This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer File: lQ8oTPXDnybd0jUufyrfeo3GD44.cer (raw, json) Hash identifier: Uq41HDkc0M4peC/9LLmsVlb80OdRNsZ+h0yH+duvZFU= Subject key identifier: 95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77590598A7938EA85BB778B015DC5D00 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60215 IP: 91.212.24.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:05:98:a7:93:8e:a8:5b:b7:78:b0:15:dc:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:46:c5:12:13:08:74:80:a6:74:7e:3c:0d: 73:6f:e7:9d:98:0c:57:a9:68:50:04:91:f3:a4:6a: 1a:21:b3:14:39:d4:55:2f:9c:9e:81:cd:f6:85:14: 02:2e:7e:7c:5d:50:6d:96:65:5a:b3:6f:d4:5a:0f: 13:01:c9:37:6b:0c:09:6f:52:8f:19:48:5c:18:eb: 76:50:c2:19:7b:f1:f8:31:25:29:c7:f0:9f:ab:62: a1:63:07:b6:ce:7a:bb:a3:11:6c:17:28:1d:ce:b9: 0b:b4:2b:f7:f9:7b:12:2b:8e:de:da:45:94:3a:b7: cd:1a:b7:33:6f:f9:09:18:2e:6a:d9:d0:f4:c3:6e: 98:95:20:5c:71:43:ce:78:30:12:35:d5:29:3f:3a: d0:00:95:37:28:b2:80:24:82:3c:c2:42:9d:3c:c9: 82:bd:fd:d2:5a:65:11:6c:22:a5:29:88:70:fa:33: 20:00:7c:95:cb:4b:98:98:e3:ac:02:63:3b:cf:84: 6e:6a:0d:26:59:d2:02:a8:78:a1:8d:9f:5c:59:03: 62:6e:57:f0:61:10:e9:2e:b2:df:f3:fe:27:0e:e1: 0d:24:a9:e6:b2:49:c0:be:a6:25:2a:26:bb:ac:ae: 4b:1d:99:30:34:01:d6:27:f0:0d:ca:8d:05:d4:05: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.24.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60215 Signature Algorithm: sha256WithRSAEncryption af:69:6b:a3:eb:fa:6d:42:17:ba:d9:a9:19:69:04:73:91:3a: 4a:ba:aa:4b:3f:e0:52:98:29:0a:81:05:dd:d3:4d:cd:04:aa: 6b:c6:f4:45:67:5d:92:bd:b0:2b:a5:7e:d5:82:36:9c:f8:26: 76:60:4d:71:07:17:58:77:a2:f6:9b:5f:49:65:4d:62:c9:05: 05:0a:49:81:af:6c:82:a4:53:f8:24:86:e9:89:ff:b7:31:24: 08:e6:6e:9f:1b:5b:6b:0d:f6:44:fc:20:0e:71:a0:b9:96:6c: 0a:ca:78:b2:bc:72:71:ec:22:6c:43:b0:92:25:60:7b:49:0d: aa:51:4d:ef:ef:9b:09:53:8c:30:65:b7:be:0d:9d:d7:57:8d: 96:04:47:05:ed:9c:67:6a:0c:86:e4:18:ce:5b:9d:23:f1:e8: c8:ad:8b:1b:1a:81:8c:05:0d:b2:12:3e:f6:6b:59:6b:68:f2: c3:86:b8:99:f0:3d:bd:bd:33:ea:36:cc:e6:ad:6f:1b:ea:03: 92:00:ad:cf:c0:f7:75:3d:01:f2:69:30:46:ad:ef:56:74:27: 5c:77:18:9d:e5:cd:f8:40:51:b3:e8:0f:e4:80:f7:ee:dd:ac: 5b:b6:1b:c2:f4:89:e4:c8:ed:c6:3f:0b:47:1c:4d:31:f5:33: 6a:d6:0e:ce -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WQWYp5OOqFu3eLAV3F0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTBmMjg0Y2Y1YzM5ZjI2ZGRkMjM1MmU3ZjJhZGY3YThkYzYwZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/9GxRITCHSApnR+PA1zb+edmAxX qWhQBJHzpGoaIbMUOdRVL5yegc32hRQCLn58XVBtlmVas2/UWg8TAck3awwJb1KP GUhcGOt2UMIZe/H4MSUpx/Cfq2KhYwe2znq7oxFsFygdzrkLtCv3+XsSK47e2kWU OrfNGrczb/kJGC5q2dD0w26YlSBccUPOeDASNdUpPzrQAJU3KLKAJII8wkKdPMmC vf3SWmURbCKlKYhw+jMgAHyVy0uYmOOsAmM7z4Ruag0mWdICqHihjZ9cWQNiblfw YRDpLrLf8/4nDuENJKnmsknAvqYlKia7rK5LHZkwNAHWJ/ANyo0F1AUXjwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJUPKEz1w58m3dI1Ln8q33qNxg+OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzE5NzRl ZS00MDhmLTQxMjAtOGYxOS1mYTJmMGQ1NGIxZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvMTk3NGVl LTQwOGYtNDEyMC04ZjE5LWZhMmYwZDU0YjFkMS8xL2xROG9UUFhEbnliZDBqVXVm eXJmZW8zR0Q0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9QYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDrNzANBgkqhkiG9w0BAQsFAAOCAQEAr2lro+v6bUIXutmpGWkEc5E6SrqqSz/g UpgpCoEF3dNNzQSqa8b0RWddkr2wK6V+1YI2nPgmdmBNcQcXWHei9ptfSWVNYskF BQpJga9sgqRT+CSG6Yn/tzEkCOZunxtbaw32RPwgDnGguZZsCsp4srxycewibEOw kiVge0kNqlFN7++bCVOMMGW3vg2d11eNlgRHBe2cZ2oMhuQYzludI/HoyK2LGxqB jAUNshI+9mtZa2jyw4a4mfA9vb0z6jbM5q1vG+oDkgCtz8D3dT0B8mkwRq3vVnQn XHcYneXN+EBRs+gP5ID37t2sW7YbwvSJ5Mjtxj8LRxxNMfUzatYOzg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:07 2026 by rpki-client