This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer File: LO_eMLilizIqQx8IKe1P8ztarBg.cer (raw, json) Hash identifier: Z23I5DohZJBBXwfdkv+1MsBPHF9ElXGpV28f5PePilI= Subject key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783497E76DE17A8306872DAAD12BDA46 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.14.45.0/24 IP: 45.82.104.0/23 IP: 91.242.244.0/24 IP: 185.194.0.0/22 IP: 2a0a:4240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:97:e7:6d:e1:7a:83:06:87:2d:aa:d1:2b:da:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:60:aa:46:d7:ff:70:88:25:37:a6:5a:9f: 92:44:05:46:4d:8e:fb:10:e7:8b:85:a0:eb:d1:91: 71:b7:c4:8d:a3:ca:d6:6e:3e:11:e0:69:4d:15:c1: 0b:af:5b:d0:c7:2e:f8:fa:0c:e9:0c:32:72:35:6b: dd:a8:9f:b1:fc:49:d4:b4:fb:a7:cd:1c:e4:28:b6: 05:03:3c:5f:9d:ea:17:e0:fc:d8:94:56:71:e3:21: 15:94:ac:a0:f3:3b:2a:57:72:fa:47:eb:e9:96:e1: 95:45:a3:b8:5c:a5:74:0e:6b:bf:a1:5e:1e:01:b7: b9:ee:f1:0d:04:07:23:f7:90:9b:aa:5f:a2:75:ad: 08:fa:9e:5c:fa:29:5d:b4:c2:04:12:44:cd:b8:32: 91:42:10:59:05:42:3a:85:7f:f1:33:98:2d:91:be: 1c:33:bf:ee:81:61:09:48:2c:0f:36:f6:ce:0d:87: ae:0b:eb:63:24:25:a7:15:6b:d8:0e:14:ec:23:e3: d1:db:92:b8:b7:23:e8:0e:e4:d0:c1:68:11:a2:86: c1:bf:8d:e7:97:04:ca:e6:35:08:b8:95:17:5f:32: 07:96:9e:31:f0:91:e8:12:91:a1:81:32:ca:40:54: 16:62:d6:e6:3f:5a:65:d8:78:13:e9:b2:7e:32:d9: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.45.0/24 45.82.104.0/23 91.242.244.0/24 185.194.0.0/22 IPv6: 2a0a:4240::/29 Signature Algorithm: sha256WithRSAEncryption ae:65:70:a0:99:f7:31:5c:20:7e:d5:f3:be:67:a2:65:70:3e: 64:0d:51:ce:bd:4f:fc:0e:a9:fa:46:27:6c:91:eb:92:d1:24: 0a:88:28:9c:b2:54:44:e5:a9:97:2a:00:39:4d:01:a1:76:af: d3:a9:2b:b7:d8:72:c3:d9:33:9d:8d:8f:80:ef:14:80:7e:62: fa:d8:1c:86:6c:ce:99:d1:b6:33:15:01:9f:7c:b4:f8:16:38: 33:54:a6:29:dd:86:37:f2:ce:94:e4:08:13:3a:95:1d:d2:58: e7:3b:23:31:89:b0:1c:90:97:d5:4f:10:bd:dc:13:49:1d:cf: 7a:0e:3e:59:5c:54:64:b2:a0:66:23:e1:74:2b:a0:a3:8f:34: 9e:e9:ee:15:20:67:c0:0d:5f:29:9d:8d:ee:52:7d:16:cd:12: ce:a5:9b:14:55:7a:db:09:de:63:f6:b9:51:a2:bd:05:6a:40: 09:62:0e:4a:d4:90:54:46:3e:b8:93:d8:3f:a2:9f:f5:ba:43: f5:3e:c4:ab:da:b8:1d:87:e7:01:be:e9:8c:13:cf:d5:87:c6: e6:92:5f:2e:b1:6a:22:f9:2b:d8:19:47:c2:78:23:38:70:4a: 3f:48:67:f6:1d:7f:30:63:c0:1e:de:0b:01:ea:00:cc:c8:e1: a9:37:07:f2 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt4NJfnbeF6gwaHLarRK9pGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2VmZGUzMGI4YTU4YjMyMmE0MzFmMDgyOWVkNGZmMzNiNWFhYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcVgqkbX/3CIJTemWp+SRAVGTY77 EOeLhaDr0ZFxt8SNo8rWbj4R4GlNFcELr1vQxy74+gzpDDJyNWvdqJ+x/EnUtPun zRzkKLYFAzxfneoX4PzYlFZx4yEVlKyg8zsqV3L6R+vpluGVRaO4XKV0Dmu/oV4e Abe57vENBAcj95Cbql+ida0I+p5c+ildtMIEEkTNuDKRQhBZBUI6hX/xM5gtkb4c M7/ugWEJSCwPNvbODYeuC+tjJCWnFWvYDhTsI+PR25K4tyPoDuTQwWgRoobBv43n lwTK5jUIuJUXXzIHlp4x8JHoEpGhgTLKQFQWYtbmP1pl2HgT6bJ+MtmCewIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFCzv3jC4pYsyKkMfCCntT/M7WqwYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzMzYTBm OS0xMTc4LTRhNmQtYjk2NC1mZjc2NWY4NTMxZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzNhMGY5 LTExNzgtNGE2ZC1iOTY0LWZmNzY1Zjg1MzFkNS8xL0xPX2VNTGlsaXpJcVF4OElL ZTFQOHp0YXJCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAHw4tAwQBLVJoAwQAW/L0AwQCucIAMA0EAgAC MAcDBQMqCkJAMA0GCSqGSIb3DQEBCwUAA4IBAQCuZXCgmfcxXCB+1fO+Z6JlcD5k DVHOvU/8Dqn6RidskeuS0SQKiCicslRE5amXKgA5TQGhdq/TqSu32HLD2TOdjY+A 7xSAfmL62ByGbM6Z0bYzFQGffLT4FjgzVKYp3YY38s6U5AgTOpUd0ljnOyMxibAc kJfVTxC93BNJHc96Dj5ZXFRksqBmI+F0K6CjjzSe6e4VIGfADV8pnY3uUn0WzRLO pZsUVXrbCd5j9rlRor0FakAJYg5K1JBURj64k9g/op/1ukP1PsSr2rgdh+cBvumM E8/Vh8bmkl8usWoi+SvYGUfCeCM4cEo/SGf2HX8wY8Ae3gsB6gDMyOGpNwfy -----END CERTIFICATE-----Generated at Tue Jan 27 03:56:27 2026 by rpki-client