This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer File: LOlVOpsse8oStoG8CmMF4z-2QMg.cer (raw, json) Hash identifier: F54jCurk/JySKkatmUgXamUJrLPgAomK6fTAdVwrdyY= Subject key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82199271F65A48EBAB434D224BC0CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31230 IP: 2001:67c:2700::/48 IP: 2001:7f8:2f::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:19:92:71:f6:5a:48:eb:ab:43:4d:22:4b:c0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:78:02:86:12:83:d9:83:32:1f:7a:ab:d1: 22:00:19:57:74:a6:b6:a1:45:66:3c:b8:80:87:10: 5b:19:c1:61:11:8a:92:f9:e2:39:20:a2:b6:90:09: e3:38:08:94:d2:7a:2e:6c:87:04:78:06:fd:88:dc: 57:3c:40:21:ef:31:a1:ab:bb:45:74:2e:a2:0f:6f: 21:da:84:c9:6a:13:b6:de:3d:68:09:8a:f4:d1:57: 3e:ff:40:6f:c3:d1:c5:6f:0e:16:ce:ab:32:80:f9: d8:c0:34:97:04:8d:7a:37:30:23:13:18:8f:76:93: 9a:9e:25:27:d9:2a:80:6f:0f:43:57:63:9f:82:ad: 00:e3:d7:45:c8:6c:cf:5f:b0:3a:9c:08:2a:f6:28: fd:bd:f1:f8:ab:d4:b1:da:71:d5:11:43:de:8b:a0: d7:4c:19:72:f7:14:32:01:e5:41:54:a0:82:8e:cd: 5e:95:56:d0:ab:56:ac:c6:8e:2b:10:f8:e5:00:3d: 88:6f:56:fb:b1:86:65:a1:76:7d:ce:1a:a2:66:6a: ec:1e:c9:4f:25:ae:02:03:12:99:c0:ad:00:e6:19: 7d:54:4c:aa:6e:e5:4a:91:72:24:93:72:6b:46:2a: b8:1e:ce:1c:f6:7e:91:85:9c:e7:9b:7e:fb:1f:f8: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2700::/48 2001:7f8:2f::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31230 Signature Algorithm: sha256WithRSAEncryption 8c:18:67:13:df:01:18:26:27:67:ad:2b:e9:67:92:1a:b0:6a: 73:34:3b:63:49:f3:55:78:ee:91:02:1c:46:5d:95:41:3b:13: 2f:f4:96:3b:3a:e0:44:e1:0f:fa:46:17:d4:5c:f3:e5:6e:f5: 2d:68:cd:5f:0a:2f:bf:39:b7:d0:d7:c3:dd:6c:b0:74:87:a3: c7:c3:f7:18:24:e8:c7:07:85:61:6d:68:d5:a1:33:b8:52:9c: 3f:a6:68:cc:17:e5:ce:f2:a7:39:d0:b0:6e:35:73:25:e9:32: 5d:e0:ce:e8:55:be:f3:fe:4c:f6:47:ae:bf:e9:9c:a5:d9:46: d6:24:1b:8f:a3:3b:8d:0c:9e:a1:e4:c8:16:77:bc:74:06:1c: b9:ca:29:d1:bd:5c:f0:75:83:c6:b8:3c:f8:9b:8d:00:51:f2: 56:40:ba:3d:2a:f7:fd:09:c8:e3:d1:fb:49:79:96:fd:b4:50: 00:2d:08:09:c3:90:9d:7f:2c:a5:9b:a0:6d:ac:36:f2:c2:6b: ba:39:a3:07:4a:7b:c5:d4:0f:d6:64:ab:c4:74:fe:62:7d:df: 72:48:91:95:b6:fb:b2:89:cf:33:ac:cf:b5:15:f7:ed:81:3a: 25:c2:c9:f0:a8:f5:cc:fd:71:7c:bb:e7:8a:62:b4:18:2b:27: 49:93:46:b4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt/ghmScfZaSOurQ00iS8DLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2U5NTUzYTliMmM3YmNhMTJiNjgxYmMwYTYzMDVlMzNmYjY0MGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlV4AoYSg9mDMh96q9EiABlXdKa2 oUVmPLiAhxBbGcFhEYqS+eI5IKK2kAnjOAiU0noubIcEeAb9iNxXPEAh7zGhq7tF dC6iD28h2oTJahO23j1oCYr00Vc+/0Bvw9HFbw4WzqsygPnYwDSXBI16NzAjExiP dpOaniUn2SqAbw9DV2Ofgq0A49dFyGzPX7A6nAgq9ij9vfH4q9Sx2nHVEUPei6DX TBly9xQyAeVBVKCCjs1elVbQq1asxo4rEPjlAD2Ib1b7sYZloXZ9zhqiZmrsHslP Ja4CAxKZwK0A5hl9VEyqbuVKkXIkk3JrRiq4Hs4c9n6RhZznm377H/ih9wIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFCzpVTqbLHvKEraBvApjBeM/tkDIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzJjMDU0 ZS1jZWYwLTRhZjYtOTgwZS04YmFiYWM4YTQ2NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvMmMwNTRl LWNlZjAtNGFmNi05ODBlLThiYWJhYzhhNDY1YS8xL0xPbFZPcHNzZThvU3RvRzhD bU1GNHotMlFNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfCcAAwcAIAEH+AAvMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAnn+MA0GCSqGSIb3DQEBCwUAA4IBAQCMGGcT3wEYJidnrSvp Z5IasGpzNDtjSfNVeO6RAhxGXZVBOxMv9JY7OuBE4Q/6RhfUXPPlbvUtaM1fCi+/ ObfQ18PdbLB0h6PHw/cYJOjHB4VhbWjVoTO4Upw/pmjMF+XO8qc50LBuNXMl6TJd 4M7oVb7z/kz2R66/6Zyl2UbWJBuPozuNDJ6h5MgWd7x0Bhy5yinRvVzwdYPGuDz4 m40AUfJWQLo9Kvf9Ccjj0ftJeZb9tFAALQgJw5Cdfyylm6BtrDbywmu6OaMHSnvF 1A/WZKvEdP5ifd9ySJGVtvuyic8zrM+1FfftgTolwsnwqPXM/XF8u+eKYrQYKydJ k0a0 -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:43 2026 by rpki-client