This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer File: LJ5JliBz-e-2akswNQbaY0FWdFA.cer (raw, json) Hash identifier: toIFs0wUdLNAHTFIKfCTCXBwNMzC3JuutBDypGNAN3I= Subject key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4ADE1EB8D1372BDC6BF261F3D9B91A8D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 23 Dec 2025 11:00:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 20802 AS: 213425 IP: 185.111.220.0/22 IP: 195.200.69.0/24 IP: 2a06:6000::/29 IP: 2a14:8180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:1e:b8:d1:37:2b:dc:6b:f2:61:f3:d9:b9:1a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 23 11:00:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c9e49962073f9efb66a4b303506da6341567450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:df:83:0a:ef:d0:c1:ea:4d:f6:01:f6:31: 72:da:5b:9f:37:78:7e:e4:69:d5:37:9c:ea:c9:a3: 73:a5:9c:e2:02:e6:74:9c:35:ff:de:b6:44:0f:2d: da:a0:cf:c2:25:3d:fe:cf:5c:10:74:ef:c5:7c:66: 8c:b1:04:fa:1d:37:71:11:08:46:ca:a2:c8:b6:a4: 61:82:68:d0:7a:de:12:2f:8f:cb:6c:4a:da:c5:ba: 4e:d2:52:82:44:56:ce:85:8f:c6:08:e0:aa:58:8b: dc:97:d0:a0:25:5c:51:7c:f6:c0:f6:75:4a:80:57: 9d:00:ee:f0:48:ac:ff:82:b2:87:4b:3c:0f:31:8b: 0a:08:0e:dc:2e:0b:bb:e0:26:38:1d:11:7b:7c:2b: f3:07:6b:50:f5:18:a5:ff:d3:d4:cb:62:f9:ba:1a: 6e:fd:49:4a:f3:e8:ec:6c:f4:e0:61:9c:11:70:64: e4:e1:6d:60:6c:b2:ea:25:7b:64:fb:96:7a:f2:08: 6e:d4:e8:22:cb:f7:98:5c:57:61:e9:f7:e1:f0:1b: cf:46:10:a5:21:b5:28:5d:28:1e:14:44:96:d9:38: d0:eb:56:f9:83:09:15:36:ae:20:50:b6:9c:1e:14: 9e:ec:ee:3d:b3:72:1e:45:27:e9:d8:17:8e:98:c7: 28:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.220.0/22 195.200.69.0/24 IPv6: 2a06:6000::/29 2a14:8180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20802 213425 Signature Algorithm: sha256WithRSAEncryption 98:7e:05:85:91:b5:e3:29:18:0f:29:2c:92:0b:45:23:98:ce: 29:62:23:b2:04:07:9c:89:30:66:d4:45:27:4a:8e:53:b0:ea: 12:e5:48:5f:f5:07:fb:62:87:a7:b5:f3:4b:45:6f:8f:1f:d1: 7c:24:22:bd:b6:1b:a3:74:5e:4a:cd:4b:e3:00:34:cc:70:a5: 41:6f:89:4d:4d:55:9a:9b:f9:5d:4f:48:7f:4e:2e:73:e8:9b: 4e:82:58:42:1b:00:a0:8b:4b:f1:cd:71:d7:2b:f5:9c:22:5b: fa:5e:d6:89:e8:f4:57:14:a7:2a:49:0f:71:c6:4e:64:d8:63: db:7f:e3:c8:2e:19:cb:1d:66:5c:9d:ae:12:92:17:52:21:00: c0:11:4f:d7:a6:e6:35:2d:b6:90:e3:34:8a:66:7a:b7:e2:3f: b8:6a:40:e5:c1:a3:7b:9f:74:b4:ba:50:07:c5:ec:c2:33:9d: 36:29:71:06:d6:38:b0:6f:9d:c4:20:e4:96:96:72:0c:7b:cb: 64:83:09:90:88:36:1e:cd:9f:3e:f6:ed:ce:45:59:60:e7:1f: b4:a3:74:dd:9e:92:26:b7:0d:fe:95:71:f1:47:1b:16:fd:10: 61:3a:8a:81:31:30:f1:4d:27:98:e4:f5:76:ae:69:41:51:aa: 56:7c:c1:b5 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZtK3h640Tcr3GvyYfPZuRqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIzMTEwMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzllNDk5NjIwNzNmOWVmYjY2YTRiMzAzNTA2ZGE2MzQxNTY3NDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryzfgwrv0MHqTfYB9jFy2lufN3h+ 5GnVN5zqyaNzpZziAuZ0nDX/3rZEDy3aoM/CJT3+z1wQdO/FfGaMsQT6HTdxEQhG yqLItqRhgmjQet4SL4/LbEraxbpO0lKCRFbOhY/GCOCqWIvcl9CgJVxRfPbA9nVK gFedAO7wSKz/grKHSzwPMYsKCA7cLgu74CY4HRF7fCvzB2tQ9Ril/9PUy2L5uhpu /UlK8+jsbPTgYZwRcGTk4W1gbLLqJXtk+5Z68ghu1Ogiy/eYXFdh6ffh8BvPRhCl IbUoXSgeFESW2TjQ61b5gwkVNq4gULacHhSe7O49s3IeRSfp2BeOmMcoeQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFCyeSZYgc/nvtmpLMDUG2mNBVnRQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2Lzc3NjU1 Mi1lMGMyLTRiN2MtOTg5MS0yMWNkMjkwYzAzZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNzc2NTUy LWUwYzItNGI3Yy05ODkxLTIxY2QyOTBjMDNmMy8xL0xKNUpsaUJ6LWUtMmFrc3dO UWJhWTBGV2RGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuW/cAwQAw8hFMBQEAgACMA4DBQMqBmAAAwUD KhSBgDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJRQgIDA0GxMA0GCSqGSIb3DQEB CwUAA4IBAQCYfgWFkbXjKRgPKSySC0UjmM4pYiOyBAeciTBm1EUnSo5TsOoS5Uhf 9Qf7YoentfNLRW+PH9F8JCK9thujdF5KzUvjADTMcKVBb4lNTVWam/ldT0h/Ti5z 6JtOglhCGwCgi0vxzXHXK/WcIlv6XtaJ6PRXFKcqSQ9xxk5k2GPbf+PILhnLHWZc na4SkhdSIQDAEU/XpuY1LbaQ4zSKZnq34j+4akDlwaN7n3S0ulAHxezCM502KXEG 1jiwb53EIOSWlnIMe8tkgwmQiDYezZ8+9u3ORVlg5x+0o3TdnpImtw3+lXHxRxsW /RBhOoqBMTDxTSeY5PV2rmlBUapWfMG1 -----END CERTIFICATE-----Generated at Fri Dec 26 12:19:06 2025 by rpki-client