This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer File: l8AN4AfUqkpAMdR2ELObd0kIv0k.cer (raw, json) Hash identifier: 5fBcG7wptwcFKTiIxowuHTdh7ZlsbA02MsuG4URczho= Subject key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A28E2CD8E483D4E9F6ED06B459AF62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.10.220.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8e:2c:d8:e4:83:d4:e9:f6:ed:06:b4:59:af:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97c00de007d4aa4a4031d47610b39b774908bf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:45:6f:97:0c:f8:98:bd:f6:71:d7:04:6b: e3:15:80:67:af:4d:88:a9:aa:c7:43:5e:bb:c4:e2: 6d:03:47:c4:cb:1b:c2:65:9f:60:e2:72:33:89:44: 89:3c:ed:77:59:e9:9a:74:d4:5d:91:8e:ca:90:2e: 49:6e:79:c7:3b:6c:ed:f0:72:15:6e:cd:13:be:23: 97:02:3d:8a:01:20:14:ee:df:c3:8a:27:6a:3f:71: c9:7c:be:ee:c1:e9:2d:2e:ea:fc:db:12:8f:65:69: bc:84:8c:7e:1b:6b:24:21:1d:eb:18:97:28:a2:cc: df:66:f1:5c:eb:a4:95:dd:6a:16:95:21:36:b9:01: 92:68:7e:4c:9b:21:e8:7d:1e:59:a8:37:3c:d3:63: 98:f0:52:38:f1:33:f8:36:5c:eb:12:06:11:4e:4c: 3f:fc:19:f0:b0:db:3c:83:85:e4:ae:db:5b:3e:fb: 22:a7:44:88:40:1a:fc:b9:8d:1c:ea:d5:95:e3:72: 0b:37:0f:65:82:69:12:4e:96:f2:f5:8f:a2:e7:58: e8:83:2a:e4:bf:59:7a:74:fa:c8:73:da:bb:a1:8a: 5f:6b:56:95:1d:6c:6b:55:2a:b0:86:f8:30:ee:d6: e6:5b:71:40:e7:12:a0:ca:0c:c3:c5:d5:f0:01:64: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.220.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:63:fa:86:4b:d0:51:79:14:99:ae:c7:37:84:84:d8:73:8a: 46:a7:ee:2b:dc:ec:29:e6:4e:f4:ac:ff:1f:59:83:b5:03:49: 40:f2:08:59:35:9c:68:90:f7:05:c9:d0:89:35:9f:a4:72:3d: 8d:5c:36:cf:dc:2b:d8:bb:e8:d1:c9:92:2f:5d:46:25:27:4c: 0c:65:9b:3c:c9:ba:a4:90:a7:58:0c:f6:ae:5a:8c:0a:b8:25: c1:05:45:9c:04:0e:76:17:d3:40:ba:d9:65:3a:1c:c8:67:dd: ee:8c:5b:ec:3c:1f:92:a8:7a:9d:c3:38:3b:75:f2:1d:aa:d1: 21:7d:ca:18:1b:83:ca:0d:34:38:c1:ff:07:ca:13:a0:76:90: e1:52:e7:b3:ff:97:f1:e7:56:1c:e1:6e:e7:f8:a4:2d:09:af: 50:bf:f6:c3:1f:dd:6a:32:e0:7a:8e:c5:b4:0a:cd:fa:98:9d: 70:df:03:2b:04:67:93:a3:dd:bf:9b:01:8e:15:1c:f5:9c:c3: ec:ca:20:70:1d:04:d5:44:62:86:a2:63:ca:9d:87:09:96:a6: 99:09:f8:28:f8:d0:89:9b:c1:51:5a:76:fd:a1:0d:b9:9d:c9: d9:ed:d1:d9:98:b8:fb:d0:11:fb:11:49:15:03:c6:4f:01:37: cb:cb:09:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4oo4s2OSD1On27Qa0Wa9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2MwMGRlMDA3ZDRhYTRhNDAzMWQ0NzYxMGIzOWI3NzQ5MDhiZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcBFb5cM+Ji99nHXBGvjFYBnr02I qarHQ167xOJtA0fEyxvCZZ9g4nIziUSJPO13WemadNRdkY7KkC5JbnnHO2zt8HIV bs0TviOXAj2KASAU7t/DiidqP3HJfL7uwektLur82xKPZWm8hIx+G2skIR3rGJco oszfZvFc66SV3WoWlSE2uQGSaH5MmyHofR5ZqDc802OY8FI48TP4NlzrEgYRTkw/ /BnwsNs8g4XkrttbPvsip0SIQBr8uY0c6tWV43ILNw9lgmkSTpby9Y+i51jogyrk v1l6dPrIc9q7oYpfa1aVHWxrVSqwhvgw7tbmW3FA5xKgygzDxdXwAWTjmQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJfADeAH1KpKQDHUdhCzm3dJCL9JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzAwNzdj NS1mMGJlLTQ2M2YtYWI3NS04YzNkY2M0NTkwMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvMDA3N2M1 LWYwYmUtNDYzZi1hYjc1LThjM2RjYzQ1OTAyNi8xL2w4QU40QWZVcWtwQU1kUjJF TE9iZDBrSXYway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwwrcMA0GCSqGSIb3DQEBCwUAA4IBAQB9Y/qG S9BReRSZrsc3hITYc4pGp+4r3Owp5k70rP8fWYO1A0lA8ghZNZxokPcFydCJNZ+k cj2NXDbP3CvYu+jRyZIvXUYlJ0wMZZs8ybqkkKdYDPauWowKuCXBBUWcBA52F9NA utllOhzIZ93ujFvsPB+SqHqdwzg7dfIdqtEhfcoYG4PKDTQ4wf8HyhOgdpDhUuez /5fx51Yc4W7n+KQtCa9Qv/bDH91qMuB6jsW0Cs36mJ1w3wMrBGeTo92/mwGOFRz1 nMPsyiBwHQTVRGKGomPKnYcJlqaZCfgo+NCJm8FRWnb9oQ25ncnZ7dHZmLj70BH7 EUkVA8ZPATfLywk1 -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:59 2026 by rpki-client