This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer (raw, json) Hash identifier: ZmR61Su1YOJ6qn03enMCzDjypMaUb5Bb81yKY9SRU4w= Subject key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5639FB67FAE27BA9B602364945E08 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215639 IP: 45.10.36.0/24 IP: 89.37.142.0/24 IP: 94.126.112.0/21 IP: 195.80.152.0/21 IP: 2a13:1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:63:9f:b6:7f:ae:27:ba:9b:60:23:64:94:5e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:27:eb:76:af:e5:a0:89:a2:36:27:d2:b0: 04:d5:89:80:83:d0:22:03:c4:df:db:93:0d:81:03: a7:76:45:ef:9e:d3:28:11:c6:c3:72:19:4e:f7:ff: 36:5f:db:5a:d4:2e:4d:45:d3:37:c3:88:39:2d:2e: 55:ca:8e:67:18:66:34:41:05:d8:b8:4c:01:fd:a0: 21:3f:f7:2a:ab:1c:38:f8:fd:bf:39:64:a8:35:5b: a6:af:ee:34:96:ff:4f:ec:c3:38:f5:ee:af:27:96: 71:65:cc:88:64:c4:3e:79:1c:bf:77:01:7d:0e:77: ed:70:d4:d0:5b:77:80:0b:d6:da:9d:98:84:97:27: 16:d4:38:8f:64:f2:ad:3f:ee:e6:1e:bf:1e:c3:c4: 0e:3f:51:fc:96:48:cb:96:70:99:5d:a2:a7:10:9f: 32:b2:25:75:e7:98:44:58:c1:06:5e:2d:8c:43:07: 7a:1f:5a:92:7e:75:2b:80:02:a6:d5:bf:f8:75:4b: 78:d6:68:17:6d:bc:4e:7f:c6:3e:79:a6:24:92:e4: 62:b2:a9:bc:70:10:de:9b:bd:00:4e:a7:ca:3b:52: 70:61:c2:80:e0:66:95:cc:c6:d5:2a:cf:35:87:d1: 50:bd:eb:74:62:f1:6a:4a:f5:3a:ea:cf:e2:17:40: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.36.0/24 89.37.142.0/24 94.126.112.0/21 195.80.152.0/21 IPv6: 2a13:1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215639 Signature Algorithm: sha256WithRSAEncryption 4c:a6:37:cd:46:c8:18:c5:8f:51:8a:4e:45:98:0a:cd:ca:8d: 60:2d:59:e1:c1:1b:fc:4a:20:4e:a0:63:01:c1:96:37:0f:bd: 2d:4d:5f:72:cf:8a:c8:8b:da:ac:84:06:f2:59:f4:69:59:79: 76:b3:9e:df:51:b8:5f:4c:1e:13:33:1a:d6:12:4d:dd:37:ed: a8:7e:f4:99:c5:fc:a2:32:81:56:ef:70:88:0a:67:c1:14:db: b6:7f:18:de:8d:af:ca:0b:4a:03:34:6b:2e:90:b7:df:1d:39: 6a:70:16:1c:e4:6b:8a:7c:bb:29:b1:f2:9e:77:59:68:18:b1: b4:58:2a:62:27:b8:62:39:7a:d3:9f:d5:c0:bd:c1:d4:1c:a3: 44:a9:20:be:10:98:05:4c:f1:b6:7a:3f:02:5b:ca:37:8d:e6: 56:bb:7d:73:e1:79:67:9f:b0:84:41:d3:c7:2f:43:af:68:6f: fd:12:b5:18:5c:13:f3:a7:da:e2:c1:de:bc:a7:8d:07:80:c5: d4:06:7d:bb:21:63:1d:22:d0:ad:d2:40:46:cc:3b:60:76:61: d8:27:f2:fc:d7:61:d5:00:c8:b5:ce:5e:37:07:b9:c7:9c:e8: 0e:f8:16:92:ac:c7:0b:f8:ec:5b:f7:23:d2:0d:9e:94:f5:e2: 3d:6d:05:82 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+pWOftn+uJ7qbYCNklF4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGY1MTljNGVjZjE1ZjVmYzFlMDZlYWE2ZTAzZjljYjAzOTU2Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcYn63av5aCJojYn0rAE1YmAg9Ai A8Tf25MNgQOndkXvntMoEcbDchlO9/82X9ta1C5NRdM3w4g5LS5Vyo5nGGY0QQXY uEwB/aAhP/cqqxw4+P2/OWSoNVumr+40lv9P7MM49e6vJ5ZxZcyIZMQ+eRy/dwF9 DnftcNTQW3eAC9banZiElycW1DiPZPKtP+7mHr8ew8QOP1H8lkjLlnCZXaKnEJ8y siV155hEWMEGXi2MQwd6H1qSfnUrgAKm1b/4dUt41mgXbbxOf8Y+eaYkkuRisqm8 cBDem70ATqfKO1JwYcKA4GaVzMbVKs81h9FQvet0YvFqSvU66s/iF0AznQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFJT1GcTs8V9fweBuqm4D+csDlWyqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzEwODk2 Ny02ODZhLTQzMjItODViMy01MTZlYWM0NjkwNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMTA4OTY3 LTY4NmEtNDMyMi04NWIzLTUxNmVhYzQ2OTA1My8xL2xQVVp4T3p4WDFfQjRHNnFi Z1A1eXdPVmJLby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQALQokAwQAWSWOAwQDXn5wAwQDw1CYMA0EAgAC MAcDBQMqEwHAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKVzANBgkqhkiG9w0B AQsFAAOCAQEATKY3zUbIGMWPUYpORZgKzcqNYC1Z4cEb/EogTqBjAcGWNw+9LU1f cs+KyIvarIQG8ln0aVl5drOe31G4X0weEzMa1hJN3TftqH70mcX8ojKBVu9wiApn wRTbtn8Y3o2vygtKAzRrLpC33x05anAWHORriny7KbHynndZaBixtFgqYie4Yjl6 05/VwL3B1ByjRKkgvhCYBUzxtno/AlvKN43mVrt9c+F5Z5+whEHTxy9Dr2hv/RK1 GFwT86fa4sHevKeNB4DF1AZ9uyFjHSLQrdJARsw7YHZh2Cfy/Ndh1QDItc5eNwe5 x5zoDvgWkqzHC/jsW/cj0g2elPXiPW0Fgg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:26 2026 by rpki-client