This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer File: lPhZ34Ux35GpQAj0tJIKQSPrDws.cer (raw, json) Hash identifier: iX+uDxqmUVC4xGVYCTEfc2lhD8xRRMnGpmRnIMQW1Sw= Subject key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB50D79D750849EFE8F216264F5D6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50525 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:50:d7:9d:75:08:49:ef:e8:f2:16:26:4f:5d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94f859df8531df91a94008f4b4920a4123eb0f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:eb:fa:9c:c4:24:9c:a8:c3:4f:03:94:ef: 1b:1c:47:74:48:e4:3c:c2:4e:74:68:b6:0f:7c:a8: 50:d9:f2:63:bf:36:19:12:15:c4:62:06:e1:36:d8: fb:3c:3e:22:8f:05:63:78:50:4f:cf:60:16:99:27: ea:bd:06:7f:b0:c4:ac:4f:df:71:f3:fd:26:d9:a0: 97:53:94:8e:cb:cd:1d:fc:84:42:e1:cd:dc:44:c6: 68:7d:76:7f:03:36:b0:d7:c9:2b:3d:6a:d4:3c:dd: 83:82:31:4e:93:75:d3:c8:d0:01:44:b0:37:3b:96: f3:2e:95:ae:3d:6a:5f:af:f8:60:0f:63:8e:b7:64: 30:10:60:b9:23:13:33:95:e7:00:93:12:ad:22:2b: 30:f1:b6:be:fc:68:d7:77:6c:bc:9f:bc:6f:40:7c: 0b:8c:23:ef:15:04:a3:d5:03:b7:4a:cc:a2:8d:62: 28:5b:9f:05:43:dc:ec:ae:61:6d:4a:8d:72:8b:87: d6:ac:2f:1b:83:8e:79:c6:60:34:cf:6b:20:c9:8e: 51:8b:f0:dc:83:a1:7b:56:0b:09:81:67:cc:3c:ff: 72:59:2b:7f:86:9f:4a:bd:c1:21:6f:97:0d:db:d3: 43:38:9d:ec:7e:1b:dd:72:7e:23:8c:ae:0c:f7:80: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50525 Signature Algorithm: sha256WithRSAEncryption 0b:b8:6e:a2:0c:8e:89:e7:fe:20:bb:87:54:50:99:0d:87:62: b7:59:58:eb:d2:0f:c5:cd:cd:97:fe:da:9c:f4:08:81:9c:97: 19:d0:e9:08:9a:4e:a1:99:5d:a6:70:5c:96:b6:86:0e:fd:5d: 92:fa:d3:e1:2f:ea:ca:19:bf:be:1f:3d:69:fc:ae:72:58:f8: 49:22:97:e2:0d:4a:6c:62:12:c0:f6:02:e3:9b:e4:41:67:3d: f9:fd:c4:e8:9d:1d:07:71:8a:bf:d6:14:89:0a:29:d1:77:60: 49:41:f2:ae:9d:a5:19:5f:c5:c6:93:6c:0a:f5:90:a2:eb:ac: 5e:4d:60:c6:49:70:79:16:79:92:1e:7e:5a:a6:c0:b5:6c:fb: 12:99:cf:82:65:8f:5d:0f:7a:38:66:07:38:1c:8f:50:d9:ff: 76:7a:84:9a:aa:1f:c3:c4:ce:83:b8:37:78:73:5f:3d:24:3b: 10:70:62:d8:42:a6:8a:7a:d2:94:e0:71:96:d1:b5:23:b6:29: 04:8a:5e:33:29:a4:45:67:92:37:11:9c:b8:01:d1:1f:67:88: c9:6a:3d:48:b0:5a:90:8b:7b:4f:ab:b0:1c:5d:20:89:06:bd: 0d:7a:2b:f4:17:d3:a9:40:d9:20:eb:a6:50:93:15:a1:c7:af: 9f:4d:9e:96 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt261DXnXUISe/o8hYmT11rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGY4NTlkZjg1MzFkZjkxYTk0MDA4ZjRiNDkyMGE0MTIzZWIwZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRHr+pzEJJyow08DlO8bHEd0SOQ8 wk50aLYPfKhQ2fJjvzYZEhXEYgbhNtj7PD4ijwVjeFBPz2AWmSfqvQZ/sMSsT99x 8/0m2aCXU5SOy80d/IRC4c3cRMZofXZ/Azaw18krPWrUPN2DgjFOk3XTyNABRLA3 O5bzLpWuPWpfr/hgD2OOt2QwEGC5IxMzlecAkxKtIisw8ba+/GjXd2y8n7xvQHwL jCPvFQSj1QO3SsyijWIoW58FQ9zsrmFtSo1yi4fWrC8bg455xmA0z2sgyY5Ri/Dc g6F7VgsJgWfMPP9yWSt/hp9KvcEhb5cN29NDOJ3sfhvdcn4jjK4M94Aw4wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJT4Wd+FMd+RqUAI9LSSCkEj6w8LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2RjOTIy NC0zY2Q3LTQzN2QtYTFkYy1lOGMzOWNmNjZiM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvZGM5MjI0 LTNjZDctNDM3ZC1hMWRjLWU4YzM5Y2Y2NmIzZi8xL2xQaFozNFV4MzVHcFFBajB0 SklLUVNQckR3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDFXTANBgkqhkiG9w0BAQsFAAOCAQEAC7huogyOief+ ILuHVFCZDYdit1lY69IPxc3Nl/7anPQIgZyXGdDpCJpOoZldpnBclraGDv1dkvrT 4S/qyhm/vh89afyuclj4SSKX4g1KbGISwPYC45vkQWc9+f3E6J0dB3GKv9YUiQop 0XdgSUHyrp2lGV/FxpNsCvWQouusXk1gxklweRZ5kh5+WqbAtWz7EpnPgmWPXQ96 OGYHOByPUNn/dnqEmqofw8TOg7g3eHNfPSQ7EHBi2EKminrSlOBxltG1I7YpBIpe MymkRWeSNxGcuAHRH2eIyWo9SLBakIt7T6uwHF0giQa9DXor9BfTqUDZIOumUJMV ocevn02elg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:13 2026 by rpki-client