This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
File:                     _LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer (raw, json)
Hash identifier:          qikrzbYNGydf0Bbmhz6xkPa9mFL6hRvMuAv19zeDgXA=
Subject key identifier:   FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E3934735A167C619CD4DE7CB9B48A83
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:20:36 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 207086
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:34:73:5a:16:7c:61:9c:d4:de:7c:b9:b4:8a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:20:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:7c:7d:64:32:98:01:0a:61:7b:58:73:a8:
                    d7:56:3d:a0:94:02:50:1d:6b:b5:1c:b8:ee:57:f6:
                    70:a8:79:53:b0:43:1c:4d:10:a7:16:3d:21:71:63:
                    86:78:74:ff:ee:ae:c0:df:f9:62:d3:12:16:91:fd:
                    5c:94:10:e2:1b:f7:2a:a3:92:d6:79:db:2c:14:2c:
                    e9:1a:db:51:87:8d:55:28:3a:b8:3b:42:97:3b:e9:
                    15:d4:6c:98:dd:14:1e:1b:07:cd:5f:20:ae:f0:c9:
                    8d:0e:d9:66:65:16:4a:8e:3b:bf:c3:ce:a7:a7:d3:
                    9a:4c:52:a0:00:a2:7c:2e:a9:0f:ab:a6:52:03:4c:
                    2c:88:2e:52:99:a2:2f:67:10:80:60:65:d5:79:16:
                    ee:1f:fe:10:8a:93:fc:e6:ff:f7:76:97:ca:11:82:
                    53:3c:31:4d:59:70:2e:a9:1e:2e:5f:e5:ef:09:86:
                    62:dc:23:8f:51:22:b8:46:5f:e3:3a:45:c6:fa:27:
                    78:2d:54:63:dd:d7:76:f9:e2:9a:4b:1f:aa:ad:67:
                    12:37:e3:7f:22:13:01:dc:55:0a:9b:27:f3:88:58:
                    50:7d:74:3f:63:cc:ed:d6:c7:eb:45:13:4f:15:c7:
                    3c:10:8c:3a:0d:b8:a4:85:99:33:80:c4:84:21:27:
                    c6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207086

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:27:ac:18:34:b6:c4:1f:71:ab:54:f1:33:c5:13:42:03:
         13:13:01:63:5a:8a:a2:19:bd:18:0e:07:f8:ef:ee:bf:73:1a:
         89:e8:07:90:72:d3:f0:37:98:88:4a:e2:4b:9c:8e:16:35:c0:
         f4:07:32:8c:3a:fc:52:ff:47:99:81:fe:04:cf:a4:f5:16:a3:
         a2:35:dd:ea:4f:01:f9:a9:76:f7:4a:a3:c8:8d:e5:1b:da:01:
         29:4c:3c:8f:af:e9:cd:d9:0f:53:ee:34:30:85:aa:21:e8:3b:
         11:8b:3c:26:36:82:49:03:25:c7:a9:84:43:d2:01:d5:f4:9f:
         d8:11:44:57:8b:7b:a7:c4:b9:cc:9c:08:09:7f:24:b7:cc:0d:
         aa:ba:00:dc:dc:d6:8a:51:8a:00:68:a7:d6:99:e8:13:a7:6a:
         dd:2d:49:b1:f0:e5:38:66:8e:ed:04:24:1f:fe:68:55:22:95:
         56:5d:4c:b5:f1:52:33:62:67:dc:1a:7d:9c:d6:54:8b:6b:d8:
         a5:d8:6b:08:08:40:31:f8:f7:dc:f1:6e:89:31:98:41:56:55:
         45:28:f3:08:df:78:48:2c:0c:df:53:d9:9f:09:b5:e7:47:6b:
         0d:b2:5e:9d:47:dd:d4:1a:d1:5f:80:7a:40:bd:6d:66:1d:ff:
         b0:47:48:88
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt+OTRzWhZ8YZzU3ny5tIqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2IzMjk5ZjA1YzIwZDYzOTU5Y2U3NzgxYjVhOGUwNzJmNTdjY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ98fWQymAEKYXtYc6jXVj2glAJQ
HWu1HLjuV/ZwqHlTsEMcTRCnFj0hcWOGeHT/7q7A3/li0xIWkf1clBDiG/cqo5LW
edssFCzpGttRh41VKDq4O0KXO+kV1GyY3RQeGwfNXyCu8MmNDtlmZRZKjju/w86n
p9OaTFKgAKJ8LqkPq6ZSA0wsiC5SmaIvZxCAYGXVeRbuH/4QipP85v/3dpfKEYJT
PDFNWXAuqR4uX+XvCYZi3COPUSK4Rl/jOkXG+id4LVRj3dd2+eKaSx+qrWcSN+N/
IhMB3FUKmyfziFhQfXQ/Y8zt1sfrRRNPFcc8EIw6DbikhZkzgMSEISfGEQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPyzKZ8Fwg1jlZzneBtajgcvV8y0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2ZkNTJm
Ny0wZmZhLTRmMWQtOWQwMi0xNDdkNDg2ZjQwNTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZmQ1MmY3
LTBmZmEtNGYxZC05ZDAyLTE0N2Q0ODZmNDA1MC8xL19MTXBud1hDRFdPVm5PZDRH
MXFPQnk5WHpMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMo7jANBgkqhkiG9w0BAQsFAAOCAQEAT1onrBg0tsQf
catU8TPFE0IDExMBY1qKohm9GA4H+O/uv3MaiegHkHLT8DeYiEriS5yOFjXA9Acy
jDr8Uv9HmYH+BM+k9RajojXd6k8B+al290qjyI3lG9oBKUw8j6/pzdkPU+40MIWq
Ieg7EYs8JjaCSQMlx6mEQ9IB1fSf2BFEV4t7p8S5zJwICX8kt8wNqroA3NzWilGK
AGin1pnoE6dq3S1JsfDlOGaO7QQkH/5oVSKVVl1MtfFSM2Jn3Bp9nNZUi2vYpdhr
CAhAMfj33PFuiTGYQVZVRSjzCN94SCwM31PZnwm150drDbJenUfd1BrRX4B6QL1t
Zh3/sEdIiA==
-----END CERTIFICATE-----