This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer File: lFtz335v4RAPHROgfBjVmvIoQow.cer (raw, json) Hash identifier: WJrhrKj2YajRGOxzsFAtM4qBYP9oxrSBlgiujhXcSdA= Subject key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF4A833284174F1A583C1306A5231 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61098 IP: 85.217.160.0/22 IP: 85.217.172.0/22 IP: 85.217.184.0/22 IP: 89.145.160.0/21 IP: 91.92.116.0/22 IP: 91.92.140.0/22 IP: 91.92.152.0/22 IP: 91.92.200.0/22 IP: 91.92.224.0/22 IP: 92.39.56.0/21 IP: 138.124.208.0/20 IP: 151.145.192.0/19 IP: 159.100.240.0/20 IP: 185.19.28.0/22 IP: 185.150.8.0/22 IP: 194.182.160.0/19 IP: 2a04:c40::/29 IP: 2a07:6cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:a8:33:28:41:74:f1:a5:83:c1:30:6a:52:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=945b73df7e6fe1100f1d13a07c18d59af228428c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:ec:55:d2:49:9b:ec:47:40:35:ef:28:01: 7d:20:70:2f:c1:10:e5:71:76:4d:3b:5b:ab:96:9f: 06:da:d4:4c:de:e1:cd:50:b7:e2:76:34:eb:2e:7e: 58:44:e0:a6:98:1b:50:e8:04:82:78:28:ab:05:4b: 38:51:e6:3b:a2:a5:05:a0:96:45:da:00:a5:0b:63: 88:99:98:52:cb:6b:c0:a6:9d:ff:be:3e:1c:19:0b: 79:9f:6f:38:31:cc:e7:54:9c:6b:4a:44:14:04:aa: 5e:e0:92:f9:c4:3f:39:be:50:f0:43:f9:56:66:8c: 00:65:fb:66:f2:20:ce:16:6a:c0:9f:dd:8a:76:d0: 20:be:48:29:7d:b4:fd:cf:a2:a2:28:d6:b6:d3:4c: aa:9f:a7:1f:d5:a7:40:89:b1:9a:56:e0:c4:89:ac: 4c:86:d9:a5:eb:a1:89:7a:00:a8:bb:92:b8:20:0e: d5:c3:85:3f:eb:eb:2d:2d:45:89:70:7a:df:1e:7a: c2:68:56:4a:38:ba:e0:63:61:7a:91:c7:b3:5e:0f: b2:0c:ed:bd:e2:e9:2f:cc:9a:e4:60:07:4a:bf:2e: 81:bf:7f:5c:21:b0:fc:d3:5f:bc:52:d7:b7:3a:9b: 78:74:e6:6a:c1:48:38:92:51:0f:3b:85:b4:2f:3f: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.160.0/22 85.217.172.0/22 85.217.184.0/22 89.145.160.0/21 91.92.116.0/22 91.92.140.0/22 91.92.152.0/22 91.92.200.0/22 91.92.224.0/22 92.39.56.0/21 138.124.208.0/20 151.145.192.0/19 159.100.240.0/20 185.19.28.0/22 185.150.8.0/22 194.182.160.0/19 IPv6: 2a04:c40::/29 2a07:6cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61098 Signature Algorithm: sha256WithRSAEncryption 9c:d4:8e:f8:76:0d:62:6c:54:b6:76:96:d5:b5:91:0e:25:10: bf:1f:28:45:a4:0a:a6:40:e9:fb:41:b5:a2:d0:af:1e:f0:bb: f8:d5:f9:8f:1a:48:88:aa:1f:fd:74:a0:7f:87:0c:24:8c:da: e0:d3:ad:31:0d:fd:2e:4a:cf:2d:39:22:11:16:0e:b2:eb:b6: bd:45:9f:d8:75:ab:d4:68:82:f2:ed:2c:70:06:db:c0:00:0a: 67:6e:73:20:67:0b:72:a6:17:41:d4:c9:9f:27:27:3c:ab:93: a4:33:ee:6a:cb:28:0b:c2:0e:6b:df:cd:fd:3e:55:79:10:6e: 11:d3:14:78:5f:51:79:4d:d8:11:9a:6b:7d:97:a2:d8:9d:19: 98:52:f1:fb:9c:fc:0a:2c:72:6a:9c:9e:1d:b3:dc:60:73:06: 5d:a6:ed:95:5c:47:ed:11:b7:d2:79:0e:bd:9f:53:e7:45:50: 60:9e:bb:94:64:ce:49:17:a0:a3:a2:0a:8e:70:10:2c:1e:a7: 07:13:6d:65:b3:16:7c:ca:26:ad:a1:3c:0b:96:c2:a3:d6:45: d0:40:9f:15:67:2f:09:29:77:65:3d:f9:fe:ef:81:6c:61:e0: e8:b7:91:99:db:fb:58:19:8f:ea:ca:9c:a3:34:ba:43:0c:c7: d5:50:a0:68 -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgISAZt5fvSoMyhBdPGlg8EwalIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDViNzNkZjdlNmZlMTEwMGYxZDEzYTA3YzE4ZDU5YWYyMjg0MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeDsVdJJm+xHQDXvKAF9IHAvwRDl cXZNO1urlp8G2tRM3uHNULfidjTrLn5YROCmmBtQ6ASCeCirBUs4UeY7oqUFoJZF 2gClC2OImZhSy2vApp3/vj4cGQt5n284McznVJxrSkQUBKpe4JL5xD85vlDwQ/lW ZowAZftm8iDOFmrAn92KdtAgvkgpfbT9z6KiKNa200yqn6cf1adAibGaVuDEiaxM html66GJegCou5K4IA7Vw4U/6+stLUWJcHrfHnrCaFZKOLrgY2F6kcezXg+yDO29 4ukvzJrkYAdKvy6Bv39cIbD801+8Ute3Opt4dOZqwUg4klEPO4W0Lz+dGQIDAQAB o4IDEjCCAw4wHQYDVR0OBBYEFJRbc99+b+EQDx0ToHwY1ZryKEKMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2VjNjE4 Zi05ZjYxLTQxODUtYmEwZC02ZTQ1MjQyNWExOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZWM2MThm LTlmNjEtNDE4NS1iYTBkLTZlNDUyNDI1YTE5My8xL2xGdHozMzV2NFJBUEhST2dm QmpWbXZJb1Fvdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGQBggrBgEF BQcBBwEB/wSBgDB+MGYEAgABMGADBAJV2aADBAJV2awDBAJV2bgDBANZkaADBAJb XHQDBAJbXIwDBAJbXJgDBAJbXMgDBAJbXOADBANcJzgDBASKfNADBAWXkcADBASf ZPADBAK5ExwDBAK5lggDBAXCtqAwFAQCAAIwDgMFAyoEDEADBQMqB2zAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDuqjANBgkqhkiG9w0BAQsFAAOCAQEAnNSO+HYN YmxUtnaW1bWRDiUQvx8oRaQKpkDp+0G1otCvHvC7+NX5jxpIiKof/XSgf4cMJIza 4NOtMQ39LkrPLTkiERYOsuu2vUWf2HWr1GiC8u0scAbbwAAKZ25zIGcLcqYXQdTJ nycnPKuTpDPuassoC8IOa9/N/T5VeRBuEdMUeF9ReU3YEZprfZei2J0ZmFLx+5z8 CixyapyeHbPcYHMGXabtlVxH7RG30nkOvZ9T50VQYJ67lGTOSRego6IKjnAQLB6n BxNtZbMWfMomraE8C5bCo9ZF0ECfFWcvCSl3ZT35/u+BbGHg6LeRmdv7WBmP6sqc ozS6QwzH1VCgaA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:46 2026 by rpki-client