This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer File: _l28QbEed7xEvSxzVVS1tCWNDDM.cer (raw, json) Hash identifier: MgFpcZF1xJiKuyx/UN+1R6JZWb/ECVXv3RMk5WteFxU= Subject key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE54FB3CCDA681DB0B8851501959B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48933 IP: 193.36.35.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e5:4f:b3:cc:da:68:1d:b0:b8:85:15:01:95:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:d1:d5:97:5d:1f:67:6d:77:45:2a:d0:20: 86:90:5b:93:9a:9d:63:c8:02:a1:7e:33:2b:26:78: 79:34:2b:cc:4d:34:f6:89:d7:a9:e5:5d:c4:85:70: 84:7c:5e:3c:b3:69:0b:1a:eb:c9:9e:83:ab:bf:f2: e8:32:31:be:bc:43:16:a2:58:3a:3c:92:3f:5c:7a: b5:9e:fc:b2:1b:93:03:59:fb:fe:0c:82:0f:2a:f3: 52:e6:8e:ae:d5:5b:8c:b3:ee:3b:72:62:03:af:de: a6:e9:99:84:b3:48:c0:1f:a8:e1:5b:33:dd:4e:41: 4e:b1:e2:fd:5a:cc:4f:41:f9:d2:95:39:00:3b:33: e0:3e:b6:d7:5e:31:28:c0:25:77:f9:21:6c:55:18: 08:d5:f3:6c:6c:eb:13:06:c9:16:19:9e:34:be:df: c1:38:ca:2c:fc:c5:75:9c:d0:57:2b:d8:25:45:e3: f4:7a:0d:9d:85:e6:1f:51:38:b7:11:af:fa:9e:6d: 38:4d:ff:19:1a:1a:02:62:80:76:a7:f0:bc:bb:ef: 9f:c1:71:23:8e:b1:5f:4a:09:8c:1d:40:52:35:35: bf:06:19:a3:dc:81:be:c4:a7:b1:8b:79:72:3e:45: b9:95:a1:ce:bd:60:09:a8:07:ff:90:d4:46:ac:8d: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.35.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48933 Signature Algorithm: sha256WithRSAEncryption 10:91:0d:72:7d:16:2d:48:fd:7e:55:07:59:08:3f:b7:60:e6: 96:a5:14:01:a0:9a:28:5d:22:64:01:fb:39:d5:9b:1a:33:db: 20:ab:19:1a:3d:e6:02:5f:4c:4e:f4:3d:93:1d:99:88:1a:e1: 81:06:ce:3a:01:31:e6:67:07:d8:85:3b:45:05:9e:ff:f3:e9: 35:7e:59:b8:dc:aa:31:ad:f4:aa:22:75:3e:96:7f:d7:d1:da: 5c:f2:2f:98:21:f0:a4:91:c8:14:ff:df:24:da:30:1c:d9:8e: 2f:6c:13:aa:12:bc:39:46:3c:61:11:97:14:38:99:e5:2a:24: 59:4a:88:95:0e:a0:92:1f:99:52:a5:7e:2b:94:77:b2:78:fc: f9:66:3c:ab:9f:9f:95:c8:ab:71:18:29:01:a7:75:89:e2:8b: 59:eb:bb:7e:4f:dd:dd:87:ad:04:40:15:51:d1:60:ee:0b:c2: 85:15:3c:cb:42:ee:a4:9a:c0:3e:ba:66:72:f3:45:23:e8:19: d4:dd:ed:e4:c3:8f:88:08:c6:b0:c6:44:c0:99:3e:f7:d8:03: b1:5c:54:8a:aa:ed:7d:71:7d:36:fc:05:c2:44:33:29:a0:a7: f4:2b:61:5d:b7:70:e2:71:cb:1f:85:99:d7:a9:d6:43:6d:78: 77:ed:6c:0f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WuVPs8zaaB2wuIUVAZWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTVkYmM0MWIxMWU3N2JjNDRiZDJjNzM1NTU0YjViNDI1OGQwYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM/R1ZddH2dtd0Uq0CCGkFuTmp1j yAKhfjMrJnh5NCvMTTT2idep5V3EhXCEfF48s2kLGuvJnoOrv/LoMjG+vEMWolg6 PJI/XHq1nvyyG5MDWfv+DIIPKvNS5o6u1VuMs+47cmIDr96m6ZmEs0jAH6jhWzPd TkFOseL9WsxPQfnSlTkAOzPgPrbXXjEowCV3+SFsVRgI1fNsbOsTBskWGZ40vt/B OMos/MV1nNBXK9glReP0eg2dheYfUTi3Ea/6nm04Tf8ZGhoCYoB2p/C8u++fwXEj jrFfSgmMHUBSNTW/Bhmj3IG+xKexi3lyPkW5laHOvWAJqAf/kNRGrI0uMwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFP5dvEGxHne8RL0sc1VUtbQljQwzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzA4NGQz My05ZmVkLTQ2MjAtYjQ2Yy04OGE2MzE0ODAyNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvMDg0ZDMz LTlmZWQtNDYyMC1iNDZjLTg4YTYzMTQ4MDI2Zi8xL19sMjhRYkVlZDd4RXZTeHpW VlMxdENXTkRETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSQjMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC/JTANBgkqhkiG9w0BAQsFAAOCAQEAEJENcn0WLUj9flUHWQg/t2DmlqUUAaCa KF0iZAH7OdWbGjPbIKsZGj3mAl9MTvQ9kx2ZiBrhgQbOOgEx5mcH2IU7RQWe//Pp NX5ZuNyqMa30qiJ1PpZ/19HaXPIvmCHwpJHIFP/fJNowHNmOL2wTqhK8OUY8YRGX FDiZ5SokWUqIlQ6gkh+ZUqV+K5R3snj8+WY8q5+flcircRgpAad1ieKLWeu7fk/d 3YetBEAVUdFg7gvChRU8y0LupJrAPrpmcvNFI+gZ1N3t5MOPiAjGsMZEwJk+99gD sVxUiqrtfXF9NvwFwkQzKaCn9CthXbdw4nHLH4WZ16nWQ214d+1sDw== -----END CERTIFICATE-----Generated at Mon Jan 12 09:22:20 2026 by rpki-client