This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer File: 1-LPVjZk_lghA9-8v4gwAityXH5c.cer (raw, json) Hash identifier: 6WsfvnorGQS66utvrBKA+AluDcfQq+f39fxWl+vhxFI= Subject key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE59FA3F080B54D3258CA7B62FE44 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41000 IP: 176.74.16.0/21 IP: 185.86.108.0/22 IP: 185.176.248.0/22 IP: 193.23.224.0/24 IP: 193.33.178.0/23 IP: 194.110.243.0/24 IP: 195.170.173.0/24 IP: 2a00:b980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e5:9f:a3:f0:80:b5:4d:32:58:ca:7b:62:fe:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:4d:26:f4:ec:da:53:16:19:32:d3:d0:d6: 2f:10:c0:e0:0c:0c:13:49:7d:04:34:b9:df:c1:bc: 56:ff:3c:5f:22:cd:9b:de:1d:09:a1:5c:59:4c:ca: 04:d2:df:92:c7:47:7a:58:95:aa:5a:bf:03:5c:8c: 4e:45:9e:bd:57:95:f3:c0:1d:1f:75:70:f9:c1:ec: 24:cd:03:9f:14:10:7d:52:77:dc:ec:14:4b:0e:1d: 10:4a:93:c3:46:bf:44:a1:60:f6:91:bc:50:e2:27: 05:c4:5d:d2:39:ba:f0:3b:b1:00:3a:c1:5c:d6:25: b6:ac:e3:18:62:57:ea:98:0e:e3:80:51:6c:3f:00: 92:5d:25:c2:53:da:1f:cb:c8:64:02:99:b1:8c:9e: d1:97:c7:27:7e:7d:68:fb:dc:34:61:f3:af:ff:1f: 7d:5c:b1:ad:25:d3:7a:5c:0d:cc:0f:4c:66:e0:77: e2:02:a3:ca:60:45:ef:05:5a:db:a2:33:85:03:0c: ee:78:fa:af:85:d5:a3:7d:e3:3d:b0:90:40:40:9e: 24:95:e4:2f:a3:36:94:ab:13:9e:d1:74:5e:4a:ff: 5b:0f:1f:45:d2:fc:1b:36:f5:95:91:0e:09:00:6f: 5f:90:1d:ac:c6:e4:d2:e2:82:59:1f:65:e4:6d:7e: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.74.16.0/21 185.86.108.0/22 185.176.248.0/22 193.23.224.0/24 193.33.178.0/23 194.110.243.0/24 195.170.173.0/24 IPv6: 2a00:b980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41000 Signature Algorithm: sha256WithRSAEncryption 1d:3a:4c:8d:14:89:08:ad:ee:f8:a3:b6:e2:d8:26:2f:ce:2d: c0:35:68:b2:e3:f1:4c:23:89:0e:6a:6e:58:1f:48:d1:e0:e2: 51:30:35:b2:b5:55:82:46:ef:e5:1f:d1:cb:2c:9f:db:e3:3b: 79:db:2e:69:21:ef:52:64:99:46:94:52:54:34:64:b0:d2:61: 1f:2e:38:1a:9e:27:34:b7:c9:4a:2a:c5:27:2e:ef:fd:81:bc: 14:c3:92:17:b5:81:a1:94:79:f1:18:bb:80:ea:64:bd:d5:69: 84:40:ed:29:7c:df:4f:1a:81:3b:e7:2d:ac:e2:7c:b7:67:d0: e7:89:ec:15:b7:26:e3:3e:97:5b:dc:b9:b7:ec:bc:07:18:88: d5:10:96:84:af:e9:9b:ad:9d:63:46:cf:bb:ce:b3:bf:bd:15: 5a:2b:98:61:e9:cd:16:a6:25:b8:c2:88:a8:25:76:b8:ce:c4: 52:d5:6a:0e:74:4d:61:a2:21:1f:a7:a4:7e:c5:1b:b6:ea:a8: 2f:f4:f9:76:31:77:51:d8:c1:44:e8:36:25:86:55:b3:d7:70: dc:05:b3:ec:ed:a5:95:fb:7e:b4:38:c0:3d:9f:09:f8:ff:01: 23:6a:a6:34:99:ce:42:1a:32:45:4a:a4:46:7f:69:03:2e:d2: fa:57:61:1e -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt6WuWfo/CAtU0yWMp7Yv5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGIzZDU4ZDk5M2Y5NjA4NDBmN2VmMmZlMjBjMDA4YWRjOTcxZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApppNJvTs2lMWGTLT0NYvEMDgDAwT SX0ENLnfwbxW/zxfIs2b3h0JoVxZTMoE0t+Sx0d6WJWqWr8DXIxORZ69V5XzwB0f dXD5wewkzQOfFBB9Unfc7BRLDh0QSpPDRr9EoWD2kbxQ4icFxF3SObrwO7EAOsFc 1iW2rOMYYlfqmA7jgFFsPwCSXSXCU9ofy8hkApmxjJ7Rl8cnfn1o+9w0YfOv/x99 XLGtJdN6XA3MD0xm4HfiAqPKYEXvBVrbojOFAwzuePqvhdWjfeM9sJBAQJ4kleQv ozaUqxOe0XReSv9bDx9F0vwbNvWVkQ4JAG9fkB2sxuTS4oJZH2XkbX4AAQIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFPiz1Y2ZP5YIQPfvL+IMAIrclx+XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzhiNThl OS0zMjMwLTQ0MTgtOGY2OC04MTIyNGU0ODBjMDMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGI1OGU5 LTMyMzAtNDQxOC04ZjY4LTgxMjI0ZTQ4MGMwMy8xLzEtTFBWalprX2xnaEE5LTh2 NGd3QWl0eVhINWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBSBggrBgEF BQcBBwEB/wRDMEEwMAQCAAEwKgMEA7BKEAMEArlWbAMEArmw+AMEAMEX4AMEAcEh sgMEAMJu8wMEAMOqrTANBAIAAjAHAwUDKgC5gDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAoCgwDQYJKoZIhvcNAQELBQADggEBAB06TI0UiQit7vijtuLYJi/OLcA1 aLLj8UwjiQ5qblgfSNHg4lEwNbK1VYJG7+Uf0cssn9vjO3nbLmkh71JkmUaUUlQ0 ZLDSYR8uOBqeJzS3yUoqxScu7/2BvBTDkhe1gaGUefEYu4DqZL3VaYRA7Sl8308a gTvnLazifLdn0OeJ7BW3JuM+l1vcubfsvAcYiNUQloSv6ZutnWNGz7vOs7+9FVor mGHpzRamJbjCiKgldrjOxFLVag50TWGiIR+npH7FG7bqqC/0+XYxd1HYwUToNiWG VbPXcNwFs+ztpZX7frQ4wD2fCfj/ASNqpjSZzkIaMkVKpEZ/aQMu0vpXYR4= -----END CERTIFICATE-----Generated at Wed Feb 4 08:28:19 2026 by rpki-client