This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer File: LuVtTXsdGgbOifdG95tlbHNIxSU.cer (raw, json) Hash identifier: xQXT/bUvkwKGIiMwiwneWwzKIr4uip9OgfdiMxpZTLc= Subject key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA3ACD62CFCBB053693CEB6D3481E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203507 AS: 206970 IP: 5.104.152.0 -- 5.104.157.255 IP: 185.123.224.0/22 IP: 193.28.13.0/24 IP: 195.245.199.0/24 IP: 212.79.224.0/19 IP: 2001:67c:199c::/48 IP: 2a06:e380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3a:cd:62:cf:cb:b0:53:69:3c:eb:6d:34:81:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:56:61:17:e8:f1:1f:7a:90:7a:aa:b9:80:e4: af:67:70:36:61:0f:03:78:f1:f2:3d:b4:1e:5b:9e: 30:cc:6e:12:bf:4b:62:fa:d0:9b:05:29:6d:fc:cc: 69:57:e4:ca:c9:10:e6:9e:f1:18:e2:a8:a0:0f:fc: ac:85:7e:65:e9:96:38:ff:20:39:a2:b1:8c:18:a9: 76:cd:fd:cb:b1:75:b6:04:76:65:84:2f:ed:1f:43: ea:43:89:06:a7:81:de:cc:9d:3f:2b:3a:11:ca:51: c9:fa:98:50:9b:a1:d0:ee:3b:32:a7:0c:c9:a1:e1: b7:bd:91:2f:54:8e:bb:6d:44:81:d0:41:19:3e:98: 1c:dd:6b:af:42:81:7f:08:69:e6:d9:5c:63:9a:f4: 84:79:fe:c1:57:77:41:74:ed:94:8d:b6:ad:6e:1e: 49:88:06:e5:55:f3:a3:0b:72:02:33:12:74:0e:4d: f1:ae:e1:e3:e1:a9:2d:37:f5:5d:d2:59:56:22:df: 4e:3c:2b:b6:45:76:22:e3:00:c6:fd:6c:77:36:89: 4e:be:4c:79:43:5c:a0:04:ed:71:ad:d6:13:32:5e: b3:cb:56:47:96:22:54:7a:fa:ba:20:43:81:82:47: fd:13:0f:6c:42:b6:b7:54:2b:b9:69:79:8e:ce:f3: 9a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.152.0-5.104.157.255 185.123.224.0/22 193.28.13.0/24 195.245.199.0/24 212.79.224.0/19 IPv6: 2001:67c:199c::/48 2a06:e380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203507 206970 Signature Algorithm: sha256WithRSAEncryption 63:c7:d6:4d:0c:2b:d3:72:d3:53:5d:da:a6:6c:d3:7a:16:e5: 9b:62:56:42:60:92:c2:cc:06:1d:69:3e:1c:c5:e8:0d:18:86: 05:83:89:9b:55:2a:11:72:5f:0d:b2:86:a1:62:f2:71:4c:9d: 1f:7d:c8:06:1c:10:0e:87:e7:22:14:dc:53:83:f8:c3:68:8d: 8a:60:38:e9:48:56:d9:fb:7e:5c:14:55:bb:c6:0f:61:ea:28: 96:1e:b6:9a:93:89:11:e8:81:32:b6:d1:8b:aa:c4:5d:85:9a: 5f:c3:9a:43:17:46:c6:65:1f:5a:8d:ff:08:38:e4:bd:1e:d1: 90:e0:05:80:a8:3e:3d:2b:1e:fa:56:e7:4f:4b:e9:6f:dc:27: 89:3d:16:7f:eb:31:5c:b6:83:84:9a:9b:f6:b7:40:9b:60:b4: 13:6e:46:55:40:f4:f4:77:b4:bb:8b:f9:a1:8c:c8:72:54:bc: 15:f4:8f:6d:cd:cc:99:80:e7:db:26:11:5d:2a:4f:84:76:dc: f2:1d:05:92:c2:82:20:c0:c2:77:21:cb:77:bc:6d:ac:7b:de: 7e:fe:a8:00:cd:f3:98:90:ac:f2:78:b8:ce:d8:35:35:88:4e: c0:87:6c:31:1f:42:12:06:1c:20:cb:48:1d:61:71:df:2c:54: 3f:2a:12:f5 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZt9yjrNYs/LsFNpPOttNIHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWU1NmQ0ZDdiMWQxYTA2Y2U4OWY3NDZmNzliNjU2YzczNDhjNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglZhF+jxH3qQeqq5gOSvZ3A2YQ8D ePHyPbQeW54wzG4Sv0ti+tCbBSlt/MxpV+TKyRDmnvEY4qigD/yshX5l6ZY4/yA5 orGMGKl2zf3LsXW2BHZlhC/tH0PqQ4kGp4HezJ0/KzoRylHJ+phQm6HQ7jsypwzJ oeG3vZEvVI67bUSB0EEZPpgc3WuvQoF/CGnm2VxjmvSEef7BV3dBdO2Ujbatbh5J iAblVfOjC3ICMxJ0Dk3xruHj4aktN/Vd0llWIt9OPCu2RXYi4wDG/Wx3NolOvkx5 Q1ygBO1xrdYTMl6zy1ZHliJUevq6IEOBgkf9Ew9sQra3VCu5aXmOzvOa1wIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFC7lbU17HRoGzon3RvebZWxzSMUlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2UwYjY3 ZS0yNjkwLTRhODgtOWQxNi0yMmU5OGRlMjYxMDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZTBiNjdl LTI2OTAtNGE4OC05ZDE2LTIyZTk4ZGUyNjEwNi8xL0x1VnRUWHNkR2diT2lmZEc5 NXRsYkhOSXhTVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFcGCCsGAQUF BwEHAQH/BEgwRjAsBAIAATAmMAwDBAMFaJgDBAEFaJwDBAK5e+ADBADBHA0DBADD 9ccDBAXUT+AwFgQCAAIwEAMHACABBnwZnAMFAyoG44AwHwYIKwYBBQUHAQgBAf8E EDAOoAwwCgIDAxrzAgMDKHowDQYJKoZIhvcNAQELBQADggEBAGPH1k0MK9Ny01Nd 2qZs03oW5ZtiVkJgksLMBh1pPhzF6A0YhgWDiZtVKhFyXw2yhqFi8nFMnR99yAYc EA6H5yIU3FOD+MNojYpgOOlIVtn7flwUVbvGD2HqKJYetpqTiRHogTK20YuqxF2F ml/DmkMXRsZlH1qN/wg45L0e0ZDgBYCoPj0rHvpW509L6W/cJ4k9Fn/rMVy2g4Sa m/a3QJtgtBNuRlVA9PR3tLuL+aGMyHJUvBX0j23NzJmA59smEV0qT4R23PIdBZLC giDAwnchy3e8bax73n7+qADN85iQrPJ4uM7YNTWITsCHbDEfQhIGHCDLSB1hcd8s VD8qEvU= -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:14 2026 by rpki-client