This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer File: LokBk3Q73yTdIsPtbyizAxouyAY.cer (raw, json) Hash identifier: c/qcM07EifdLGuSQB1/B/jaYcoHDykseVjG68mNd97Y= Subject key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B5E0CDE3961659ECDDB4C552F52AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211735 IP: 185.242.176.0/24 IP: 2a10:9ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5e:0c:de:39:61:65:9e:cd:db:4c:55:2f:52:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:06:f8:00:69:64:7c:75:e7:0e:1a:99:24:1a: 98:30:7e:5b:c4:59:f6:4c:71:60:9f:5c:f0:63:84: 26:5e:17:e1:ca:23:70:36:60:fc:bb:dc:82:8c:f1: e1:03:f3:fb:93:be:5b:ab:ad:96:85:d7:8d:32:67: 5f:76:71:25:aa:92:21:4d:dc:77:eb:4e:4f:88:76: 8f:ac:c2:77:68:1b:2c:8b:18:5c:5f:61:d1:92:77: a8:50:f0:64:f9:29:6d:7b:47:85:d8:05:67:6c:4f: 2a:aa:9a:e6:5d:e3:46:cd:00:a3:64:63:ad:57:f3: be:dd:cd:42:4b:91:d9:4c:81:8b:e9:7b:4e:a3:5d: 68:81:23:f4:52:25:02:5c:6f:71:21:25:ce:69:c2: 5b:e6:2a:66:99:c5:2e:4e:0c:db:52:6e:e9:1a:25: 49:8a:22:28:5a:cd:d6:c5:ae:41:39:4b:59:ab:2d: 69:f4:65:92:0b:71:93:da:6a:99:d5:3d:75:23:3d: 46:f0:06:23:50:15:14:79:5c:15:67:c9:92:f2:0f: 5d:2f:c3:30:85:c1:d7:17:18:59:4a:ea:84:f1:12: 0d:27:33:aa:85:c4:ac:7f:39:8b:ee:6a:b6:69:ea: 07:dd:c9:c1:44:57:be:e2:8c:18:67:cf:f0:3e:1a: 9c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.176.0/24 IPv6: 2a10:9ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211735 Signature Algorithm: sha256WithRSAEncryption 70:90:35:92:27:a1:c6:8d:c5:67:e8:5e:5d:8b:9b:e3:ce:e2: 95:45:20:18:b0:9e:6c:99:f7:16:84:7e:1a:46:11:b1:b4:06: 86:51:19:3a:b0:c6:75:53:1e:88:42:0d:a1:9b:fa:b8:3d:b5: e2:aa:0a:1c:59:69:4c:05:3c:fb:7d:e8:f6:d0:7c:b1:6f:2f: 70:aa:6f:ec:d9:c4:62:47:b8:b4:bc:a6:08:28:af:ff:61:a4: 47:8a:91:71:79:51:2c:22:a9:c9:ed:77:80:52:4f:5f:d9:d3: d6:b5:fc:dc:7c:f1:e1:f9:3a:c7:20:b9:8f:19:9a:e4:9f:5a: db:d5:7a:7a:58:f4:da:f6:c3:d2:c1:72:f3:1a:5b:8a:d8:72: ea:2a:9f:17:4f:4e:00:01:44:a8:a6:57:fb:47:38:9b:69:5d: 75:a8:67:ce:cd:19:3d:7b:e9:2b:a0:af:38:26:be:b8:8c:ff: b6:d4:8c:c5:03:8b:19:0f:1a:eb:d6:a6:4b:32:99:c1:6e:1e: 8e:cf:70:08:55:94:cd:bf:1e:53:12:b9:c0:71:e5:48:27:cb: fd:50:00:10:ef:8d:ea:50:ba:76:cc:b6:50:e4:c6:b5:8c:2e: 07:81:b8:b7:b2:dc:ab:c7:31:b7:6d:95:31:46:f1:9b:9e:41: cc:81:f4:dc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6W14M3jlhZZ7N20xVL1KvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTg5MDE5Mzc0M2JkZjI0ZGQyMmMzZWQ2ZjI4YjMwMzFhMmVjODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wb4AGlkfHXnDhqZJBqYMH5bxFn2 THFgn1zwY4QmXhfhyiNwNmD8u9yCjPHhA/P7k75bq62WhdeNMmdfdnElqpIhTdx3 605PiHaPrMJ3aBssixhcX2HRkneoUPBk+Slte0eF2AVnbE8qqprmXeNGzQCjZGOt V/O+3c1CS5HZTIGL6XtOo11ogSP0UiUCXG9xISXOacJb5ipmmcUuTgzbUm7pGiVJ iiIoWs3Wxa5BOUtZqy1p9GWSC3GT2mqZ1T11Iz1G8AYjUBUUeVwVZ8mS8g9dL8Mw hcHXFxhZSuqE8RINJzOqhcSsfzmL7mq2aeoH3cnBRFe+4owYZ8/wPhqcIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFC6JAZN0O98k3SLD7W8oswMaLsgGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzhjMjdh YS1iNTAwLTRjOTYtODRlYy1mOGJlNDk1MjUyYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOGMyN2Fh LWI1MDAtNGM5Ni04NGVjLWY4YmU0OTUyNTJiMC8xL0xva0JrM1E3M3lUZElzUHRi eWl6QXhvdXlBWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAufKwMA0EAgACMAcDBQMqEJrAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM7FzANBgkqhkiG9w0BAQsFAAOCAQEAcJA1kiehxo3F Z+heXYub487ilUUgGLCebJn3FoR+GkYRsbQGhlEZOrDGdVMeiEINoZv6uD214qoK HFlpTAU8+33o9tB8sW8vcKpv7NnEYke4tLymCCiv/2GkR4qRcXlRLCKpye13gFJP X9nT1rX83Hzx4fk6xyC5jxma5J9a29V6elj02vbD0sFy8xpbithy6iqfF09OAAFE qKZX+0c4m2lddahnzs0ZPXvpK6CvOCa+uIz/ttSMxQOLGQ8a69amSzKZwW4ejs9w CFWUzb8eUxK5wHHlSCfL/VAAEO+N6lC6dsy2UOTGtYwuB4G4t7Lcq8cxt22VMUbx m55BzIH03A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:59 2026 by rpki-client