This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.cer (raw, json) Hash identifier: KHeTKZIatA9S7wrQQ75FKPxKl0BtCilPGwdh2Lbe2HQ= Subject key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783535A78285F45F4A83A2238C9081CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 147.78.156.0/22 IP: 171.25.128.0/20 IP: 193.221.16.0 -- 193.221.81.255 IP: 2a05:ff40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:35:a7:82:85:f4:5f:4a:83:a2:23:8c:90:81:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:fc:32:ef:b4:03:59:f2:fc:3b:65:55:b4: b1:5c:57:d8:be:4f:91:2c:d5:bc:b3:1a:82:27:61: 87:f2:e4:f7:52:6f:73:af:bc:ce:d3:ec:98:24:6e: e3:4f:16:0b:7e:c7:70:fb:89:bd:5e:cc:36:02:ee: c0:25:02:4a:e9:83:06:36:e9:7c:3f:5b:1a:bf:90: 1e:16:72:40:22:4c:3e:32:df:9b:c8:89:d3:86:97: a3:c3:d0:18:4a:cc:6a:8a:93:3d:a5:fb:5e:73:ab: 7f:d5:0a:05:06:f8:a2:7c:31:80:39:5d:89:35:3b: ec:f2:f1:87:3a:a6:f0:f9:f3:c5:10:90:08:44:b7: ba:a5:a8:38:5f:79:49:4f:e7:98:29:a3:da:2f:5a: 91:2b:0a:07:07:d3:eb:6f:cf:0c:7b:2b:19:47:f5: 17:27:fc:55:a5:28:ae:e4:9f:b8:46:f9:75:79:e6: 83:b7:65:18:51:68:fc:60:b1:e5:4c:48:1c:fa:c1: e2:3a:9b:d8:45:bb:eb:0a:cb:ae:be:41:ff:09:2c: 61:0a:96:a7:02:6e:9a:b0:9c:8e:e0:4d:be:35:0f: f9:7e:37:ec:1b:cc:02:86:94:0a:cc:19:b0:a5:83: b7:21:5b:99:14:d6:9b:84:1c:94:48:fb:68:20:d4: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.156.0/22 171.25.128.0/20 193.221.16.0-193.221.81.255 IPv6: 2a05:ff40::/29 Signature Algorithm: sha256WithRSAEncryption 10:4c:fe:98:42:ff:8d:1c:d1:3d:56:9c:95:14:80:3a:d3:a9: 4e:5b:e1:d5:cd:cb:b6:d0:77:d4:d8:c3:45:89:bd:bf:dc:8c: 83:22:58:ad:22:00:ca:48:a1:22:da:c7:c4:c2:f3:8a:03:a1: 6d:ae:df:8a:2b:54:63:14:6c:c4:fc:45:11:54:6c:43:77:a7: e7:6e:47:75:0b:0e:49:77:40:34:1b:b2:5c:fb:01:36:21:49: 2d:ea:bf:2b:a2:77:d3:c0:40:12:5d:6b:c5:62:db:54:1a:cd: fe:3f:ec:01:4e:bf:31:05:bf:77:29:7e:06:e4:3f:61:c5:ea: df:b5:ff:5d:ed:bc:e3:e2:13:18:cf:26:16:4f:76:75:29:00: ce:4d:c5:61:9f:21:0d:a2:86:b4:f2:90:d6:6b:21:b0:43:33: 49:39:d0:4f:ee:05:49:2d:61:06:7f:cd:5e:93:0d:52:9a:a0: e7:04:99:d8:6b:9c:e6:aa:ba:60:6f:84:c3:c1:10:b0:06:5d: 7d:2c:0a:de:34:69:91:7e:f0:12:39:fc:72:55:5c:77:cd:e0: b3:63:d1:9a:dc:d1:9b:e7:33:50:6a:0b:65:b3:3c:51:54:ed: 7a:c9:a1:57:08:36:04:b7:6a:4b:a7:6c:67:a2:35:f4:45:bb: 4b:2d:72:10 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt4NTWngoX0X0qDoiOMkIHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTU0YWIyZDQ4MWNmMTYyMmEyYzUyMTgzYWI0ZjVhOTMwYTRhZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrH8Mu+0A1ny/DtlVbSxXFfYvk+R LNW8sxqCJ2GH8uT3Um9zr7zO0+yYJG7jTxYLfsdw+4m9Xsw2Au7AJQJK6YMGNul8 P1sav5AeFnJAIkw+Mt+byInThpejw9AYSsxqipM9pftec6t/1QoFBviifDGAOV2J NTvs8vGHOqbw+fPFEJAIRLe6pag4X3lJT+eYKaPaL1qRKwoHB9Prb88MeysZR/UX J/xVpSiu5J+4Rvl1eeaDt2UYUWj8YLHlTEgc+sHiOpvYRbvrCsuuvkH/CSxhCpan Am6asJyO4E2+NQ/5fjfsG8wChpQKzBmwpYO3IVuZFNabhByUSPtoINSxrQIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFP5Uqy1IHPFiKixSGDq09akwpK5BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzRkNWU0 YS04YTE2LTQ1MzctYmUxZi0xYjEzNjJiOWI2YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvNGQ1ZTRh LThhMTYtNDUzNy1iZTFmLTFiMTM2MmI5YjZhMi8xL19sU3JMVWdjOFdJcUxGSVlP clQxcVRDa3JrRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQCk06cAwQEqxmAMAwDBATB3RADBAHB3VAwDQQC AAIwBwMFAyoF/0AwDQYJKoZIhvcNAQELBQADggEBABBM/phC/40c0T1WnJUUgDrT qU5b4dXNy7bQd9TYw0WJvb/cjIMiWK0iAMpIoSLax8TC84oDoW2u34orVGMUbMT8 RRFUbEN3p+duR3ULDkl3QDQbslz7ATYhSS3qvyuid9PAQBJda8Vi21Qazf4/7AFO vzEFv3cpfgbkP2HF6t+1/13tvOPiExjPJhZPdnUpAM5NxWGfIQ2ihrTykNZrIbBD M0k50E/uBUktYQZ/zV6TDVKaoOcEmdhrnOaqumBvhMPBELAGXX0sCt40aZF+8BI5 /HJVXHfN4LNj0Zrc0ZvnM1BqC2WzPFFU7XrJoVcINgS3akunbGeiNfRFu0stchA= -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:18 2026 by rpki-client