This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer File: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer (raw, json) Hash identifier: 9FVy5P6C6XOIef8yIcm+gkUvrZTQJNPYMrxBUfVWwzE= Subject key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C800122C4A3331C87879174AABAD655 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59984 AS: 61981 IP: 185.53.4.0/22 IP: 185.63.104.0/22 IP: 2a01:bda0::/32 IP: 2a03:ca0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:01:22:c4:a3:33:1c:87:87:91:74:aa:ba:d6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94d161593da815cac58d3479652d048480d26713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:e4:5c:e9:06:d7:46:91:71:40:d7:67:06: c9:01:9b:e8:80:4b:eb:23:bf:a0:ee:d2:b4:85:19: aa:d4:07:4e:f6:17:c5:d6:51:f2:19:85:48:b9:c8: 2c:2f:c8:8f:59:70:99:e5:31:e3:e9:27:f1:38:74: 5a:14:38:52:2c:d3:bb:a3:0c:49:a8:7e:4d:d1:97: 5d:29:b4:97:30:5e:aa:8d:46:ca:e1:64:6b:ca:1e: f7:f0:e5:4d:22:02:5b:e9:f7:b3:c0:59:92:af:ef: e1:50:ff:61:ba:60:c7:a7:12:6a:99:c5:b4:dd:ce: bf:4b:94:d3:5c:cc:ff:25:fd:46:b5:87:dd:55:a0: 9e:4e:7d:5b:d6:68:3c:27:7c:6d:f4:93:9c:62:aa: 4e:a3:a9:0e:c8:25:91:2e:d7:d2:1e:42:58:bd:f7: 3f:64:59:47:75:11:7a:2a:58:00:6a:a5:22:49:e2: 73:b3:41:14:e5:11:6a:43:74:fa:51:2e:35:87:e1: 94:61:4f:fe:3e:f5:93:41:3b:20:7f:d3:96:70:91: 93:bd:75:04:23:de:15:37:25:06:f6:22:ba:06:2d: 89:b6:cb:17:f7:f1:71:29:94:f0:f1:46:ac:9d:46: 2b:ea:1e:7f:c6:05:b0:f9:0b:9a:6a:ff:a7:91:7c: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.4.0/22 185.63.104.0/22 IPv6: 2a01:bda0::/32 2a03:ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59984 61981 Signature Algorithm: sha256WithRSAEncryption 9c:48:80:d3:51:e9:dc:da:ad:dc:a9:84:c3:5f:42:cd:ce:66: f9:17:27:ef:6c:fb:a3:c1:95:37:d6:61:73:37:a0:4f:bf:40: 4b:4b:25:08:b5:79:76:9f:92:1e:e9:61:c6:36:47:78:b5:d9: 22:0b:f2:b3:3f:f3:70:06:8e:5f:7e:22:88:83:bd:52:26:fc: fc:ca:e0:b4:2a:4d:82:eb:49:ca:de:3c:70:1d:87:19:fc:18: fa:c7:58:fa:17:37:46:ff:f4:08:ce:eb:c2:57:d7:86:53:fa: cb:0c:32:d1:d0:68:c8:59:9f:8e:f5:ed:26:cf:67:28:8d:46: 91:62:2f:ac:a9:d4:a1:27:7d:62:17:39:23:4f:b1:c4:3a:1a: e9:9e:62:33:ba:dc:4c:90:70:b3:92:c8:7a:e8:d6:94:88:7b: ea:8b:69:31:1f:ff:90:ec:28:87:6f:da:5b:8b:75:2c:9a:13: 20:fa:61:87:a2:98:a1:17:91:6d:b8:bf:9b:7c:fb:cc:2e:60: b2:f9:ba:c9:3b:6b:e0:8b:b7:75:80:d7:0f:57:bf:7a:ca:04: 2d:52:35:8b:c6:5d:64:01:17:f5:d7:7c:09:f2:1b:6e:f8:0e: 14:0f:62:6d:62:60:bc:cc:fc:cd:4e:6b:0f:10:0a:03:6e:0f: 41:6d:26:02 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt8gAEixKMzHIeHkXSqutZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGQxNjE1OTNkYTgxNWNhYzU4ZDM0Nzk2NTJkMDQ4NDgwZDI2NzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDPkXOkG10aRcUDXZwbJAZvogEvr I7+g7tK0hRmq1AdO9hfF1lHyGYVIucgsL8iPWXCZ5THj6SfxOHRaFDhSLNO7owxJ qH5N0ZddKbSXMF6qjUbK4WRryh738OVNIgJb6fezwFmSr+/hUP9humDHpxJqmcW0 3c6/S5TTXMz/Jf1GtYfdVaCeTn1b1mg8J3xt9JOcYqpOo6kOyCWRLtfSHkJYvfc/ ZFlHdRF6KlgAaqUiSeJzs0EU5RFqQ3T6US41h+GUYU/+PvWTQTsgf9OWcJGTvXUE I94VNyUG9iK6Bi2JtssX9/FxKZTw8UasnUYr6h5/xgWw+Quaav+nkXxvmQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFJTRYVk9qBXKxY00eWUtBISA0mcTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzNjMjk1 Ni1kZjlkLTQwNDgtYjAxMS1kOGU5OGI4NWFlYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvM2MyOTU2 LWRmOWQtNDA0OC1iMDExLWQ4ZTk4Yjg1YWVhNC8xL2xORmhXVDJvRmNyRmpUUjVa UzBFaElEU1p4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuTUEAwQCuT9oMBQEAgACMA4DBQAqAb2gAwUA KgMMoDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA6lACAwDyHTANBgkqhkiG9w0B AQsFAAOCAQEAnEiA01Hp3Nqt3KmEw19Czc5m+Rcn72z7o8GVN9ZhczegT79AS0sl CLV5dp+SHulhxjZHeLXZIgvysz/zcAaOX34iiIO9Uib8/MrgtCpNgutJyt48cB2H GfwY+sdY+hc3Rv/0CM7rwlfXhlP6ywwy0dBoyFmfjvXtJs9nKI1GkWIvrKnUoSd9 Yhc5I0+xxDoa6Z5iM7rcTJBws5LIeujWlIh76otpMR//kOwoh2/aW4t1LJoTIPph h6KYoReRbbi/m3z7zC5gsvm6yTtr4Iu3dYDXD1e/esoELVI1i8ZdZAEX9dd8CfIb bvgOFA9ibWJgvMz8zU5rDxAKA24PQW0mAg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:11 2026 by rpki-client