This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer File: lDyQO00Og7yLLUVDE26c1fOYZPU.cer (raw, json) Hash identifier: 11Zwv8IUePlx/ATOTLVXIhrAhKf9/BlF3TyIAJ5JZ5A= Subject key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88130ABBBE37B0B2051EA3838C799 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:95c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:81:30:ab:bb:e3:7b:0b:20:51:ea:38:38:c7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:50:d7:0c:0c:65:0e:7b:8d:f5:9d:d9:df: fd:7b:e4:47:0b:3d:29:9e:87:5e:71:63:3e:83:dc: 17:ce:40:b9:a9:9b:97:cc:9c:68:46:24:60:99:a6: 1a:ca:0c:36:5f:d1:2b:5d:12:c0:2d:f3:9e:fb:8c: d9:23:e1:6a:a6:e9:3f:e8:ef:e7:5e:a1:0c:84:31: 6d:88:42:c9:98:72:71:9a:cc:ef:e9:95:73:ad:02: e1:03:96:92:82:0d:8f:b1:d2:8f:d1:d2:c7:12:61: fa:4a:73:1a:40:6e:56:9c:e5:51:a5:8f:ea:3e:1a: 24:76:46:32:24:86:aa:7c:50:81:df:4b:f6:83:ea: cc:9c:98:63:e9:93:14:c2:73:8b:62:2c:a9:45:b0: af:59:79:16:12:37:c3:9b:2d:23:f0:42:cc:c5:ce: 94:68:ff:8e:8d:10:22:70:b0:8a:da:64:91:d2:a0: 22:92:f2:10:30:c8:e5:3f:b6:d8:a0:7b:5b:b1:a0: 7e:d3:32:58:cc:d7:c6:58:89:dc:5c:a6:58:41:ea: f3:aa:4a:ef:3e:9c:a3:03:09:4d:73:48:b8:41:57: 7a:d2:ca:71:ea:62:01:70:7b:ad:8e:20:3a:55:82: e3:2b:42:52:df:e2:88:46:2e:7f:20:b1:99:53:9c: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:95c::/48 Signature Algorithm: sha256WithRSAEncryption a7:7a:27:cc:97:fd:6f:d8:59:94:09:44:fe:fb:9e:39:c1:e7: 1a:7a:5e:a8:82:ee:0d:6e:32:ee:fe:84:e9:aa:90:73:a2:46: 8d:1c:33:af:88:a3:9d:50:ba:f2:8a:b0:1f:7a:c1:97:be:33: a9:35:18:00:2b:9e:20:17:0e:82:37:10:c1:cf:3a:7c:b7:f7: 16:f4:27:6a:77:87:ac:e7:49:80:ed:e6:ca:fb:4b:04:ac:0e: b6:9b:4d:e4:b8:95:0d:6d:3e:d3:b9:09:8d:0e:c4:be:24:be: 72:52:88:88:a8:b7:4e:8f:5c:00:4a:ec:0c:bb:1b:cb:e3:de: 5f:3b:87:c7:9f:e4:32:d5:55:fd:b6:68:e9:f2:92:0f:4c:6f: 20:61:0a:44:a0:ae:89:0d:1c:df:a5:64:e9:ed:a3:7b:b9:a5: 1d:ce:70:3e:8a:56:af:96:9e:d3:9a:e7:6a:5f:52:34:61:ae: 19:b5:b4:02:08:e1:3c:71:25:fa:81:7b:7b:34:e2:4a:de:9b: d1:ef:0e:1e:c9:2c:16:aa:19:6a:ee:d7:8f:74:7f:c3:f3:a9: 4a:72:33:0c:2f:01:7b:ab:fb:b0:d3:c3:dc:32:c9:c4:fc:a5: e6:83:9e:e2:75:76:16:e4:1d:9c:76:0e:bc:93:f5:14:ef:2b: 4e:57:ee:7e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt6yIEwq7vjewsgUeo4OMeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDNjOTAzYjRkMGU4M2JjOGIyZDQ1NDMxMzZlOWNkNWYzOTg2NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpNQ1wwMZQ57jfWd2d/9e+RHCz0p nodecWM+g9wXzkC5qZuXzJxoRiRgmaYaygw2X9ErXRLALfOe+4zZI+Fqpuk/6O/n XqEMhDFtiELJmHJxmszv6ZVzrQLhA5aSgg2PsdKP0dLHEmH6SnMaQG5WnOVRpY/q PhokdkYyJIaqfFCB30v2g+rMnJhj6ZMUwnOLYiypRbCvWXkWEjfDmy0j8ELMxc6U aP+OjRAicLCK2mSR0qAikvIQMMjlP7bYoHtbsaB+0zJYzNfGWIncXKZYQerzqkrv PpyjAwlNc0i4QVd60spx6mIBcHutjiA6VYLjK0JS3+KIRi5/ILGZU5y0iwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFJQ8kDtNDoO8iy1FQxNunNXzmGT1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzUwOGEy Ni1lMTk5LTQxYjktOWUxOS1mOThjNzVkZWEyOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvNTA4YTI2 LWUxOTktNDFiOS05ZTE5LWY5OGM3NWRlYTI5Mi8xL2xEeVFPMDBPZzd5TExVVkRF MjZjMWZPWVpQVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAlcMA0GCSqGSIb3DQEBCwUAA4IBAQCn eifMl/1v2FmUCUT++545wecael6ogu4NbjLu/oTpqpBzokaNHDOviKOdULryirAf esGXvjOpNRgAK54gFw6CNxDBzzp8t/cW9Cdqd4es50mA7ebK+0sErA62m03kuJUN bT7TuQmNDsS+JL5yUoiIqLdOj1wASuwMuxvL495fO4fHn+Qy1VX9tmjp8pIPTG8g YQpEoK6JDRzfpWTp7aN7uaUdznA+ilavlp7TmudqX1I0Ya4ZtbQCCOE8cSX6gXt7 NOJK3pvR7w4eySwWqhlq7tePdH/D86lKcjMMLwF7q/uw08PcMsnE/KXmg57idXYW 5B2cdg68k/UU7ytOV+5+ -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:00 2026 by rpki-client