This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer File: lAoQolZyjxGku6rcMgS38KNaUAA.cer (raw, json) Hash identifier: mgA4L9yocLBPfSVYy7lhKJRSm88unm5s19gXA3wFDLs= Subject key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8591AE0BCEBEB25CEAACB3041E85D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8860 AS: 43134 AS: 197216 IP: 45.15.180.0/22 IP: 45.81.176.0/22 IP: 77.78.145.0 -- 77.78.147.255 IP: 77.78.150.0/24 IP: 79.98.104.0/21 IP: 109.121.134.0/23 IP: 185.52.204.0/22 IP: 185.55.228.0/22 IP: 185.188.228.0/22 IP: 185.199.36.0/22 IP: 185.228.24.0/22 IP: 185.239.124.0/22 IP: 194.24.189.0/24 IP: 194.145.63.0/24 IP: 195.64.160.0/23 IP: 195.189.80.0/22 IP: 2a01:b6a0::/32 IP: 2a02:80e0::/30 IP: 2a0a:95c0::/30 IP: 2a0c:5880::/29 IP: 2a0c:ea00::/29 IP: 2a0e:2f80::/30 IP: 2a0e:6280::/29 IP: 2a0f:c6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:91:ae:0b:ce:be:b2:5c:ea:ac:b3:04:1e:85:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:10:74:f5:70:c0:ab:9a:8c:c9:4d:7a:6f: 13:ac:90:a6:3c:7a:ea:cd:5e:e8:2f:e5:41:47:7e: a9:2c:be:ef:92:5f:b6:27:55:f9:3e:83:f8:6d:ea: 72:d7:92:25:4c:b2:62:a1:6c:8d:8b:14:de:0d:6e: e5:ee:16:12:f6:d8:8b:01:7c:b7:91:96:1e:6b:a3: da:9e:c4:51:34:96:93:18:f5:7f:90:0a:35:a7:e2: 46:aa:26:cb:1f:a7:51:55:8e:fb:66:24:09:07:39: 5b:d3:88:24:74:91:03:6b:40:83:7b:ea:1d:c3:83: 55:13:19:ae:57:c9:fe:ec:e1:87:a7:1e:88:9a:0c: 95:ef:80:86:cc:1e:e7:ef:0d:75:14:be:ad:c3:53: cc:17:66:27:31:0e:f2:c5:86:ce:0a:ce:ef:59:f3: 70:d3:44:fa:70:7f:a5:4c:5a:27:5f:3b:4c:62:c7: 22:34:4b:5e:0a:b4:d6:e4:85:96:a5:2a:48:f8:53: 35:2e:48:e1:e0:a7:45:a6:05:32:1f:d9:5f:f7:7c: ad:f7:f0:1c:21:02:ec:12:6d:c0:12:26:44:1c:87: d2:8e:04:be:fc:78:c6:f2:9a:94:5c:08:e9:eb:4a: d6:07:9c:d6:57:eb:90:6d:05:97:a4:30:40:bd:0e: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.180.0/22 45.81.176.0/22 77.78.145.0-77.78.147.255 77.78.150.0/24 79.98.104.0/21 109.121.134.0/23 185.52.204.0/22 185.55.228.0/22 185.188.228.0/22 185.199.36.0/22 185.228.24.0/22 185.239.124.0/22 194.24.189.0/24 194.145.63.0/24 195.64.160.0/23 195.189.80.0/22 IPv6: 2a01:b6a0::/32 2a02:80e0::/30 2a0a:95c0::/30 2a0c:5880::/29 2a0c:ea00::/29 2a0e:2f80::/30 2a0e:6280::/29 2a0f:c6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8860 43134 197216 Signature Algorithm: sha256WithRSAEncryption a2:59:f3:df:06:1d:7f:7e:9a:68:10:45:f1:7a:b9:32:43:39: 41:1a:4a:9e:ca:d7:86:70:bd:32:dd:4a:80:9e:8b:7f:dc:56: 60:44:77:4b:dc:42:8b:34:f1:fc:c1:6d:6c:70:68:ce:97:bf: 74:b0:75:0d:1d:e4:a2:24:1d:16:2f:24:2f:2f:b2:b6:4f:58: b5:30:86:95:2e:d2:b1:c7:4a:8c:3c:29:6b:30:fa:19:a3:91: dd:9d:bd:3f:32:2d:58:6e:14:4e:45:b4:54:64:80:6a:54:0e: c1:f8:bb:49:8f:c2:87:cf:29:ca:ea:93:09:18:45:3f:ab:1c: 01:f4:41:8b:9c:cb:66:49:4b:fa:54:e9:fa:47:ab:de:94:ed: 8d:1d:93:44:50:c2:20:c6:27:2e:27:11:50:04:88:b2:ea:af: ae:a8:5e:9f:14:76:63:bf:2b:ac:3b:f1:33:8f:87:b5:8e:07: aa:5a:50:9a:2e:cd:e0:a3:91:4e:3a:88:15:fa:00:b9:d3:48: 44:6c:02:03:e0:44:86:dd:d7:dd:8e:b5:0e:88:4a:71:8b:d8: 55:00:a2:7d:33:71:a1:8a:2e:25:ca:5e:8f:b7:64:4a:21:f9: c2:69:31:c0:ec:37:cd:00:bf:b8:fe:e0:b2:56:24:df:76:ea: c5:2d:2d:c4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgISAZt/hZGuC86+slzqrLMEHoXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDBhMTBhMjU2NzI4ZjExYTRiYmFhZGMzMjA0YjdmMGEzNWE1MDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QMQdPVwwKuajMlNem8TrJCmPHrq zV7oL+VBR36pLL7vkl+2J1X5PoP4bepy15IlTLJioWyNixTeDW7l7hYS9tiLAXy3 kZYea6PansRRNJaTGPV/kAo1p+JGqibLH6dRVY77ZiQJBzlb04gkdJEDa0CDe+od w4NVExmuV8n+7OGHpx6ImgyV74CGzB7n7w11FL6tw1PMF2YnMQ7yxYbOCs7vWfNw 00T6cH+lTFonXztMYsciNEteCrTW5IWWpSpI+FM1Lkjh4KdFpgUyH9lf93yt9/Ac IQLsEm3AEiZEHIfSjgS+/HjG8pqUXAjp60rWB5zWV+uQbQWXpDBAvQ7LXQIDAQAB o4IDTjCCA0owHQYDVR0OBBYEFJQKEKJWco8RpLuq3DIEt/CjWlAAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxL2ExYWU3 NS0yZDZiLTRjYzYtYWNlZi1kY2U2ZDY5MDkyNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvYTFhZTc1 LTJkNmItNGNjNi1hY2VmLWRjZTZkNjkwOTI0Ny8xL2xBb1FvbFp5anhHa3U2cmNN Z1MzOEtOYVVBQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHDBggrBgEF BQcBBwEB/wSBszCBsDBuBAIAATBoAwQCLQ+0AwQCLVGwMAwDBABNTpEDBAJNTpAD BABNTpYDBANPYmgDBAFteYYDBAK5NMwDBAK5N+QDBAK5vOQDBAK5xyQDBAK55BgD BAK573wDBADCGL0DBADCkT8DBAHDQKADBALDvVAwPgQCAAIwOAMFACoBtqADBQIq AoDgAwUCKgqVwAMFAyoMWIADBQMqDOoAAwUCKg4vgAMFAyoOYoADBQMqD8bAMCMG CCsGAQUFBwEIAQH/BBQwEqAQMA4CAiKcAgMAqH4CAwMCYDANBgkqhkiG9w0BAQsF AAOCAQEAolnz3wYdf36aaBBF8Xq5MkM5QRpKnsrXhnC9Mt1KgJ6Lf9xWYER3S9xC izTx/MFtbHBozpe/dLB1DR3koiQdFi8kLy+ytk9YtTCGlS7SscdKjDwpazD6GaOR 3Z29PzItWG4UTkW0VGSAalQOwfi7SY/Ch88pyuqTCRhFP6scAfRBi5zLZklL+lTp +ker3pTtjR2TRFDCIMYnLicRUASIsuqvrqhenxR2Y78rrDvxM4+HtY4HqlpQmi7N 4KORTjqIFfoAudNIRGwCA+BEht3X3Y61DohKcYvYVQCifTNxoYouJcpej7dkSiH5 wmkxwOw3zQC/uP7gslYk33bqxS0txA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:12 2026 by rpki-client