This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer File: LOKZUFiz3prtI6Yff7e1t7GTmEo.cer (raw, json) Hash identifier: cteDqhDDeh396t0U1Xu74fN4TmjrlDzhOoMGn5BlqLE= Subject key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783503F2404CE273F9FCEAF6A950ABE8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29267 IP: 195.85.211.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:03:f2:40:4c:e2:73:f9:fc:ea:f6:a9:50:ab:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:f7:1e:98:f8:46:1e:2b:ab:2b:14:ba:a7: 51:56:c7:a5:35:12:e2:93:a3:32:9b:c4:11:89:da: f2:43:c2:73:22:f8:d2:7b:6e:e7:67:c5:5d:dc:e9: 95:65:c3:e1:1b:a2:a7:c6:e2:61:c8:0c:af:68:56: c0:27:d7:5d:b8:7f:ad:3f:97:09:c3:99:b0:26:e1: cb:75:94:74:4c:0a:90:08:47:b1:d9:3e:3a:aa:58: 92:78:d4:df:db:a8:1e:58:63:11:b4:58:44:9f:5e: ab:ea:82:c5:31:72:d5:4c:1b:70:b1:f3:f9:6f:d9: 3b:6a:11:f2:8e:4f:84:09:f9:98:be:8a:e1:de:1f: 45:5c:28:bf:ec:44:49:f4:a7:13:4e:0f:d9:8e:98: fd:16:1b:96:ff:6a:59:65:ba:ff:ff:74:8a:55:8e: 8c:8d:66:3b:e8:a5:dd:d5:86:d3:7f:d6:ea:b6:54: 45:af:75:64:64:7e:9e:83:06:76:1e:67:ab:8e:28: 37:92:70:1d:01:9f:aa:94:8b:2a:9f:b7:ed:12:44: eb:ed:45:13:76:51:21:43:2b:e7:c4:e7:b9:1e:82: 97:67:9d:4f:e9:b1:9c:e4:4e:ad:f5:7c:ed:2e:1f: 52:4d:a8:db:d6:dd:a7:90:db:f7:eb:1c:a2:33:8d: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.211.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29267 Signature Algorithm: sha256WithRSAEncryption 48:cf:c0:dd:23:6c:07:61:e2:e3:86:a9:55:a7:c3:27:f1:35: a3:2d:7d:9c:8c:64:d9:c6:6b:ae:e8:f0:1d:6d:a7:89:88:90: 95:25:dd:de:b5:9d:21:19:d0:f9:51:f1:19:cd:fb:12:29:a3: c9:9e:d3:05:bb:a3:cc:ae:8a:63:26:38:66:3a:2e:40:e7:b6: e1:54:7c:32:9b:fa:39:68:f5:bf:bb:c4:1d:d1:f7:1b:f5:28: b9:24:ac:c0:ce:71:8d:d1:45:18:42:3e:a5:e3:78:ee:35:3d: f6:79:34:65:15:fd:31:56:33:a9:a2:74:03:79:27:67:a1:dd: be:08:be:d6:d8:88:7d:be:25:44:2e:a7:5a:93:b5:e3:38:a3: 68:14:61:56:d7:73:02:ce:c8:c7:98:7a:ce:5d:e0:2b:ce:fe: 71:f4:63:b7:78:b7:9e:a5:fe:34:f1:29:61:a1:06:e1:56:7c: af:1c:72:8b:a9:33:b8:d2:26:19:2c:db:a2:a7:60:15:bb:04: 92:ca:ea:63:0f:85:c6:60:33:73:e8:72:d6:4b:a9:be:05:18: 07:a0:60:a2:60:83:8e:2e:95:a5:db:8f:7c:3c:29:cf:be:2f: f7:7e:8c:12:7a:f3:15:07:09:a7:d5:08:a8:06:f2:85:fc:da: 88:27:2a:89 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NQPyQEzic/n86vapUKvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2UyOTk1MDU4YjNkZTlhZWQyM2E2MWY3ZmI3YjViN2IxOTM5ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXz3Hpj4Rh4rqysUuqdRVselNRLi k6Mym8QRidryQ8JzIvjSe27nZ8Vd3OmVZcPhG6KnxuJhyAyvaFbAJ9dduH+tP5cJ w5mwJuHLdZR0TAqQCEex2T46qliSeNTf26geWGMRtFhEn16r6oLFMXLVTBtwsfP5 b9k7ahHyjk+ECfmYvorh3h9FXCi/7ERJ9KcTTg/Zjpj9FhuW/2pZZbr//3SKVY6M jWY76KXd1YbTf9bqtlRFr3VkZH6egwZ2Hmerjig3knAdAZ+qlIsqn7ftEkTr7UUT dlEhQyvnxOe5HoKXZ51P6bGc5E6t9XztLh9STajb1t2nkNv36xyiM42eXwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFCzimVBYs96a7SOmH3+3tbexk5hKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2Q1MjBk Yi1iZGY4LTRmMjctOGRmZi04YzEzMGU2ODQxZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvZDUyMGRi LWJkZjgtNGYyNy04ZGZmLThjMTMwZTY4NDFkYi8xL0xPS1pVRml6M3BydEk2WWZm N2UxdDdHVG1Fby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw1XTMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnJTMA0GCSqGSIb3DQEBCwUAA4IBAQBIz8DdI2wHYeLjhqlVp8Mn8TWjLX2cjGTZ xmuu6PAdbaeJiJCVJd3etZ0hGdD5UfEZzfsSKaPJntMFu6PMropjJjhmOi5A57bh VHwym/o5aPW/u8Qd0fcb9Si5JKzAznGN0UUYQj6l43juNT32eTRlFf0xVjOponQD eSdnod2+CL7W2Ih9viVELqdak7XjOKNoFGFW13MCzsjHmHrOXeArzv5x9GO3eLee pf408SlhoQbhVnyvHHKLqTO40iYZLNuip2AVuwSSyupjD4XGYDNz6HLWS6m+BRgH oGCiYIOOLpWl2498PCnPvi/3fowSevMVBwmn1QioBvKF/NqIJyqJ -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:53 2026 by rpki-client