This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer File: _LiYPlKfyUm4n6s3A7eVt4sah1w.cer (raw, json) Hash identifier: DuYAKN1UK3TG5nNJ2hjOhTzjtxuQBm7VNgRXqYI2EOo= Subject key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB8DA6C12A70781F19E4180A091F3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206376 IP: 185.188.124.0/22 IP: 2a0b:c380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 00:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8d:a6:c1:2a:70:78:1f:19:e4:18:0a:09:1f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcb8983e529fc949b89fab3703b795b78b1a875c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:2b:ba:1e:39:65:96:08:30:4a:7b:85:2c: 85:ac:82:44:f8:13:e9:2d:53:44:ef:46:46:35:f5: 73:db:6a:90:6a:90:1c:6f:9f:0f:77:67:42:2a:d7: 49:a6:96:98:00:66:8a:63:0f:d6:8a:14:35:4f:f6: 4e:fb:24:ef:32:9d:9d:13:a8:b7:66:e3:28:b4:bf: 1f:35:df:df:75:e8:b8:d0:9f:27:e5:85:6c:dc:ad: 63:5e:1a:fb:cc:86:50:fa:64:07:a0:6d:25:06:68: 9f:96:b8:1a:02:dc:72:56:6a:80:92:11:4f:67:94: f6:94:33:ce:6c:2a:76:06:61:33:1e:99:8e:2e:49: 51:23:d6:36:18:56:ac:15:6b:d7:54:ed:f4:f6:00: d0:e1:de:92:53:06:f5:37:71:fd:79:72:7b:19:72: e2:e4:f0:eb:fc:a2:b5:70:80:da:cb:87:a1:4d:39: 3e:91:9b:4a:c1:9c:57:ac:35:7c:e0:d6:27:1e:f9: 44:b4:cb:0d:c9:8b:f9:7f:26:c0:d8:a2:80:52:01: 78:f3:9a:8d:64:19:0d:b2:fd:1e:e7:1f:32:53:25: 62:06:92:4d:01:fe:4b:4c:be:aa:bc:5c:39:53:18: ae:b7:62:75:44:9d:1b:ad:cd:6d:dd:5a:58:fb:66: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.124.0/22 IPv6: 2a0b:c380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206376 Signature Algorithm: sha256WithRSAEncryption 53:22:01:a3:69:5d:c1:48:c4:56:1f:74:1d:1a:f2:49:3c:3b: a9:a3:61:de:6d:c0:f8:94:8f:44:94:44:a5:56:6e:74:e1:ad: cf:13:b3:86:33:6b:0a:c3:d0:0d:ab:71:8a:e3:58:b0:04:f7: 36:25:f8:74:e4:e0:8b:ee:68:a6:49:55:19:bc:1c:b4:fa:4a: 88:59:b7:43:a3:8f:67:99:21:fa:91:b7:38:8c:93:2f:fc:55: d6:a5:a9:b5:87:e8:2e:ac:79:6f:bf:3a:ca:42:38:5c:7b:9f: 8d:7f:22:43:36:e5:14:68:a3:fc:5b:ed:3e:1d:b9:20:5a:26: 91:9b:20:26:b0:b5:4f:49:9a:69:34:04:dd:8c:ea:7f:c4:73: 8e:bd:f6:b6:4c:26:6a:09:88:4d:83:4f:41:df:f9:84:9f:9e: 54:25:fd:aa:f4:33:91:27:c4:68:ea:e5:13:f1:68:b8:e5:9a: bf:80:7b:22:91:c3:86:c8:91:4d:f3:e9:33:de:93:1a:c4:7d: 77:20:e7:ca:35:40:64:26:d6:d6:28:54:79:fb:f1:59:b1:39: d9:42:17:da:5f:fc:43:06:fa:74:da:1b:9b:bb:b1:97:45:13: db:f5:02:9f:51:46:2b:a7:0c:87:6e:3f:02:85:45:fb:c4:5f: 40:fe:52:1b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt2642mwSpweB8Z5BgKCR88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2I4OTgzZTUyOWZjOTQ5Yjg5ZmFiMzcwM2I3OTViNzhiMWE4NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYQruh45ZZYIMEp7hSyFrIJE+BPp LVNE70ZGNfVz22qQapAcb58Pd2dCKtdJppaYAGaKYw/WihQ1T/ZO+yTvMp2dE6i3 ZuMotL8fNd/fdei40J8n5YVs3K1jXhr7zIZQ+mQHoG0lBmiflrgaAtxyVmqAkhFP Z5T2lDPObCp2BmEzHpmOLklRI9Y2GFasFWvXVO309gDQ4d6SUwb1N3H9eXJ7GXLi 5PDr/KK1cIDay4ehTTk+kZtKwZxXrDV84NYnHvlEtMsNyYv5fybA2KKAUgF485qN ZBkNsv0e5x8yUyViBpJNAf5LTL6qvFw5Uxiut2J1RJ0brc1t3VpY+2Yl+QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzRmMTBh My02YjIxLTQ4MDUtOGUwMy05MzFmZjNkOWRmNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNGYxMGEz LTZiMjEtNDgwNS04ZTAzLTkzMWZmM2Q5ZGY0MS8xL19MaVlQbEtmeVVtNG42czNB N2VWdDRzYWgxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubx8MA0EAgACMAcDBQMqC8OAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmKDANBgkqhkiG9w0BAQsFAAOCAQEAUyIBo2ldwUjE Vh90HRrySTw7qaNh3m3A+JSPRJREpVZudOGtzxOzhjNrCsPQDatxiuNYsAT3NiX4 dOTgi+5opklVGbwctPpKiFm3Q6OPZ5kh+pG3OIyTL/xV1qWptYfoLqx5b786ykI4 XHufjX8iQzblFGij/FvtPh25IFomkZsgJrC1T0maaTQE3Yzqf8Rzjr32tkwmagmI TYNPQd/5hJ+eVCX9qvQzkSfEaOrlE/FouOWav4B7IpHDhsiRTfPpM96TGsR9dyDn yjVAZCbW1ihUefvxWbE52UIX2l/8Qwb6dNobm7uxl0UT2/UCn1FGK6cMh24/AoVF +8RfQP5SGw== -----END CERTIFICATE-----Generated at Tue Jan 6 07:43:33 2026 by rpki-client