This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer File: LUUkZslYX29anMHDDo17Fu1HSkg.cer (raw, json) Hash identifier: ZWYjslYU+GD/YFnWwZfo2yAwLq2F+UbFg3cdzkFMvAk= Subject key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775955A848B66842017D73C0F7F096FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216187 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:55:a8:48:b6:68:42:01:7d:73:c0:f7:f0:96:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:46:0e:81:32:d6:38:90:a0:81:e5:75:d6: f5:25:b7:7e:db:4c:e3:da:66:4b:c4:44:92:42:37: 46:97:f1:0b:f9:de:cf:e2:42:32:d7:eb:8c:68:94: fd:83:a0:38:d9:c8:d4:8e:a3:3e:20:8c:9b:c0:50: 89:f3:48:97:d1:63:03:0d:78:7d:2a:66:51:fc:90: 8b:50:be:ef:c0:16:25:1f:7b:ad:1f:07:5d:25:30: be:7c:b2:3c:75:b1:50:23:62:e7:c8:2f:ed:12:2f: c2:26:b7:a2:a6:27:77:b6:a9:59:88:5f:39:ec:93: 3a:e0:13:23:ac:2a:9b:86:ae:b2:ae:b7:88:ee:61: 7c:b0:cf:ba:0f:52:86:c9:ad:d8:d8:52:36:74:04: 65:b9:35:fb:78:b9:88:24:13:1a:27:a9:25:7e:db: cc:31:6e:ab:49:ae:db:22:a9:cd:61:69:3f:a1:2d: d1:19:46:3f:dc:91:e7:ca:6c:fb:8c:80:63:1a:f6: 58:79:7d:32:fa:ca:9e:b1:48:bd:d6:4e:b7:2b:4c: 46:7b:50:d1:15:e0:cd:d0:0e:19:a1:be:b4:eb:5a: 87:42:fd:e4:89:cb:e4:49:97:18:58:4c:8a:14:09: d5:7a:54:81:20:2c:0e:0c:4d:b2:b4:a4:d9:7b:c5: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216187 Signature Algorithm: sha256WithRSAEncryption 25:47:ad:0d:9f:79:55:33:61:0a:01:7d:7f:10:85:c7:23:48: 70:8d:31:21:b9:09:bc:9e:78:f7:5a:53:20:1e:ce:8d:91:84: d6:db:aa:06:e3:f4:11:92:48:21:59:f0:ff:73:d6:63:ee:dd: 30:0e:ba:12:66:32:99:38:89:f8:01:0d:d6:97:cc:63:f5:5e: ef:ab:b6:8b:49:89:ec:dc:a9:0a:07:1f:c8:ea:e3:5c:45:eb: 5e:68:7a:ca:a9:e3:ab:67:f5:b9:80:5a:9c:54:a7:65:18:3e: 89:77:1f:18:9f:1e:20:8c:2d:14:15:ed:f3:a0:71:8d:87:35: 7d:ba:d4:9a:3c:d3:46:38:6d:9b:5c:50:9c:89:b6:12:c2:3b: 45:b4:6a:ef:82:2d:14:11:2d:33:a9:df:82:a3:6f:5a:7a:fe: 5f:37:34:f0:b4:3a:bf:7f:65:56:8e:d4:af:87:11:bf:1f:58: e7:81:77:41:f3:3d:2a:0d:53:f3:e9:5f:b7:77:a8:01:22:68: ad:6b:17:be:7b:c5:c2:23:7d:ea:06:c7:63:38:ff:a1:b8:c7: 5b:cd:a2:b3:cf:b1:42:b9:59:27:6c:9b:72:16:da:b1:e4:ae: 53:46:84:5a:a8:86:89:82:e9:d3:13:1f:e7:0f:8c:a7:43:48: 62:22:df:9b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WVWoSLZoQgF9c8D38Jb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDQ1MjQ2NmM5NTg1ZjZmNWE5Y2MxYzMwZThkN2IxNmVkNDc0YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS1GDoEy1jiQoIHlddb1Jbd+20zj 2mZLxESSQjdGl/EL+d7P4kIy1+uMaJT9g6A42cjUjqM+IIybwFCJ80iX0WMDDXh9 KmZR/JCLUL7vwBYlH3utHwddJTC+fLI8dbFQI2LnyC/tEi/CJreipid3tqlZiF85 7JM64BMjrCqbhq6yrreI7mF8sM+6D1KGya3Y2FI2dARluTX7eLmIJBMaJ6klftvM MW6rSa7bIqnNYWk/oS3RGUY/3JHnymz7jIBjGvZYeX0y+sqesUi91k63K0xGe1DR FeDN0A4Zob6061qHQv3kicvkSZcYWEyKFAnVelSBICwODE2ytKTZe8Vq5QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFC1FJGbJWF9vWpzBww6NexbtR0pIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2E2YmMw MC02ZmQ1LTQ3ODItYjA2ZS0yM2U5YWE1YzhhYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvYTZiYzAw LTZmZDUtNDc4Mi1iMDZlLTIzZTlhYTVjOGFhMS8xL0xVVWtac2xZWDI5YW5NSERE bzE3RnUxSFNrZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMezANBgkqhkiG9w0BAQsFAAOCAQEAJUetDZ95VTNh CgF9fxCFxyNIcI0xIbkJvJ5491pTIB7OjZGE1tuqBuP0EZJIIVnw/3PWY+7dMA66 EmYymTiJ+AEN1pfMY/Ve76u2i0mJ7NypCgcfyOrjXEXrXmh6yqnjq2f1uYBanFSn ZRg+iXcfGJ8eIIwtFBXt86BxjYc1fbrUmjzTRjhtm1xQnIm2EsI7RbRq74ItFBEt M6nfgqNvWnr+Xzc08LQ6v39lVo7Ur4cRvx9Y54F3QfM9Kg1T8+lft3eoASJorWsX vnvFwiN96gbHYzj/objHW82is8+xQrlZJ2ybchbaseSuU0aEWqiGiYLp0xMf5w+M p0NIYiLfmw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:03 2026 by rpki-client