This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer (raw, json) Hash identifier: FrPCnnldN52fCOjjzDz0n7IVkA27I4Fl6Hi4Yvf4ZW8= Subject key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7F51E62CD3B9FD4DC75D8CD4999E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50086 IP: 109.94.240.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f5:1e:62:cd:3b:9f:d4:dc:75:d8:cd:49:99:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94472e859957355da5ddd13496d70d70773491f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:82:fa:5c:01:02:1b:10:75:e6:c5:b7:bd: 1d:95:0d:53:08:f5:d8:9f:ec:01:b4:06:a1:3c:4e: 33:d9:82:5c:42:98:3f:cd:40:c3:3e:ba:5b:50:a3: d7:05:0d:6c:ae:b0:41:c1:59:29:49:fd:da:12:4a: 2f:5b:46:35:cf:f7:80:3c:ef:bb:55:58:71:86:9e: d3:7a:e8:c0:67:9a:48:e9:16:91:02:ea:9c:ae:0f: d2:86:96:90:34:24:0b:23:5e:22:1c:50:fc:8f:54: 3a:37:7b:a7:d0:44:34:30:d8:60:63:ec:b7:5f:06: 85:62:f7:80:71:cb:9b:85:e5:46:a8:37:c2:b0:ce: d3:01:be:1f:90:74:1f:c6:33:84:96:c4:c3:e2:98: 77:1b:78:b7:16:d6:c4:67:9d:4c:9c:44:aa:a8:73: b3:68:ae:29:69:b6:61:ab:b4:aa:d8:f2:41:9a:b3: 28:1a:70:3c:b8:d8:84:63:ff:c1:3e:c9:fb:d7:3d: 46:0e:b6:59:c7:da:59:0d:9a:3e:8c:e3:b9:2f:98: e8:10:27:b8:94:a0:75:71:d8:cd:c4:ef:ef:8c:b2: cc:88:b5:7a:63:f1:2d:a5:a4:06:b2:48:d7:9a:91: 13:1b:33:93:4c:f4:9b:6f:24:87:f9:85:3c:50:02: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.94.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50086 Signature Algorithm: sha256WithRSAEncryption 78:4f:a4:74:44:40:89:9a:04:4c:3c:0d:2c:2d:e0:e8:fe:28: 27:cd:c3:75:d2:cf:3e:7a:60:2a:4a:8b:7d:37:b7:cb:09:67: 77:b0:d8:8e:cd:c0:62:a4:d1:ff:f4:3e:72:ea:5b:ec:50:7e: e6:32:b3:a2:4e:0e:0b:e8:7f:bf:7e:b5:6a:c3:d8:ac:73:56: 3b:59:2c:39:ee:e2:9d:99:b0:12:87:5a:e0:13:b0:55:63:bd: f8:ec:c6:44:a5:db:09:31:50:36:e0:08:7e:cc:32:ba:54:46: 4d:a9:d2:67:55:75:fb:49:18:cf:e6:15:ec:35:b6:40:a4:bf: e5:df:de:48:ba:c9:44:59:2e:62:c1:fc:48:35:e8:aa:89:e8: 3c:b7:49:92:6b:03:16:6e:43:ef:f6:49:c2:77:a8:be:5d:72: 9d:b3:9b:f0:af:78:cc:89:36:83:47:48:8d:fe:7d:3b:2f:d3: d8:4f:6f:b3:2c:52:d2:8f:76:26:89:68:86:eb:17:5c:6e:fe: b9:ee:eb:f4:72:07:99:4f:66:8d:09:f7:09:18:4d:ea:57:4d: de:c2:8a:23:98:ac:e8:f8:04:4f:00:e2:9c:02:c0:4a:6e:6d: 20:f2:aa:96:d8:d0:b7:87:2d:80:41:20:c2:fb:dc:12:7d:1b: 82:82:f0:fa -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x/UeYs07n9TcddjNSZnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQ3MmU4NTk5NTczNTVkYTVkZGQxMzQ5NmQ3MGQ3MDc3MzQ5MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HOC+lwBAhsQdebFt70dlQ1TCPXY n+wBtAahPE4z2YJcQpg/zUDDPrpbUKPXBQ1srrBBwVkpSf3aEkovW0Y1z/eAPO+7 VVhxhp7TeujAZ5pI6RaRAuqcrg/ShpaQNCQLI14iHFD8j1Q6N3un0EQ0MNhgY+y3 XwaFYveAccubheVGqDfCsM7TAb4fkHQfxjOElsTD4ph3G3i3FtbEZ51MnESqqHOz aK4pabZhq7Sq2PJBmrMoGnA8uNiEY//BPsn71z1GDrZZx9pZDZo+jOO5L5joECe4 lKB1cdjNxO/vjLLMiLV6Y/EtpaQGskjXmpETGzOTTPSbbySH+YU8UAIs1QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJRHLoWZVzVdpd3RNJbXDXB3NJH5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2Q2YzE4 YS01NWVmLTQxMTgtOTcwYy02MGQxZWQ4MGM3Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvZDZjMThh LTU1ZWYtNDExOC05NzBjLTYwZDFlZDgwYzdjZi8xL2xFY3VoWmxYTlYybDNkRTBs dGNOY0hjMGtmay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEbV7wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDDpjANBgkqhkiG9w0BAQsFAAOCAQEAeE+kdERAiZoETDwNLC3g6P4oJ83DddLP PnpgKkqLfTe3ywlnd7DYjs3AYqTR//Q+cupb7FB+5jKzok4OC+h/v361asPYrHNW O1ksOe7inZmwEoda4BOwVWO9+OzGRKXbCTFQNuAIfswyulRGTanSZ1V1+0kYz+YV 7DW2QKS/5d/eSLrJRFkuYsH8SDXoqonoPLdJkmsDFm5D7/ZJwneovl1ynbOb8K94 zIk2g0dIjf59Oy/T2E9vsyxS0o92JolohusXXG7+ue7r9HIHmU9mjQn3CRhN6ldN 3sKKI5is6PgETwDinALASm5tIPKqltjQt4ctgEEgwvvcEn0bgoLw+g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:36 2026 by rpki-client