This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer File: Lo7asSIV4pvTjB2pteOWvQyWvgk.cer (raw, json) Hash identifier: YIfCmhVN53pHsPhGBGd8M+R6MJwpZQvon0EJIrHU/6A= Subject key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9E410AFE5806AE32EFA0C7305F70 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29425 IP: 46.255.136.0/21 IP: 195.149.105.0/24 IP: 2a00:95a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9e:41:0a:fe:58:06:ae:32:ef:a0:c7:30:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:54:57:81:1f:6d:32:19:3d:df:f5:39:b6: 60:95:58:6d:c7:ab:49:82:31:a1:07:94:fc:c6:96: d0:bb:26:87:3b:ba:4d:02:56:99:55:ff:c1:29:ec: dd:3d:7f:96:34:1b:49:ec:fd:b9:13:78:53:b2:51: c0:16:fa:6a:0c:57:e1:2b:f0:6e:95:45:58:8a:b0: 5e:cf:ab:a3:e9:e0:fe:74:60:cf:f5:96:6b:88:c3: 3d:c5:5c:49:34:95:7a:e5:7b:36:95:dd:87:5c:7d: 83:99:25:b4:40:8b:9b:73:a2:c9:7f:b1:5f:ad:bb: 29:ca:27:2f:8c:ba:87:01:c1:39:49:0b:a1:2f:a1: 89:a0:01:a8:c3:0c:9d:f6:ce:46:ab:ab:94:94:4d: 4e:ed:b1:7f:a8:55:d2:dd:ec:d3:af:40:eb:e0:f4: a4:cd:24:bb:e3:82:95:1b:74:cc:0a:19:9a:e1:cd: 3c:b5:58:72:1d:87:01:60:c8:11:a5:62:8d:d5:2c: 05:9c:9d:34:ab:d8:00:69:75:3d:bc:51:b1:9c:42: 27:56:b7:c3:19:a2:8d:0c:86:11:1c:e4:67:53:1d: 4a:80:69:93:90:f6:71:1d:84:81:54:77:25:65:65: 9d:aa:a7:03:e6:78:8e:8b:40:5d:65:0d:d3:b6:db: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.136.0/21 195.149.105.0/24 IPv6: 2a00:95a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29425 Signature Algorithm: sha256WithRSAEncryption 3d:76:46:da:9f:31:5f:94:07:51:13:36:04:bc:35:ea:06:f6: bb:cf:34:ec:e4:aa:41:a2:86:59:fb:e7:80:b4:eb:c6:a7:d7: f1:f6:6f:d9:c3:37:49:49:73:04:af:e6:2f:4a:cc:c4:6b:55: 89:17:24:1d:98:23:96:01:9c:ca:23:03:c7:96:41:44:2e:38: 78:ab:7b:c7:af:b4:f6:fa:40:5d:1b:ff:ee:5b:b1:69:db:09: b6:f8:fc:4d:9b:fd:86:c1:84:4d:cb:c8:95:dd:1d:82:cb:75: 4b:93:de:79:4d:5c:46:88:9a:9d:56:d2:13:d0:34:fd:76:41: 63:ba:bd:76:eb:7c:d7:3d:0d:ee:48:fc:2d:fa:f6:28:5a:83: 49:24:e6:82:6a:13:8e:25:eb:19:c6:a8:1f:ca:a5:cb:dc:2b: 1d:dd:14:ac:f6:d0:01:ce:c1:6c:7e:20:48:21:51:3f:08:87: c5:dc:c7:25:31:ff:64:73:6d:ff:e2:95:e5:64:cc:84:c5:86: 4e:45:f7:97:45:3d:24:07:22:27:e2:26:91:88:cd:60:79:42: ff:88:7f:24:2c:35:9b:b1:8d:75:b5:db:2c:29:59:8a:49:84: e6:eb:a8:c2:98:3d:9a:f2:0e:23:ae:4d:0d:ee:fa:0d:54:ba: db:73:1d:85 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt6W55BCv5YBq4y76DHMF9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZThlZGFiMTIyMTVlMjliZDM4YzFkYTliNWUzOTZiZDBjOTZiZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJNUV4EfbTIZPd/1ObZglVhtx6tJ gjGhB5T8xpbQuyaHO7pNAlaZVf/BKezdPX+WNBtJ7P25E3hTslHAFvpqDFfhK/Bu lUVYirBez6uj6eD+dGDP9ZZriMM9xVxJNJV65Xs2ld2HXH2DmSW0QIubc6LJf7Ff rbspyicvjLqHAcE5SQuhL6GJoAGowwyd9s5Gq6uUlE1O7bF/qFXS3ezTr0Dr4PSk zSS744KVG3TMChma4c08tVhyHYcBYMgRpWKN1SwFnJ00q9gAaXU9vFGxnEInVrfD GaKNDIYRHORnUx1KgGmTkPZxHYSBVHclZWWdqqcD5niOi0BdZQ3TttuIJQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFC6O2rEiFeKb04wdqbXjlr0Mlr4JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2FmNzZl MC02YjdkLTQwYWMtOTYyMS02NDNhMmZjNDQ3M2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvYWY3NmUw LTZiN2QtNDBhYy05NjIxLTY0M2EyZmM0NDczZS8xL0xvN2FzU0lWNHB2VGpCMnB0 ZU9XdlF5V3Znay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLv+IAwQAw5VpMA0EAgACMAcDBQAqAJWgMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnLxMA0GCSqGSIb3DQEBCwUAA4IBAQA9dkba nzFflAdREzYEvDXqBva7zzTs5KpBooZZ++eAtOvGp9fx9m/ZwzdJSXMEr+YvSszE a1WJFyQdmCOWAZzKIwPHlkFELjh4q3vHr7T2+kBdG//uW7Fp2wm2+PxNm/2GwYRN y8iV3R2Cy3VLk955TVxGiJqdVtIT0DT9dkFjur1263zXPQ3uSPwt+vYoWoNJJOaC ahOOJesZxqgfyqXL3Csd3RSs9tABzsFsfiBIIVE/CIfF3MclMf9kc23/4pXlZMyE xYZORfeXRT0kByIn4iaRiM1geUL/iH8kLDWbsY11tdssKVmKSYTm66jCmD2a8g4j rk0N7voNVLrbcx2F -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:29 2026 by rpki-client