This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer File: LNH_SXJfYzHmO47XZEjXJd16hN4.cer (raw, json) Hash identifier: WlMalqGYFP9oVN7jwJNVj/ZpR9AqpSJMjIXdTCsdD0E= Subject key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECDEBDA1CF96F51AA1F70BC2E20454 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57070 IP: 146.0.16.0/21 IP: 185.200.248.0/22 IP: 2a0a:bac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:de:bd:a1:cf:96:f5:1a:a1:f7:0b:c2:e2:04:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d7:84:c3:64:08:d4:74:6e:db:7c:75:c1:57: 07:90:26:af:9a:e4:63:50:1a:aa:55:d3:f9:85:c8: 27:b8:08:dd:4d:30:e6:0c:8e:b8:4e:54:49:6f:a6: b1:96:e2:1a:bd:99:9a:85:c7:50:84:13:20:84:e9: e5:a6:be:f3:26:b6:27:63:ad:1e:e2:ec:3f:00:39: 6b:8c:70:87:46:0b:18:ca:0f:63:ff:e8:1f:30:4e: a6:87:1a:49:06:32:cc:31:ad:9e:03:06:6d:4f:92: bb:46:a9:6a:21:02:fe:76:3c:6f:8d:7e:59:c6:86: 4e:16:e2:84:1b:5e:e7:fa:9b:52:78:2c:56:22:e6: 1d:44:94:36:81:60:00:41:92:17:69:ab:ca:8f:3f: f6:08:ac:98:b5:9b:be:63:c3:97:60:e7:8b:fd:f8: c4:30:5c:41:f0:f8:48:e1:37:cf:7e:dc:16:3b:3e: d3:31:56:fe:b7:f2:97:de:34:6c:73:25:84:3b:0e: ef:c1:56:c2:ec:e1:85:44:27:6c:94:c6:2b:27:24: 98:aa:2f:04:c1:2e:92:ce:78:6a:5b:9a:45:70:54: f8:5e:3a:35:7b:04:f7:02:87:c9:4c:4e:04:5b:66: 7f:6a:62:3d:c0:ba:48:0d:70:36:3f:81:df:fc:06: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.0.16.0/21 185.200.248.0/22 IPv6: 2a0a:bac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57070 Signature Algorithm: sha256WithRSAEncryption 3d:b1:5c:e7:d1:1e:f6:40:8c:a8:90:53:1e:7f:b9:d2:d3:42: 8f:2e:fd:ab:a5:8b:a0:c5:53:19:a0:ab:bf:e7:33:b8:63:a0: 6e:91:fb:4c:d5:c8:8c:f2:1c:63:4e:65:4c:d6:21:7a:79:73: ed:b6:2f:27:9e:94:4c:3c:7c:08:29:c2:1a:98:14:3d:56:84: 3e:ad:00:d5:20:ae:26:9d:b3:76:43:94:0c:62:c7:b3:f0:b8: 62:68:47:a3:37:13:b9:7b:83:b8:60:bb:99:a6:0c:f0:5c:6f: e6:1c:54:b1:6a:df:56:ce:84:61:95:74:11:22:e8:1d:f1:99: 61:e6:f0:1c:11:34:aa:9a:9e:d9:c8:01:44:15:f1:cd:46:53: df:e5:ed:03:16:99:52:08:5f:a4:f5:a0:d0:2e:72:40:67:ae: 06:3e:ee:61:5b:75:40:6d:55:fb:e1:04:02:20:c8:7c:85:d8: ba:85:0c:cc:e2:99:67:db:cb:ca:41:09:7e:eb:44:71:ce:fa: cd:57:f8:8e:b3:a6:42:45:ea:1e:8f:5c:af:32:f5:ef:24:2d: 8f:bb:70:3c:ed:93:20:50:ca:da:73:eb:db:18:b4:01:3c:3f: ea:1e:00:7c:0b:87:cd:ce:7c:ce:95:3e:4c:91:10:96:05:82: 4a:7b:eb:d0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57N69oc+W9Rqh9wvC4gRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2QxZmY0OTcyNWY2MzMxZTYzYjhlZDc2NDQ4ZDcyNWRkN2E4NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9deEw2QI1HRu23x1wVcHkCavmuRj UBqqVdP5hcgnuAjdTTDmDI64TlRJb6axluIavZmahcdQhBMghOnlpr7zJrYnY60e 4uw/ADlrjHCHRgsYyg9j/+gfME6mhxpJBjLMMa2eAwZtT5K7RqlqIQL+djxvjX5Z xoZOFuKEG17n+ptSeCxWIuYdRJQ2gWAAQZIXaavKjz/2CKyYtZu+Y8OXYOeL/fjE MFxB8PhI4TfPftwWOz7TMVb+t/KX3jRscyWEOw7vwVbC7OGFRCdslMYrJySYqi8E wS6SznhqW5pFcFT4Xjo1ewT3AofJTE4EW2Z/amI9wLpIDXA2P4Hf/AacbwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFCzR/0lyX2Mx5juO12RI1yXdeoTeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzczODE4 OC03M2FlLTQ5MTgtYmZkNy03Nzg4YWVlMTIxNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvNzM4MTg4 LTczYWUtNDkxOC1iZmQ3LTc3ODhhZWUxMjE1Zi8xL0xOSF9TWEpmWXpIbU80N1ha RWpYSmQxNmhONC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDkgAQAwQCucj4MA0EAgACMAcDBQMqCrrAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDe7jANBgkqhkiG9w0BAQsFAAOCAQEAPbFc 59Ee9kCMqJBTHn+50tNCjy79q6WLoMVTGaCrv+czuGOgbpH7TNXIjPIcY05lTNYh enlz7bYvJ56UTDx8CCnCGpgUPVaEPq0A1SCuJp2zdkOUDGLHs/C4YmhHozcTuXuD uGC7maYM8Fxv5hxUsWrfVs6EYZV0ESLoHfGZYebwHBE0qpqe2cgBRBXxzUZT3+Xt AxaZUghfpPWg0C5yQGeuBj7uYVt1QG1V++EEAiDIfIXYuoUMzOKZZ9vLykEJfutE cc76zVf4jrOmQkXqHo9crzL17yQtj7twPO2TIFDK2nPr2xi0ATw/6h4AfAuHzc58 zpU+TJEQlgWCSnvr0A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:05 2026 by rpki-client