This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer (raw, json) Hash identifier: iEU8wvBoLbau40oCBMMKBHkmTCOodoWq9MpeENkb/jU= Subject key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC873D3ED206F42201F9DBC080A61F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.82.32.0/22 IP: 2a05:8b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:73:d3:ed:20:6f:42:20:1f:9d:bc:08:0a:61:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:89:ab:56:96:d8:33:a6:6f:c6:0a:62:95: c6:96:0a:44:d0:c5:30:22:6d:72:90:f7:a1:5c:5e: b8:af:a4:40:05:db:09:a4:4b:df:4c:18:f3:13:41: cf:17:3a:71:6b:e6:42:ca:4d:5e:01:5b:5a:b5:bd: 78:0a:c7:17:ff:62:06:ad:dd:46:91:97:79:11:f1: 54:7c:92:94:2f:93:3e:20:d9:f9:1b:b8:0c:55:1d: f8:15:47:76:ff:4c:db:c7:ca:53:e6:0c:96:55:42: 9a:82:0d:4a:ba:74:28:51:cb:f1:ac:8c:b8:a0:e5: f1:b7:83:55:7a:9c:61:2e:77:8e:d6:18:88:d4:f6: bd:ac:b4:ce:f6:27:2d:11:9d:f3:23:d3:d6:99:4f: d5:ef:39:33:37:b5:b9:9f:1c:27:13:3e:1d:7d:55: 6e:89:7c:c8:ea:01:75:60:ad:ba:0e:87:27:a5:2d: 07:91:f5:29:d1:39:6a:10:88:b9:f2:83:09:9f:3c: c1:cf:b0:67:c7:59:cf:d1:65:c8:e1:b4:b4:bb:0b: ef:7d:9c:e0:58:c8:91:77:d4:52:90:7d:f2:04:88: 09:39:f8:f7:d2:46:7f:bf:88:83:2e:b5:82:c9:09: ed:ee:62:65:19:83:b8:34:96:1d:06:81:48:7e:5a: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.32.0/22 IPv6: 2a05:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 36:3a:6a:85:e7:2d:bf:76:7a:80:d5:b4:c2:52:f7:e2:d8:a2: 38:2d:9b:4c:ee:20:ef:fd:0c:e8:4e:7e:d6:f6:dc:77:b4:1e: d0:ed:8b:3f:d9:13:dd:52:78:34:90:86:6b:71:f5:51:dc:45: 4b:82:91:c0:67:18:f4:9d:9a:a4:21:5f:e0:55:eb:39:19:3e: cf:6f:b6:92:12:00:e4:d7:72:50:a0:bc:ee:0f:cc:95:b0:7e: be:7d:7b:10:0d:08:9c:4b:f5:79:47:09:20:97:3d:3c:86:32: b7:f9:6e:15:37:0d:be:ba:84:7d:9b:15:b7:a2:ed:f9:0e:47: 49:ae:a6:9e:4a:1b:d6:58:e9:a6:52:3e:9f:27:8c:fc:d2:04: 2b:6c:ae:8c:40:4e:50:86:90:f0:36:42:9b:c9:f2:66:f3:e2: f5:6f:76:95:25:86:e6:cc:8c:bf:90:60:30:24:1e:a1:3d:5e: f9:9e:53:d1:2f:e7:23:22:eb:a0:82:dd:ec:47:d4:45:75:c6: 14:3a:bf:57:18:b2:a6:d9:8f:2b:62:cf:14:33:4c:f5:b9:57: f1:a7:10:b2:5c:06:b1:88:70:12:36:1f:a3:8a:da:f7:f4:0c: 10:1c:05:80:d3:f8:4a:03:0b:72:36:db:4f:84:5a:35:32:a2: 04:e6:34:d1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9yHPT7SBvQiAfnbwICmHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTY3ZjNlNGUxOTc3YWJlOThjY2IyMGNhMWFmYTg1OGYxZTY2ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F2Jq1aW2DOmb8YKYpXGlgpE0MUw Im1ykPehXF64r6RABdsJpEvfTBjzE0HPFzpxa+ZCyk1eAVtatb14CscX/2IGrd1G kZd5EfFUfJKUL5M+INn5G7gMVR34FUd2/0zbx8pT5gyWVUKagg1KunQoUcvxrIy4 oOXxt4NVepxhLneO1hiI1Pa9rLTO9ictEZ3zI9PWmU/V7zkzN7W5nxwnEz4dfVVu iXzI6gF1YK26DocnpS0HkfUp0TlqEIi58oMJnzzBz7Bnx1nP0WXI4bS0uwvvfZzg WMiRd9RSkH3yBIgJOfj30kZ/v4iDLrWCyQnt7mJlGYO4NJYdBoFIflpvtwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFC5n8+Thl3q+mMyyDKGvqFjx5mgcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzA2YmU4 Zi1hMjY1LTQyNmEtYWEwYS1lNDc5YzZiOWZmMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMDZiZThm LWEyNjUtNDI2YS1hYTBhLWU0NzljNmI5ZmYyYi8xL0xtZno1T0dYZXI2WXpMSU1v YS1vV1BIbWFCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVIgMA0EAgACMAcDBQMqBYsAMA0GCSqGSIb3 DQEBCwUAA4IBAQA2OmqF5y2/dnqA1bTCUvfi2KI4LZtM7iDv/QzoTn7W9tx3tB7Q 7Ys/2RPdUng0kIZrcfVR3EVLgpHAZxj0nZqkIV/gVes5GT7Pb7aSEgDk13JQoLzu D8yVsH6+fXsQDQicS/V5Rwkglz08hjK3+W4VNw2+uoR9mxW3ou35DkdJrqaeShvW WOmmUj6fJ4z80gQrbK6MQE5QhpDwNkKbyfJm8+L1b3aVJYbmzIy/kGAwJB6hPV75 nlPRL+cjIuuggt3sR9RFdcYUOr9XGLKm2Y8rYs8UM0z1uVfxpxCyXAaxiHASNh+j itr39AwQHAWA0/hKAwtyNttPhFo1MqIE5jTR -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:40 2026 by rpki-client