY/wYHiPT92XplobjRN7rv0++XZOh+nKIcqv4nRMiTAZwZTTzMVHR dOeWoIXq3rb+zaYeUMJyt8Sju270LDEwDgvLdEB3iWPPImTELOT+UOb1hmdoPHAz G6UL0fGTMNKYzZGVG25egkC16du/VAEsHh4W6sET9OJBHLD91+0JX0UIgQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJdJLsw3uuK5+B2gKThYF9QzxQRnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzY3MDhh YS1mNmRmLTRjNGQtOTJiZC1lOWYxYzU5MWNlZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvNjcwOGFh LWY2ZGYtNGM0ZC05MmJkLWU5ZjFjNTkxY2VkYy8xL2wwa3V6RGU2NHJuNEhhQXBP RmdYMURQRkJHYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAAjiDAwQAuYV/MA0EAgACMAcDBQMqDv8AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWgzANBgkqhkiG9w0BAQsFAAOCAQEAoe8N lEaNDYbx+bvfjqjkHBf6fd+ODYHqA0xwiMHKVEfcEOCUAGU70JtGhalD9zmukPD8 cs6vpRpMRGWE9Wu0HSHgEYfuTsQEwnocycKryavdAy2P2odwNWTZaE1UpTFTHMvl 4F9yw8vPs5D3X3bbf8/MuJyfytOLBy1vQYRh+tMhJhtEqboJBsVMZcftwTPYrjVv 1z9dgNdPhnHIyDwS9UxVr6uiY0/0pMdB5UqEzKSSCI5YfIKwY3+SwGW97vVCXMtQ VJ3cH16/3bRRPAETOj6pVlsvthOsDh9c5yxAf4634v/eeZbIroomk//8KOLWN1gG b7J7dDDAiJY2E0tG9g== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:39 2026 by rpki-client