This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer (raw, json) Hash identifier: QcOlAcX0IJZL658WzxOsSXhCNxP6kn9GrWIID8C26eA= Subject key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE5FA25F988AA07A3FCDE1EC1D2D94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.150.73.0 -- 194.150.75.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5f:a2:5f:98:8a:a0:7a:3f:cd:e1:ec:1d:2d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:83:7a:dd:4e:60:16:6a:02:1b:1f:68:88: 23:fd:21:08:a0:45:3c:be:b7:97:e3:fd:a0:28:6d: 4f:91:2e:ba:13:46:c0:7f:fc:46:9f:af:41:67:44: 9d:80:c6:da:c7:b2:0f:50:04:a2:56:5a:06:fe:a1: 8b:b0:25:39:a1:80:39:25:71:3b:07:58:41:29:29: a3:c9:38:e8:95:64:a8:bf:ce:dd:3f:98:e6:f4:f7: 20:8d:c2:5b:4f:b2:40:8c:bd:a2:4c:f9:7f:5f:a0: a6:7f:49:41:15:7f:95:b2:84:25:c9:d8:b1:54:05: 2c:69:62:c0:1f:36:45:6c:62:a1:d6:14:80:03:a5: 26:2c:fd:8c:62:8e:45:5e:77:19:57:c3:86:83:8d: e3:b9:88:06:40:75:e2:30:a8:8d:10:c7:c3:1e:16: 84:a4:76:55:cb:43:aa:98:38:db:b3:79:45:60:2d: b6:d7:f8:90:19:fb:2d:38:76:17:57:4c:60:a7:9c: 05:ba:bc:34:48:71:b7:95:69:13:66:aa:c0:a8:13: e2:4d:9a:86:e8:2e:6c:fd:d5:4d:46:ab:f3:74:cb: f0:f7:11:d4:bd:a4:22:49:f1:55:0e:e8:d0:65:a9: 0c:d1:20:02:80:69:ed:c1:22:a6:c4:57:68:95:ca: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.150.73.0-194.150.75.255 Signature Algorithm: sha256WithRSAEncryption 76:13:75:08:3e:a4:20:82:09:45:8d:ef:f0:99:06:9f:59:ba: ce:80:18:2d:be:ab:6c:34:be:26:42:11:0a:d7:72:aa:9d:ba: 14:f7:07:84:fb:25:77:9d:d3:d0:16:69:59:c4:1b:32:6e:64: ad:42:12:c4:e7:2a:dc:b9:43:51:c8:e3:23:aa:4d:91:cf:d0: 4c:19:c2:6c:fe:2d:7c:10:b6:38:53:52:97:5f:98:ac:37:85: 8b:8f:d5:ea:a4:c0:5d:8c:82:c4:6b:91:15:b2:29:65:9b:dd: cb:dc:81:0e:6b:a6:5a:e4:29:e8:ff:7d:a3:46:c4:4e:d6:a4: cd:84:e9:b5:81:fe:a0:e6:62:2e:90:cc:01:22:c7:70:9a:75: 98:d0:11:0d:5a:51:7d:4f:5e:bd:2a:1b:b6:13:cb:fa:75:2a: 70:14:e7:5d:f8:f9:aa:83:0e:e6:ea:02:56:6e:2d:bb:13:e3: c3:9f:32:c0:af:02:58:e6:13:d1:46:1d:23:97:20:0b:28:b5: df:7c:19:ec:cb:26:66:5c:26:0e:4c:38:88:cf:28:e1:21:43: 05:32:4b:27:b1:dd:71:64:63:55:30:7e:31:8a:c2:ef:ae:dd: 72:50:88:9a:95:50:20:4d:51:66:17:30:64:59:63:06:a0:36: 85:34:b8:7d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt87l+iX5iKoHo/zeHsHS2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDNjMzk4N2U3YzM0YjM2NmFhMGYwOWM0MGVhNGM4MGJmZWQwZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKaDet1OYBZqAhsfaIgj/SEIoEU8 vreX4/2gKG1PkS66E0bAf/xGn69BZ0SdgMbax7IPUASiVloG/qGLsCU5oYA5JXE7 B1hBKSmjyTjolWSov87dP5jm9PcgjcJbT7JAjL2iTPl/X6Cmf0lBFX+VsoQlydix VAUsaWLAHzZFbGKh1hSAA6UmLP2MYo5FXncZV8OGg43juYgGQHXiMKiNEMfDHhaE pHZVy0OqmDjbs3lFYC221/iQGfstOHYXV0xgp5wFurw0SHG3lWkTZqrAqBPiTZqG 6C5s/dVNRqvzdMvw9xHUvaQiSfFVDujQZakM0SACgGntwSKmxFdolcrdHwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFC08OYfnw0s2aqDwnEDqTIC/7Q4BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzA2OGE2 Yy05MjFiLTRlMGItYmE3ZS0zYTZkZTk5ZWRlNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMDY4YTZj LTkyMWItNGUwYi1iYTdlLTNhNmRlOTllZGU0Ny8xL0xUdzVoLWZEU3pacW9QQ2NR T3BNZ0xfdERnRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBADClkkDBALClkgwDQYJKoZIhvcNAQELBQAD ggEBAHYTdQg+pCCCCUWN7/CZBp9Zus6AGC2+q2w0viZCEQrXcqqduhT3B4T7JXed 09AWaVnEGzJuZK1CEsTnKty5Q1HI4yOqTZHP0EwZwmz+LXwQtjhTUpdfmKw3hYuP 1eqkwF2MgsRrkRWyKWWb3cvcgQ5rplrkKej/faNGxE7WpM2E6bWB/qDmYi6QzAEi x3CadZjQEQ1aUX1PXr0qG7YTy/p1KnAU5134+aqDDubqAlZuLbsT48OfMsCvAljm E9FGHSOXIAsotd98GezLJmZcJg5MOIjPKOEhQwUySyex3XFkY1UwfjGKwu+u3XJQ iJqVUCBNUWYXMGRZYwagNoU0uH0= -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:02 2026 by rpki-client