This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer File: LONOJrtlYwuGk29JaTU-18hplcg.cer (raw, json) Hash identifier: Tq/OJS1Qw5jD4FUKinvwafGNa3ZpOC4NSRAS2jTBhew= Subject key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11DC6FB57293E08432DA8DA5E13E8C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204543 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:dc:6f:b5:72:93:e0:84:32:da:8d:a5:e1:3e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ce34e26bb65630b86936f4969353ed7c86995c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:4a:45:17:1a:b4:03:15:a5:ac:73:ed:df: 09:72:cd:20:0b:e3:47:d0:f1:3c:7f:3d:35:c6:17: b9:03:98:8a:0b:a6:d2:40:b9:88:2c:c1:59:ee:6a: 19:19:8a:97:d4:0d:ed:7a:b4:09:d3:2c:ab:83:0d: 51:52:ae:5b:c0:5f:c9:2c:23:09:65:09:cf:f4:01: a0:23:e2:2f:a6:90:c3:69:45:74:2d:49:2a:b8:a6: 6a:90:0f:43:5f:bf:0f:05:91:85:5c:00:b0:90:f7: c0:62:c2:23:0e:f8:44:8a:59:41:8a:a3:26:c7:d5: ea:8f:ab:b5:3c:64:11:c2:13:cd:5f:74:ac:49:27: e1:3c:d7:26:fa:e8:0a:c6:d3:0e:ac:4e:18:59:4f: 74:f8:50:8b:f9:56:07:d2:41:62:74:2a:dc:c7:d3: 35:bb:bc:50:60:e5:3f:18:9f:2a:bc:a0:6c:84:82: ae:97:e9:3a:a2:84:87:4b:90:3d:a4:16:c4:f3:9e: 73:54:6b:df:35:67:17:0b:b8:a0:70:bc:43:9d:13: ef:c3:47:07:49:45:46:00:ce:75:20:6a:cf:fe:f9: 2b:f5:15:e9:7d:04:b4:7c:69:cb:85:12:c7:cb:d8: 01:bd:56:f5:44:4a:08:36:c9:42:a2:c0:61:62:e6: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204543 Signature Algorithm: sha256WithRSAEncryption 8a:3b:13:e4:db:bd:95:d4:1b:20:f8:81:50:56:7c:b4:89:31: ec:a5:ae:6d:65:3e:5d:b9:2b:39:a8:44:47:bf:88:78:26:f3: 32:cd:d0:c1:a3:8d:f3:6c:36:3d:50:ed:aa:f2:48:af:8e:c6: 3d:24:83:b6:bd:15:f0:ff:1a:12:41:4f:2c:31:f9:04:14:ef: 4e:f5:c9:66:cd:01:6f:ba:b4:74:7b:9d:e7:db:16:eb:80:51: 87:d0:82:78:b6:51:5b:c1:0b:52:96:08:1d:1d:37:fb:7e:39: e3:0d:99:3d:58:7f:ea:47:93:d8:84:8d:27:81:6e:de:2e:e9: 71:86:10:0f:c2:0e:b5:e8:5a:ff:a3:95:5e:bb:56:c0:0f:d7: bf:fe:e4:ca:a2:f9:02:65:3a:13:74:66:27:8e:fb:b1:be:8d: 11:63:fd:6a:0d:a0:7d:e8:e5:e6:a8:d7:65:ad:57:f2:7b:e8: d6:01:88:ba:b4:7a:0d:89:a0:34:6d:b8:55:37:9a:c1:62:2f: 02:38:cc:f9:69:a4:1f:74:be:79:c2:58:2b:5b:a3:57:ba:e3: 82:2d:60:f7:cf:68:b8:2b:e5:27:c8:0f:f0:d0:6f:94:13:9c: f4:6f:04:ba:38:89:eb:27:5e:47:08:65:64:3a:25:86:84:9c: 6c:08:9d:98 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EdxvtXKT4IQy2o2l4T6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2UzNGUyNmJiNjU2MzBiODY5MzZmNDk2OTM1M2VkN2M4Njk5NWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cpKRRcatAMVpaxz7d8Jcs0gC+NH 0PE8fz01xhe5A5iKC6bSQLmILMFZ7moZGYqX1A3terQJ0yyrgw1RUq5bwF/JLCMJ ZQnP9AGgI+IvppDDaUV0LUkquKZqkA9DX78PBZGFXACwkPfAYsIjDvhEillBiqMm x9Xqj6u1PGQRwhPNX3SsSSfhPNcm+ugKxtMOrE4YWU90+FCL+VYH0kFidCrcx9M1 u7xQYOU/GJ8qvKBshIKul+k6ooSHS5A9pBbE855zVGvfNWcXC7igcLxDnRPvw0cH SUVGAM51IGrP/vkr9RXpfQS0fGnLhRLHy9gBvVb1REoINslCosBhYuap0wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCzjTia7ZWMLhpNvSWk1PtfIaZXIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzFlMDE4 MC1kYjNhLTQ2YTUtYjMxYi1iNTk5NzIzZmMwNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMWUwMTgw LWRiM2EtNDZhNS1iMzFiLWI1OTk3MjNmYzA1My8xL0xPTk9KcnRsWXd1R2syOUph VFUtMThocGxjZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMe/zANBgkqhkiG9w0BAQsFAAOCAQEAijsT5Nu9ldQb IPiBUFZ8tIkx7KWubWU+XbkrOahER7+IeCbzMs3QwaON82w2PVDtqvJIr47GPSSD tr0V8P8aEkFPLDH5BBTvTvXJZs0Bb7q0dHud59sW64BRh9CCeLZRW8ELUpYIHR03 +3454w2ZPVh/6keT2ISNJ4Fu3i7pcYYQD8IOteha/6OVXrtWwA/Xv/7kyqL5AmU6 E3RmJ477sb6NEWP9ag2gfejl5qjXZa1X8nvo1gGIurR6DYmgNG24VTeawWIvAjjM +WmkH3S+ecJYK1ujV7rjgi1g989ouCvlJ8gP8NBvlBOc9G8EujiJ6ydeRwhlZDol hoScbAidmA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:33 2026 by rpki-client