This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer File: LTDDBwxuYe3FimTzIz-pf8X1c5s.cer (raw, json) Hash identifier: FnlqgspwxiCsI7H3a8+YaC62jcBsphkiOCC3G5GxtJA= Subject key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CC4845CEE2AFEDE8327DE797FD698 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.223.139.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c4:84:5c:ee:2a:fe:de:83:27:de:79:7f:d6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:43:8d:00:04:5f:84:c4:db:47:98:60:aa: 29:b0:41:c0:e9:71:72:ae:f3:eb:bf:19:ed:fc:7b: ce:3e:65:40:66:11:af:b3:27:0b:5a:8b:ac:a8:8b: 62:63:33:b1:f4:c5:2d:65:f2:d3:04:6e:6a:09:f2: fb:fb:26:3f:dc:3b:12:51:a0:5e:3a:ee:3d:3e:8e: 82:09:07:70:01:c7:a8:74:77:08:02:a1:3e:06:9e: 03:28:0e:bf:43:49:cc:e2:9f:ca:35:4e:cb:c3:4b: 53:bc:c6:03:9d:27:15:a3:42:94:d9:37:67:e5:66: 14:a7:15:34:f1:5f:32:07:00:17:92:b7:84:f6:2e: 81:15:a2:b8:2b:dd:22:8b:23:a8:db:5b:14:42:26: 07:27:a9:57:f8:11:93:cf:e3:61:dd:1e:34:08:58: 51:44:ab:40:5e:6b:6f:b7:e2:d5:ea:ef:3d:b4:f5: fe:15:cb:d1:c6:d7:4f:fd:82:a7:72:c8:62:3c:f5: e0:26:da:a4:94:d7:e8:18:be:ce:0e:1e:88:b6:f3: 3f:05:09:e8:6a:5c:2a:f7:b2:81:0c:04:99:34:8e: da:16:df:54:ab:a7:b7:2f:6c:87:23:e7:bb:53:2c: 99:79:4b:21:66:81:4d:5f:9c:0d:09:1a:4d:55:e9: 57:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.139.0/24 Signature Algorithm: sha256WithRSAEncryption 14:1a:f3:e3:85:04:04:57:de:56:91:50:f8:a0:42:de:71:77: a8:8f:2a:68:9e:5d:c7:98:8d:f7:26:49:23:4c:dd:ea:39:14: cd:34:b1:0c:bd:65:b4:36:8c:f7:47:26:6f:af:2e:c4:b6:68: 92:bc:0d:1d:86:e3:2e:a4:30:a7:a5:c8:94:48:f1:d9:a9:bb: 7e:a1:fb:52:44:19:6f:4d:70:70:5d:48:14:64:d1:e8:e2:23: f9:4d:fa:95:53:f6:e9:5b:9a:23:26:c8:71:04:2e:8e:20:da: 25:22:2c:9d:b7:37:bc:1d:46:ba:f9:ca:94:a0:fb:f9:9b:1f: 15:57:ff:33:f8:d4:c8:62:dc:2f:c6:5c:52:00:43:f6:e2:30: 01:67:6c:3c:2d:c9:30:26:66:63:fd:68:d7:e8:f4:67:0d:74: 85:3d:bb:57:7d:0d:03:09:4d:c1:7f:cd:15:1d:f2:a1:a8:cc: f1:d1:39:0e:78:f1:e6:6b:92:a5:9d:b7:14:29:5f:93:5d:67: f4:95:90:4e:d5:0a:b6:7e:24:60:19:75:e9:08:88:94:2a:fe: e1:c0:40:38:b3:2b:71:56:24:13:af:72:d5:1a:87:a7:34:31: ba:02:f2:70:8e:6e:e2:f3:43:c1:9a:1a:36:12:7a:4b:4c:05: e0:26:51:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XMSEXO4q/t6DJ955f9aYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDMwYzMwNzBjNmU2MWVkYzU4YTY0ZjMyMzNmYTk3ZmM1ZjU3MzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYFDjQAEX4TE20eYYKopsEHA6XFy rvPrvxnt/HvOPmVAZhGvsycLWousqItiYzOx9MUtZfLTBG5qCfL7+yY/3DsSUaBe Ou49Po6CCQdwAceodHcIAqE+Bp4DKA6/Q0nM4p/KNU7Lw0tTvMYDnScVo0KU2Tdn 5WYUpxU08V8yBwAXkreE9i6BFaK4K90iiyOo21sUQiYHJ6lX+BGTz+Nh3R40CFhR RKtAXmtvt+LV6u89tPX+FcvRxtdP/YKncshiPPXgJtqklNfoGL7ODh6ItvM/BQno alwq97KBDASZNI7aFt9Uq6e3L2yHI+e7UyyZeUshZoFNX5wNCRpNVelXJQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFC0wwwcMbmHtxYpk8yM/qX/F9XObMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzQ2YTFi MC0xMGMwLTRjZjktOTUwMi0xMGQxNzM0ZDdiODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNDZhMWIw LTEwYzAtNGNmOS05NTAyLTEwZDE3MzRkN2I4My8xL0xURERCd3h1WWUzRmltVHpJ ei1wZjhYMWM1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9+LMA0GCSqGSIb3DQEBCwUAA4IBAQAUGvPj hQQEV95WkVD4oELecXeojyponl3HmI33JkkjTN3qORTNNLEMvWW0Noz3RyZvry7E tmiSvA0dhuMupDCnpciUSPHZqbt+oftSRBlvTXBwXUgUZNHo4iP5TfqVU/bpW5oj JshxBC6OINolIiydtze8HUa6+cqUoPv5mx8VV/8z+NTIYtwvxlxSAEP24jABZ2w8 LckwJmZj/WjX6PRnDXSFPbtXfQ0DCU3Bf80VHfKhqMzx0TkOePHma5KlnbcUKV+T XWf0lZBO1Qq2fiRgGXXpCIiUKv7hwEA4sytxViQTr3LVGoenNDG6AvJwjm7i80PB mho2EnpLTAXgJlFD -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:26 2026 by rpki-client