This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer File: LpjFBqF0zyytnBpsW4HW6JiGNi0.cer (raw, json) Hash identifier: QTNnouswu2pDh90WdlsLBVvuqZyrb3Air+oSSIneP4E= Subject key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759602B69B053B09092853AD06DEE50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.247.253.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:60:2b:69:b0:53:b0:90:92:85:3a:d0:6d:ee:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:1e:a5:4e:13:34:78:28:c0:d2:fa:99:62: 3f:17:2c:e6:5e:42:31:da:ab:fc:6b:90:48:bc:3d: 05:da:3a:59:18:78:c1:e3:49:7a:50:f5:a2:58:c1: 01:c5:3b:d7:22:56:25:99:fc:18:43:df:10:70:a6: 56:37:1b:c1:f9:af:81:5e:42:77:47:c8:dd:30:55: b3:42:93:4f:13:b7:b9:84:89:26:6f:70:a5:5d:d0: d2:15:63:af:84:ff:41:03:e0:a6:ed:64:2f:5d:47: 47:19:37:92:2a:51:03:07:95:7e:3d:b2:ba:ad:4e: 51:88:6d:12:1b:a7:dd:d4:88:6e:13:31:f8:15:e8: 0d:bc:0c:f7:a8:94:fe:97:77:8b:4b:83:d4:e4:4e: 8b:5d:fd:5a:13:82:f4:77:16:54:85:bc:f5:44:f0: 3f:dd:47:03:fd:50:b1:d8:da:3e:8b:51:e9:37:81: 7a:5e:33:9c:cb:e1:0f:c1:74:be:df:4d:bc:4e:97: 2f:13:29:d1:a1:a2:35:54:ce:52:dc:d7:86:b6:5a: 28:34:e5:a5:db:03:22:1a:c9:93:4b:80:17:4d:59: cf:50:73:82:9c:ea:a2:37:01:01:bb:3b:11:48:e1: 9a:7d:80:c7:e8:e5:fa:6b:de:49:a0:bb:b8:f4:fa: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.253.0/24 Signature Algorithm: sha256WithRSAEncryption 17:52:15:d6:c5:d8:05:9c:1d:ce:bd:34:a9:4a:ba:00:eb:ba: a8:8b:eb:5f:90:4d:de:90:cc:00:eb:8c:29:1f:71:b8:08:6d: 60:85:74:28:b0:f9:21:b8:1a:0f:a8:61:15:28:78:1d:b1:89: 4c:ad:80:d8:33:8b:f1:ee:7f:21:b1:ad:81:5d:a8:19:a0:45: a2:f2:c8:b7:bf:cc:fb:73:74:ea:95:b6:4e:7a:cf:1f:c3:6c: 84:14:2c:1b:69:7d:9a:46:af:e3:d5:27:d1:c5:8b:83:0e:95: 5c:f4:b0:e8:af:5e:35:71:e2:75:87:ad:47:fb:92:c0:b3:19: 88:ec:4b:70:44:ee:49:fe:85:e7:83:88:9d:71:6e:cb:84:c6: 8a:60:7d:f9:ce:b9:8f:fd:ba:f1:d7:db:11:ba:bd:b7:72:9a: 2d:46:b5:24:19:4e:3d:91:92:f0:75:b6:6c:f3:4f:47:dc:a9: 9a:72:6b:0e:8d:19:d0:ab:5a:75:22:26:e5:7d:f4:79:92:bc: a2:c2:45:72:c6:92:7f:99:ab:ff:55:c5:6f:31:60:62:13:4a: 7d:74:99:45:ca:50:1a:6e:a2:7b:a5:62:6d:73:6a:58:63:d6: e9:23:a7:24:6e:78:66:f2:e7:0c:1e:2b:2b:7e:a2:f8:27:5f: 2f:32:e7:f5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WWArabBTsJCShTrQbe5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTk4YzUwNmExNzRjZjJjYWQ5YzFhNmM1YjgxZDZlODk4ODYzNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2sepU4TNHgowNL6mWI/FyzmXkIx 2qv8a5BIvD0F2jpZGHjB40l6UPWiWMEBxTvXIlYlmfwYQ98QcKZWNxvB+a+BXkJ3 R8jdMFWzQpNPE7e5hIkmb3ClXdDSFWOvhP9BA+Cm7WQvXUdHGTeSKlEDB5V+PbK6 rU5RiG0SG6fd1IhuEzH4FegNvAz3qJT+l3eLS4PU5E6LXf1aE4L0dxZUhbz1RPA/ 3UcD/VCx2No+i1HpN4F6XjOcy+EPwXS+3028TpcvEynRoaI1VM5S3NeGtlooNOWl 2wMiGsmTS4AXTVnPUHOCnOqiNwEBuzsRSOGafYDH6OX6a95JoLu49PrCawIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFC6YxQahdM8srZwabFuB1uiYhjYtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2E2NDI1 Yy0wYzdjLTRmZGYtODdiMi02YmJhN2ZjMzE3MjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvYTY0MjVj LTBjN2MtNGZkZi04N2IyLTZiYmE3ZmMzMTcyOC8xL0xwakZCcUYwenl5dG5CcHNX NEhXNkppR05pMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/f9MA0GCSqGSIb3DQEBCwUAA4IBAQAXUhXW xdgFnB3OvTSpSroA67qoi+tfkE3ekMwA64wpH3G4CG1ghXQosPkhuBoPqGEVKHgd sYlMrYDYM4vx7n8hsa2BXagZoEWi8si3v8z7c3TqlbZOes8fw2yEFCwbaX2aRq/j 1SfRxYuDDpVc9LDor141ceJ1h61H+5LAsxmI7EtwRO5J/oXng4idcW7LhMaKYH35 zrmP/brx19sRur23cpotRrUkGU49kZLwdbZs809H3KmacmsOjRnQq1p1IiblffR5 kryiwkVyxpJ/mav/VcVvMWBiE0p9dJlFylAabqJ7pWJtc2pYY9bpI6ckbnhm8ucM HisrfqL4J18vMuf1 -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:32 2026 by rpki-client