This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer File: l4kxgrFnGJg7wAjI0If43co9hhQ.cer (raw, json) Hash identifier: ivx/ACiKiF+Tzfk6HcIulVYK25RXajMIMLH2H85U52g= Subject key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD4A8C0DCFF5C9C271603D0675987 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29018 AS: 198018 AS: 209915 IP: 185.177.128.0/22 IP: 194.153.186.0/24 IP: 195.225.132.0/24 IP: 2a0b:1300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d4:a8:c0:dc:ff:5c:9c:27:16:03:d0:67:59:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97893182b16718983bc008c8d087f8ddca3d8614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:37:11:b3:d1:4e:09:2f:08:e0:6c:92:07: 51:a5:24:21:86:6a:cc:73:80:75:db:7f:b9:b0:cf: 4f:be:09:8b:27:94:f2:19:8f:6b:7c:12:b9:c2:d4: 7d:e5:d8:4b:9c:f8:0c:1e:70:1a:67:14:17:c6:71: 17:86:8e:fd:4e:61:53:7e:7e:18:50:6f:f6:a3:78: 20:76:ce:07:a5:36:1e:24:5b:7e:40:08:78:d3:61: f6:01:c0:b7:66:70:e8:9b:86:40:00:20:7c:0e:05: ef:fb:ac:6a:ef:e8:81:7d:6c:b8:78:2b:51:0e:aa: cf:9c:18:21:09:1d:32:d8:58:08:0c:b2:d1:54:0c: 88:dd:72:74:d0:2c:4d:60:ca:7c:5e:09:1b:ee:1a: 3e:b9:8d:1a:5a:ae:11:3b:0b:61:8f:c5:61:55:4f: 9d:34:f6:bf:9a:62:b7:e3:3b:e2:f5:ef:28:64:ab: 59:73:1a:8c:c9:1f:a6:bc:18:86:88:88:c1:59:58: ae:3f:fd:60:13:6c:2d:16:07:7b:3e:73:f7:0a:55: 91:00:f6:a4:af:68:56:ba:9e:59:a8:85:bb:5d:e1: c6:ba:1f:2f:b1:8a:59:e8:24:77:71:ce:5a:34:aa: 9a:d5:b8:98:00:7b:1d:44:38:68:99:43:c4:f8:95: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.128.0/22 194.153.186.0/24 195.225.132.0/24 IPv6: 2a0b:1300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29018 198018 209915 Signature Algorithm: sha256WithRSAEncryption 51:1c:8b:45:90:be:ab:aa:de:0e:00:43:02:25:a4:ef:90:fa: f9:a0:4f:a3:f7:a8:a4:91:3e:ec:ce:5f:19:97:59:87:5b:19: 12:97:42:a5:9c:e8:e0:b3:60:1e:fd:88:d5:8d:bc:73:b5:15: 52:b1:15:ec:4f:1f:99:22:82:78:df:48:8a:2e:b9:83:6f:c5: ae:fb:78:22:11:91:46:86:30:98:69:72:5b:99:50:51:dd:ba: a6:a8:74:22:33:60:a3:06:65:35:67:aa:2d:3d:08:65:11:ba: 6d:60:5b:07:42:74:27:b8:cc:16:7d:66:6e:34:0b:02:e4:c8: 96:dc:86:e8:cb:59:4c:46:08:2e:7a:89:e8:21:13:cb:1c:17: 68:00:15:d9:b6:59:63:d9:fe:81:34:58:91:b7:1a:b4:fa:e2: 3d:dc:56:bf:a0:e3:d5:6c:1b:fa:15:a3:22:86:99:9f:08:bc: 03:e7:b2:52:69:96:02:6e:7a:93:ec:92:49:4c:ce:92:20:1c: 7c:6f:4e:9a:91:c8:9d:15:e5:7a:33:4a:d8:06:ed:d7:14:45: 8b:6e:79:27:47:7a:fa:9f:7c:2c:b5:ae:0f:66:ca:a7:23:5c: 6b:fd:f8:69:dc:3e:a2:d8:da:6f:74:b4:1b:3f:55:5e:2b:a1: df:4a:f9:1d -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt6WtSowNz/XJwnFgPQZ1mHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzg5MzE4MmIxNjcxODk4M2JjMDA4YzhkMDg3ZjhkZGNhM2Q4NjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje83EbPRTgkvCOBskgdRpSQhhmrM c4B123+5sM9PvgmLJ5TyGY9rfBK5wtR95dhLnPgMHnAaZxQXxnEXho79TmFTfn4Y UG/2o3ggds4HpTYeJFt+QAh402H2AcC3ZnDom4ZAACB8DgXv+6xq7+iBfWy4eCtR DqrPnBghCR0y2FgIDLLRVAyI3XJ00CxNYMp8Xgkb7ho+uY0aWq4ROwthj8VhVU+d NPa/mmK34zvi9e8oZKtZcxqMyR+mvBiGiIjBWViuP/1gE2wtFgd7PnP3ClWRAPak r2hWup5ZqIW7XeHGuh8vsYpZ6CR3cc5aNKqa1biYAHsdRDhomUPE+JWKdwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFJeJMYKxZxiYO8AIyNCH+N3KPYYUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzEyMDA0 My0xNzMzLTRjNzItYWQ0Ny1iYzBlNTExYzIwY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvMTIwMDQz LTE3MzMtNGM3Mi1hZDQ3LWJjMGU1MTFjMjBjZS8xL2w0a3hnckZuR0pnN3dBakkw SWY0M2NvOWhoUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCubGAAwQAwpm6AwQAw+GEMA0EAgACMAcDBQMq CxMAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAnFaAgMDBYICAwMz+zANBgkqhkiG 9w0BAQsFAAOCAQEAURyLRZC+q6reDgBDAiWk75D6+aBPo/eopJE+7M5fGZdZh1sZ EpdCpZzo4LNgHv2I1Y28c7UVUrEV7E8fmSKCeN9Iii65g2/Frvt4IhGRRoYwmGly W5lQUd26pqh0IjNgowZlNWeqLT0IZRG6bWBbB0J0J7jMFn1mbjQLAuTIltyG6MtZ TEYILnqJ6CETyxwXaAAV2bZZY9n+gTRYkbcatPriPdxWv6Dj1Wwb+hWjIoaZnwi8 A+eyUmmWAm56k+ySSUzOkiAcfG9OmpHInRXlejNK2Abt1xRFi255J0d6+p98LLWu D2bKpyNca/34adw+otjab3S0Gz9VXiuh30r5HQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:25 2026 by rpki-client