This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer (raw, json) Hash identifier: 4ZDfS5KjSjCsSCW+iTxXorWjh3D9+iLJqcWUTXX/NPM= Subject key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3B422E04C0F8D8A9BC02967F93902 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2614 IP: 37.128.224.0/20 IP: 46.243.112.0/21 IP: 89.34.160.0/24 IP: 89.38.156.0/22 IP: 176.126.208.0/21 IP: 178.23.64.0/21 IP: 185.118.200.0/22 IP: 217.73.160.0/20 IP: 2001:b30::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b4:22:e0:4c:0f:8d:8a:9b:c0:29:67:f9:39:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:44:b9:24:ee:02:df:83:68:73:d8:f8:7f: c3:85:df:f1:8b:34:5e:bc:8f:79:09:2a:af:ec:54: e8:f5:52:e8:5f:10:bb:99:a5:07:af:d6:5a:44:df: 31:c1:72:38:df:cb:d6:de:6d:73:92:ca:ec:1e:d5: 1b:35:6b:a6:6b:78:d6:8d:63:2b:b1:bf:a2:a2:1a: a6:3e:47:5e:d4:10:63:66:52:89:8b:e0:d4:a4:e4: bf:24:5f:1b:b2:f7:02:ea:23:12:d6:7f:e6:ee:f4: e0:67:9c:85:57:af:69:30:af:11:9d:64:bf:91:5f: bd:8a:50:25:f6:43:79:65:3b:09:8d:cb:7d:57:fe: 04:02:65:fa:2b:d2:5a:a5:fd:55:1e:ae:a6:18:d5: f1:d4:08:f7:85:55:43:26:e6:ac:96:59:c4:49:d7: 2c:4b:52:06:2c:90:a6:5e:59:f0:f2:a9:76:c3:22: 0d:d7:05:67:6e:b5:08:12:21:2c:47:5a:6c:19:c2: 39:94:89:b0:96:48:c9:96:2f:c0:85:f9:3d:96:2f: 4f:b3:2b:bc:64:8a:7b:69:6c:89:3a:b8:d7:6a:27: 6d:60:62:58:2a:47:32:c1:ac:72:a0:c9:ee:c6:76: fc:e6:f8:13:ec:25:ed:fe:a8:22:8d:8d:46:ba:08: eb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.128.224.0/20 46.243.112.0/21 89.34.160.0/24 89.38.156.0/22 176.126.208.0/21 178.23.64.0/21 185.118.200.0/22 217.73.160.0/20 IPv6: 2001:b30::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2614 Signature Algorithm: sha256WithRSAEncryption 41:ed:69:b5:be:11:24:7e:45:5f:45:9b:47:85:43:60:83:f6: 04:f2:05:1d:92:7c:51:f7:0a:4e:44:ae:62:25:99:3b:44:c9: b9:fe:3b:c8:94:40:07:d1:a9:9a:15:23:91:2c:5f:4d:ba:8e: 5f:51:8f:39:b8:b7:36:a5:5f:99:4b:e3:7b:b0:5b:8c:85:91: 1d:50:fc:a3:e2:ef:87:01:77:f9:fb:c8:d5:95:23:42:a8:81: 59:9a:53:f4:c1:e0:2f:14:9e:16:0b:ca:97:f4:96:c0:dc:6f: 48:dd:5b:f5:2b:68:a9:2c:47:cf:d4:8b:bb:e7:43:75:20:33: c4:cb:64:76:98:b5:bf:97:a0:2b:a5:65:6f:e4:2e:64:08:0a: 14:49:9a:ea:b8:47:f8:8e:91:70:23:03:5a:44:2c:93:e4:72: 73:25:24:99:4a:17:40:7b:99:1f:71:be:55:cc:1a:87:4c:bd: ed:fc:ae:a6:c9:e9:7e:6e:ee:15:08:1c:73:ff:f2:f5:e8:61: f1:24:83:f4:5f:9e:5d:09:3c:3e:85:78:ca:5e:19:28:6c:dc: 1c:10:70:e6:d4:9b:22:66:4c:68:e4:71:a8:f4:dc:23:76:b9: cc:f0:e5:95:55:77:c4:41:69:1d:63:d2:9b:9b:6d:b1:3e:aa: e5:01:9d:dd -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt7o7Qi4EwPjYqbwCln+TkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTZiMzM0MTNmYWE1ZTVlMWQyNzlhMmEyNWZmODFkOGQxNTMyNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTJEuSTuAt+DaHPY+H/Dhd/xizRe vI95CSqv7FTo9VLoXxC7maUHr9ZaRN8xwXI438vW3m1zksrsHtUbNWuma3jWjWMr sb+iohqmPkde1BBjZlKJi+DUpOS/JF8bsvcC6iMS1n/m7vTgZ5yFV69pMK8RnWS/ kV+9ilAl9kN5ZTsJjct9V/4EAmX6K9Japf1VHq6mGNXx1Aj3hVVDJuasllnESdcs S1IGLJCmXlnw8ql2wyIN1wVnbrUIEiEsR1psGcI5lImwlkjJli/Ahfk9li9Psyu8 ZIp7aWyJOrjXaidtYGJYKkcywaxyoMnuxnb85vgT7CXt/qgijY1GugjrpQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFC5rM0E/ql5eHSeaKiX/gdjRUyXfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2FjY2Rl OC1mNDZmLTRlZjktOTRhZi04ZGQ4MWU0YjNlMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvYWNjZGU4 LWY0NmYtNGVmOS05NGFmLThkZDgxZTRiM2UzMy8xL0xtc3pRVC1xWGw0ZEo1b3FK Zi1CMk5GVEpkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQEJYDgAwQDLvNwAwQAWSKgAwQCWSacAwQDsH7Q AwQDshdAAwQCuXbIAwQE2UmgMA0EAgACMAcDBQMgAQswMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAgo2MA0GCSqGSIb3DQEBCwUAA4IBAQBB7Wm1vhEkfkVfRZtHhUNg g/YE8gUdknxR9wpORK5iJZk7RMm5/jvIlEAH0amaFSORLF9Nuo5fUY85uLc2pV+Z S+N7sFuMhZEdUPyj4u+HAXf5+8jVlSNCqIFZmlP0weAvFJ4WC8qX9JbA3G9I3Vv1 K2ipLEfP1Iu750N1IDPEy2R2mLW/l6ArpWVv5C5kCAoUSZrquEf4jpFwIwNaRCyT 5HJzJSSZShdAe5kfcb5VzBqHTL3t/K6myel+bu4VCBxz//L16GHxJIP0X55dCTw+ hXjKXhkobNwcEHDm1JsiZkxo5HGo9NwjdrnM8OWVVXfEQWkdY9Kbm22xPqrlAZ3d -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:03 2026 by rpki-client