This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer File: lHjtPq1if84WxRgCUMRmIXMY1lw.cer (raw, json) Hash identifier: KCWu1KDn4XXZDv/bmeQzOMCAJqGiqf0RbFIy2Z4izpA= Subject key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC8A53E33C94D91E13B7FDB35E7C304 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25148 IP: 46.31.184.0/21 IP: 79.171.80.0/21 IP: 81.93.160.0/20 IP: 89.250.112.0/20 IP: 109.68.88.0/21 IP: 194.24.252.0/23 IP: 195.28.172.0/23 IP: 195.225.0.0/19 IP: 2a01:600::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a5:3e:33:c9:4d:91:e1:3b:7f:db:35:e7:c3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9478ed3ead627fce16c5180250c466217318d65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:7f:41:e4:52:36:83:35:d5:a7:6a:3f:51: 58:e2:e6:b4:41:a6:f1:9e:54:4a:b8:2e:30:51:43: 29:68:3e:ee:42:7d:25:d9:44:9a:ca:f1:1a:25:28: c3:47:3d:12:54:db:94:20:0b:7d:77:c3:dc:fb:5f: 46:a8:0b:ec:ed:46:96:8d:5d:90:3b:48:13:5f:ab: 96:43:35:f9:80:aa:bb:7b:25:2d:eb:1c:14:f8:44: 19:fb:8c:75:f1:c6:10:ca:e7:ba:22:d0:1f:52:18: 41:a6:18:b3:62:2a:50:6c:e4:71:2b:d9:3b:9c:aa: 79:65:a1:b1:6f:f2:b3:ff:10:26:93:94:34:f7:f2: 2c:fc:44:76:6f:87:b6:81:b8:d2:2a:29:28:44:64: d0:1d:97:17:74:0b:78:53:35:fe:f1:c4:7c:12:c8: 96:36:25:84:41:c6:fc:ba:9e:00:ad:0a:3b:ed:e6: 80:f4:8b:7b:b9:2a:f0:59:84:a2:6d:3b:54:1c:45: 24:b5:5a:17:1d:9a:01:64:27:94:f3:f8:f7:8f:66: 20:d3:06:b4:16:67:7e:50:35:0f:c9:50:37:a6:ac: fc:ff:dc:2f:d8:6a:54:33:c9:4d:96:df:02:95:29: 1f:65:d8:90:8c:ad:da:f1:b6:5d:df:ce:5b:f5:3f: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.184.0/21 79.171.80.0/21 81.93.160.0/20 89.250.112.0/20 109.68.88.0/21 194.24.252.0/23 195.28.172.0/23 195.225.0.0/19 IPv6: 2a01:600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25148 Signature Algorithm: sha256WithRSAEncryption 11:5b:af:3e:96:fc:5b:e2:26:75:5a:24:1a:97:3e:1e:71:9f: 8e:ea:11:d1:2f:6f:00:a1:c0:b8:d3:a2:ab:e4:56:55:69:51: 08:73:ad:28:8a:9c:a6:21:47:72:fc:af:22:32:ce:e2:86:ca: ca:0c:65:e8:a6:98:9c:37:f2:f1:b1:df:9e:78:2c:b1:8b:2f: e5:fc:d1:25:5c:24:38:5d:c6:a6:e7:08:20:e6:c0:9e:f8:5b: d1:9d:58:86:c3:52:bc:62:2f:45:be:5f:ea:5d:b0:e0:2b:d6: b8:2d:e5:47:c2:34:27:16:6e:76:b7:f7:7b:00:17:f9:b4:6e: 8b:cb:aa:4f:d1:39:0b:3c:2a:9c:a6:b7:41:ab:8d:c2:93:4b: eb:34:13:6f:29:4e:bc:20:64:d9:51:06:b9:ed:11:ed:3f:51: 72:5f:dc:8b:53:cc:e4:3f:36:79:43:1e:3b:6e:a0:21:2c:da: 60:6b:73:7e:36:d4:b1:d0:38:c6:47:04:31:f8:91:d0:e1:2e: 78:1f:10:a0:4a:29:0c:6b:f6:57:33:35:e6:19:6c:13:e7:86: fa:58:bc:59:f7:9b:73:4b:83:2a:ef:7a:d1:1e:5c:8e:9e:6f: 71:9b:5e:17:e1:16:5c:73:2b:9a:f8:9b:2c:4d:a3:9c:77:4e: 8d:94:c5:7e -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt9yKU+M8lNkeE7f9s158MEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDc4ZWQzZWFkNjI3ZmNlMTZjNTE4MDI1MGM0NjYyMTczMThkNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyl/QeRSNoM11adqP1FY4ua0Qabx nlRKuC4wUUMpaD7uQn0l2USayvEaJSjDRz0SVNuUIAt9d8Pc+19GqAvs7UaWjV2Q O0gTX6uWQzX5gKq7eyUt6xwU+EQZ+4x18cYQyue6ItAfUhhBphizYipQbORxK9k7 nKp5ZaGxb/Kz/xAmk5Q09/Is/ER2b4e2gbjSKikoRGTQHZcXdAt4UzX+8cR8EsiW NiWEQcb8up4ArQo77eaA9It7uSrwWYSibTtUHEUktVoXHZoBZCeU8/j3j2Yg0wa0 Fmd+UDUPyVA3pqz8/9wv2GpUM8lNlt8ClSkfZdiQjK3a8bZd385b9T9xSwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFJR47T6tYn/OFsUYAlDEZiFzGNZcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2U0YmUy My1iNTM2LTRlMzAtOWE1Yi01ZDVkMDJiYjcxOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvZTRiZTIz LWI1MzYtNGUzMC05YTViLTVkNWQwMmJiNzE5OS8xL2xIanRQcTFpZjg0V3hSZ0NV TVJtSVhNWTFsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQDLh+4AwQDT6tQAwQEUV2gAwQEWfpwAwQDbURY AwQBwhj8AwQBwxysAwQFw+EAMA0EAgACMAcDBQAqAQYAMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAmI8MA0GCSqGSIb3DQEBCwUAA4IBAQARW68+lvxb4iZ1WiQalz4e cZ+O6hHRL28AocC406Kr5FZVaVEIc60oipymIUdy/K8iMs7ihsrKDGXoppicN/Lx sd+eeCyxiy/l/NElXCQ4Xcam5wgg5sCe+FvRnViGw1K8Yi9Fvl/qXbDgK9a4LeVH wjQnFm52t/d7ABf5tG6Ly6pP0TkLPCqcprdBq43Ck0vrNBNvKU68IGTZUQa57RHt P1FyX9yLU8zkPzZ5Qx47bqAhLNpga3N+NtSx0DjGRwQx+JHQ4S54HxCgSikMa/ZX MzXmGWwT54b6WLxZ95tzS4Mq73rRHlyOnm9xm14X4RZccyua+JssTaOcd06NlMV+ -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:28 2026 by rpki-client