This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer File: LsJnz2xrO4jpahG_KemnOlWMXkA.cer (raw, json) Hash identifier: nH39cSe2g4A2+X8XhO7VM0TWaeFyUNHu2AV8gBf5d0g= Subject key identifier: 2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F817AE8B2779EE31B5887BC0071CB64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.28.160.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:7a:e8:b2:77:9e:e3:1b:58:87:bc:00:71:cb:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:3f:d5:5e:a8:81:19:98:1f:2d:35:f8:45: ba:39:89:e4:cb:08:72:30:6f:a3:75:12:65:74:5c: ab:49:09:b8:38:ae:eb:13:cc:a6:01:53:3c:68:94: 46:ec:b5:1f:d5:ff:84:56:03:23:62:50:b7:2c:1a: c2:5c:98:eb:20:1b:11:7d:77:b3:be:2e:29:d0:00: 95:73:8f:ec:c3:a9:37:a9:c6:08:6b:0f:7e:5c:87: 1c:6e:6a:cb:18:fe:e8:aa:49:0f:30:41:0b:c2:fe: 6f:9f:20:8b:af:c5:26:a9:6f:c3:09:7f:06:38:a2: a5:de:f5:e6:95:6a:86:6d:32:0c:67:58:be:03:07: b7:eb:1d:7b:1d:85:47:ca:6f:50:2c:e3:e4:d5:3f: eb:99:5a:80:d3:a0:eb:38:4d:66:68:f3:56:f0:38: 4d:0a:9d:77:34:22:be:19:0c:11:f9:75:8f:3d:67: bd:d3:99:6d:10:f2:85:fb:53:7d:2b:af:c9:6c:2e: 03:11:1c:8a:d0:51:44:ff:eb:61:60:2e:77:de:d6: 9e:60:7c:3c:ea:6a:66:2c:91:7f:f6:32:31:f8:6e: 57:e9:fe:b5:cf:71:21:84:60:93:63:f4:27:1d:c9: 63:ad:f9:b8:f5:fa:ac:0a:91:09:79:f4:3a:be:2f: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.28.160.0/23 Signature Algorithm: sha256WithRSAEncryption 97:4b:d6:bb:8c:f4:1d:03:fa:22:a4:0b:24:c8:08:bb:80:34: 50:20:6f:0b:f0:24:d4:3a:43:34:d2:a5:8f:6a:fe:39:76:ea: f9:a6:e2:18:98:3d:de:35:3d:2b:9c:4b:69:96:c2:63:46:9f: d7:99:eb:61:69:fc:00:45:9f:37:90:32:79:3f:ec:c4:3e:42: bf:22:35:1c:b8:bf:fc:0c:81:71:d5:c5:6b:c5:7f:e4:d8:08: 2c:fa:77:d1:51:13:5b:b8:b6:eb:57:a2:42:fc:38:b4:e8:29: fc:53:85:73:67:70:e1:69:06:9b:f0:fc:58:07:a0:31:5a:5d: ab:7b:86:85:15:54:1e:80:12:40:0d:be:ef:a1:48:90:06:83: b4:ab:e7:c1:90:8d:0a:87:d7:8e:5c:1b:2e:5f:4e:5f:97:62: d8:7a:aa:13:d3:b1:d8:b7:7c:49:ed:a7:33:9a:53:08:38:cb: 74:aa:8f:7b:10:95:8d:68:83:7a:2e:2a:25:aa:a0:e3:7f:d0: b5:18:d7:fb:89:48:f2:8f:1f:0f:93:ec:f7:d5:5f:b4:cb:1a: 3a:4c:d1:3d:d3:34:eb:77:03:28:51:3b:f5:8f:2b:c6:c4:61: 4e:ff:45:9c:6b:ca:48:b0:14:82:dc:59:06:9e:9c:61:0b:c9: 4b:e7:1e:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/gXrosnee4xtYh7wAcctkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWMyNjdjZjZjNmIzYjg4ZTk2YTExYmYyOWU5YTczYTU1OGM1ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwo/1V6ogRmYHy01+EW6OYnkywhy MG+jdRJldFyrSQm4OK7rE8ymAVM8aJRG7LUf1f+EVgMjYlC3LBrCXJjrIBsRfXez vi4p0ACVc4/sw6k3qcYIaw9+XIccbmrLGP7oqkkPMEELwv5vnyCLr8UmqW/DCX8G OKKl3vXmlWqGbTIMZ1i+Awe36x17HYVHym9QLOPk1T/rmVqA06DrOE1maPNW8DhN Cp13NCK+GQwR+XWPPWe905ltEPKF+1N9K6/JbC4DERyK0FFE/+thYC533taeYHw8 6mpmLJF/9jIx+G5X6f61z3EhhGCTY/QnHcljrfm49fqsCpEJefQ6vi8iAQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFC7CZ89sazuI6WoRvynppzpVjF5AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2NlYTAx Yi1lZTk0LTRhMDItOGQ2Mi0wZGMwMWZjODgxNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvY2VhMDFi LWVlOTQtNGEwMi04ZDYyLTBkYzAxZmM4ODE0MS8xL0xzSm56MnhyTzRqcGFoR19L ZW1uT2xXTVhrQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwxygMA0GCSqGSIb3DQEBCwUAA4IBAQCXS9a7 jPQdA/oipAskyAi7gDRQIG8L8CTUOkM00qWPav45dur5puIYmD3eNT0rnEtplsJj Rp/XmethafwARZ83kDJ5P+zEPkK/IjUcuL/8DIFx1cVrxX/k2Ags+nfRURNbuLbr V6JC/Di06Cn8U4VzZ3DhaQab8PxYB6AxWl2re4aFFVQegBJADb7voUiQBoO0q+fB kI0Kh9eOXBsuX05fl2LYeqoT07HYt3xJ7aczmlMIOMt0qo97EJWNaIN6LiolqqDj f9C1GNf7iUjyjx8Pk+z31V+0yxo6TNE90zTrdwMoUTv1jyvGxGFO/0Wca8pIsBSC 3FkGnpxhC8lL5x6s -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:00 2026 by rpki-client