This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer (raw, json) Hash identifier: CaX1nq75sibkxgOG0sYhybj1amFhosZNxmM6IjDZiCs= Subject key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B43C29AE36F3E179C78D4DE7BB21C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:1758::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:43:c2:9a:e3:6f:3e:17:9c:78:d4:de:7b:b2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=977bfd99d35116f9c644194c36d9b646f73127c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:cd:b4:d4:bd:0c:38:e3:fa:65:1a:4c:32: 64:51:d4:9a:97:45:68:2b:78:c1:4c:52:a1:b9:bd: 6f:04:73:e6:52:45:d4:a9:ed:5e:6b:24:c8:65:bc: b0:d0:04:f1:e3:3b:2f:6b:c2:5d:6a:1a:8c:91:df: d6:a4:76:36:be:0d:9a:f1:df:36:2c:cd:ce:cf:3a: 81:1e:21:83:66:63:d3:63:26:d6:10:41:66:eb:0b: 4e:6b:02:89:84:7f:f3:f6:db:7b:37:65:36:ae:ed: 9a:57:c0:39:34:df:62:cf:95:76:db:4d:f5:ac:7a: f1:2e:be:35:d2:b6:4c:65:50:f7:9c:c6:46:df:47: 5e:e1:3c:d0:19:bd:97:ae:5c:49:64:7f:b4:1a:2e: 66:7a:95:40:07:ac:cd:60:ed:60:37:61:be:f2:8a: dd:6c:4e:d5:40:8b:39:48:99:70:a1:bd:10:1e:e0: 21:6e:e0:fa:b6:d4:ff:e4:87:79:15:92:f2:42:66: be:6c:f2:b6:40:c9:e6:ab:a9:20:ad:eb:e6:95:78: a4:64:8a:7b:ba:0e:a0:4c:bf:38:c1:56:b4:2b:4c: 7f:41:05:b3:7c:87:a9:de:32:51:ee:a1:07:71:ae: 60:b2:e7:f0:37:fe:10:0a:5d:4f:6e:01:e3:db:51: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1758::/48 Signature Algorithm: sha256WithRSAEncryption 58:ca:2d:3a:42:c6:b9:37:30:48:e5:8e:50:05:99:96:e1:5e: 54:9a:b8:48:00:16:83:2a:c2:33:03:ea:d6:28:81:41:03:b4: d8:cb:a2:b0:b4:a1:5d:22:a7:fc:5c:a3:00:8d:21:be:7b:a7: b9:12:db:db:db:df:a6:ab:51:62:d4:25:0c:fa:6d:5b:ba:4d: 92:db:2a:06:99:54:97:7a:9a:8b:0e:cc:a1:71:e7:52:8d:16: 22:66:45:c4:5a:3e:65:12:89:69:a5:8a:f1:d7:ad:1f:6e:2f: e3:01:10:c1:59:1b:2a:0b:e8:3a:f3:0f:d7:3a:5b:63:c8:66: ab:23:05:16:6e:3d:e2:cd:d0:44:9d:86:52:9c:1f:6b:23:09: d5:b2:1c:6f:1f:91:04:78:c7:5b:da:bf:c1:d9:b1:ee:1b:c5: 44:c8:f7:2f:d7:0a:6c:96:a3:c4:d7:40:5d:56:81:32:f2:53: 8c:1e:38:db:0e:39:de:0f:86:a9:24:5f:f6:fa:5d:02:f9:72: 69:cf:f2:c6:18:88:bd:d1:8b:0c:cb:21:39:46:71:37:c7:34: 30:11:1d:75:4c:fb:43:ed:59:0b:5a:ce:9c:ca:ba:dd:d0:a8: 15:41:e6:6a:f4:12:1c:10:86:3b:c8:ce:91:0e:9b:8d:de:0f: 0e:4c:18:52 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt9W0PCmuNvPheceNTee7IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzdiZmQ5OWQzNTExNmY5YzY0NDE5NGMzNmQ5YjY0NmY3MzEyN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tLNtNS9DDjj+mUaTDJkUdSal0Vo K3jBTFKhub1vBHPmUkXUqe1eayTIZbyw0ATx4zsva8JdahqMkd/WpHY2vg2a8d82 LM3OzzqBHiGDZmPTYybWEEFm6wtOawKJhH/z9tt7N2U2ru2aV8A5NN9iz5V22031 rHrxLr410rZMZVD3nMZG30de4TzQGb2XrlxJZH+0Gi5mepVAB6zNYO1gN2G+8ord bE7VQIs5SJlwob0QHuAhbuD6ttT/5Id5FZLyQma+bPK2QMnmq6kgrevmlXikZIp7 ug6gTL84wVa0K0x/QQWzfIep3jJR7qEHca5gsufwN/4QCl1PbgHj21HN3QIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFJd7/ZnTURb5xkQZTDbZtkb3MSfGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2I2Nzhm NS01NTdkLTRiNWQtYWE1MC05YTRmZjAxMzcwMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvYjY3OGY1 LTU1N2QtNGI1ZC1hYTUwLTlhNGZmMDEzNzAxMi8xL2wzdjltZE5SRnZuR1JCbE1O dG0yUnZjeEo4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBdYMA0GCSqGSIb3DQEBCwUAA4IBAQBY yi06Qsa5NzBI5Y5QBZmW4V5UmrhIABaDKsIzA+rWKIFBA7TYy6KwtKFdIqf8XKMA jSG+e6e5Etvb29+mq1Fi1CUM+m1buk2S2yoGmVSXepqLDsyhcedSjRYiZkXEWj5l EolppYrx160fbi/jARDBWRsqC+g68w/XOltjyGarIwUWbj3izdBEnYZSnB9rIwnV shxvH5EEeMdb2r/B2bHuG8VEyPcv1wpslqPE10BdVoEy8lOMHjjbDjneD4apJF/2 +l0C+XJpz/LGGIi90YsMyyE5RnE3xzQwER11TPtD7VkLWs6cyrrd0KgVQeZq9BIc EIY7yM6RDpuN3g8OTBhS -----END CERTIFICATE-----Generated at Mon Jan 12 08:18:11 2026 by rpki-client