This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer File: LzFLwAp-WuIzSeBUBik6fWBgzaE.cer (raw, json) Hash identifier: 0UTaXhtTtAq7h1kugYKtKSXiADKlzV3fABmDqi2Fbm0= Subject key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA4E7B312E2B3204D2059B6E958A81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47268 IP: 195.216.249.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4e:7b:31:2e:2b:32:04:d2:05:9b:6e:95:8a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:9d:e1:25:5b:55:99:de:a9:ca:03:f9:b4: bc:75:74:70:b2:cf:c2:2c:5b:e8:28:e5:49:15:92: 99:7d:5b:fa:54:e8:bc:44:57:a9:57:62:fe:43:87: be:40:19:7d:f6:4d:3f:09:e9:e3:78:e7:36:70:7b: c9:76:62:6b:1b:08:78:82:c1:cf:9f:3b:57:4d:0f: ff:f5:f2:28:36:d1:a7:33:e4:bb:b2:2b:21:66:5d: 83:a5:dc:b8:24:22:a5:7b:7c:4a:5f:a0:40:ba:25: 40:9e:58:82:40:53:7f:14:c3:56:81:78:10:39:f4: c2:1c:cd:3c:c4:83:d3:c9:84:83:3a:ab:13:1a:0b: 4b:23:0b:32:37:28:b9:6d:dc:9e:eb:1d:79:95:1c: 89:41:e0:f0:a4:21:51:91:7a:8b:d7:da:db:4d:08: 11:7c:0f:ac:5f:b1:87:64:df:2e:b4:60:0d:10:f4: 99:d1:34:d2:ca:ba:5e:b8:35:00:24:38:36:da:6f: dc:b0:3e:92:29:43:73:6c:67:d3:a7:ae:93:74:e4: f6:da:06:b3:f0:11:0b:56:0a:10:36:53:2d:81:07: 02:24:55:e0:26:b5:71:cb:2c:77:f5:3b:47:99:4a: 10:d5:8a:ee:4f:ca:58:87:19:08:3f:0b:67:e4:42: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.249.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47268 Signature Algorithm: sha256WithRSAEncryption 8e:56:73:c3:af:03:f1:94:5a:31:1c:9d:d2:47:6b:5e:12:86: 5b:41:1d:c9:68:e6:d2:34:57:a2:b8:66:b3:97:b3:a3:a0:5d: cc:08:0e:bd:fa:76:2f:31:6b:15:6f:be:4b:09:42:ce:e4:35: a6:0c:ad:18:c4:84:2b:7b:04:7a:fa:c4:1a:f8:31:72:b9:9e: e6:e5:ad:dc:e5:6e:bd:f2:41:27:11:7a:0b:b7:f6:94:9e:26: 3e:48:90:a9:ce:10:ee:8f:cc:14:0c:56:b1:ce:d0:82:7d:58: 10:02:0a:30:b7:f8:dd:d3:63:7d:66:51:fd:29:fd:18:e5:6f: d3:eb:ab:49:0a:74:1b:f2:c5:39:5c:04:36:43:7e:96:aa:a5: 2b:5a:d3:c7:6c:e8:2d:8c:9f:fe:0d:55:3d:09:62:64:c3:ce: 06:75:56:0c:ac:6e:02:38:bf:60:9a:c9:5d:06:8b:4b:0b:9c: ab:67:2d:b2:7b:fa:ae:b7:34:84:7a:26:d7:38:18:64:05:e0: 13:a6:99:95:9a:5a:07:67:35:fc:81:48:6b:70:08:3d:0f:82: 79:cb:6a:d6:b7:20:5f:91:d9:80:8b:b5:37:13:c1:c1:64:1c: 47:44:aa:1a:e1:f9:d6:a1:e8:bc:b6:18:48:ee:63:dd:48:f8: 5c:02:00:ba -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yk57MS4rMgTSBZtulYqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjMxNGJjMDBhN2U1YWUyMzM0OWUwNTQwNjI5M2E3ZDYwNjBjZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7K6d4SVbVZneqcoD+bS8dXRwss/C LFvoKOVJFZKZfVv6VOi8RFepV2L+Q4e+QBl99k0/CenjeOc2cHvJdmJrGwh4gsHP nztXTQ//9fIoNtGnM+S7sishZl2Dpdy4JCKle3xKX6BAuiVAnliCQFN/FMNWgXgQ OfTCHM08xIPTyYSDOqsTGgtLIwsyNyi5bdye6x15lRyJQeDwpCFRkXqL19rbTQgR fA+sX7GHZN8utGANEPSZ0TTSyrpeuDUAJDg22m/csD6SKUNzbGfTp66TdOT22gaz 8BELVgoQNlMtgQcCJFXgJrVxyyx39TtHmUoQ1YruT8pYhxkIPwtn5EJ7NwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFC8xS8AKflriM0ngVAYpOn1gYM2hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2M1ZjQ5 ZC0xMGIwLTQ4MTgtYTBjNC03YzBiOWIxOWZjZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvYzVmNDlk LTEwYjAtNDgxOC1hMGM0LTdjMGI5YjE5ZmNmYi8xL0x6Rkx3QXAtV3VJelNlQlVC aWs2ZldCZ3phRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw9j5MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC4pDANBgkqhkiG9w0BAQsFAAOCAQEAjlZzw68D8ZRaMRyd0kdrXhKGW0EdyWjm 0jRXorhms5ezo6BdzAgOvfp2LzFrFW++SwlCzuQ1pgytGMSEK3sEevrEGvgxcrme 5uWt3OVuvfJBJxF6C7f2lJ4mPkiQqc4Q7o/MFAxWsc7Qgn1YEAIKMLf43dNjfWZR /Sn9GOVv0+urSQp0G/LFOVwENkN+lqqlK1rTx2zoLYyf/g1VPQliZMPOBnVWDKxu Aji/YJrJXQaLSwucq2ctsnv6rrc0hHom1zgYZAXgE6aZlZpaB2c1/IFIa3AIPQ+C ectq1rcgX5HZgIu1NxPBwWQcR0SqGuH51qHovLYYSO5j3Uj4XAIAug== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:30 2026 by rpki-client