This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lRA3CHxvfGzzPIDGzNS_RdjpPDg.cer File: lRA3CHxvfGzzPIDGzNS_RdjpPDg.cer (raw, json) Hash identifier: OR4NmvoqgrJFJAECy2XEs+CqwVymio9n06KfYNpJeD4= Subject key identifier: 95:10:37:08:7C:6F:7C:6C:F3:3C:80:C6:CC:D4:BF:45:D8:E9:3C:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C3176F946D69583E95A4139F0A2FCF7AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 05:40:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202446 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:31:76:f9:46:d6:95:83:e9:5a:41:39:f0:a2:fc:f7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 05:40:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=951037087c6f7c6cf33c80c6ccd4bf45d8e93c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:f8:7f:c7:39:f6:d3:b0:21:52:09:dc:a8: 96:60:60:16:30:4a:07:3f:6d:c6:49:28:c7:e2:fe: 1a:19:21:d2:9e:fa:44:10:ef:57:3a:93:89:66:4c: 4d:0f:1e:35:bd:1f:33:8a:4c:3f:b4:1a:ff:3d:b5: 4c:94:b7:a5:84:fb:dc:bd:e3:08:03:e4:2d:dd:89: 18:60:f3:6e:e8:44:a4:d3:06:6c:74:06:29:0b:a4: 9c:a9:ca:a9:1c:3e:9b:e3:56:4c:f7:15:fc:8c:2f: 41:cd:a9:34:9e:4f:6a:d1:1c:08:1e:f3:e9:6a:57: ed:fb:e2:5e:c0:10:fb:28:ec:8e:81:63:82:32:db: 1c:29:14:15:9a:32:a0:c7:ff:64:03:85:38:2b:ac: ac:9e:82:d5:3a:6b:74:45:02:0a:70:ee:06:fe:b7: 51:3c:d7:1f:ef:11:b0:1c:90:85:87:09:b3:0f:5b: a7:56:04:d7:71:e9:6e:ae:5a:d9:6a:a5:2e:2e:65: 5c:ee:17:9c:45:ea:fc:2c:df:6c:e2:61:c1:10:36: c1:2b:09:d3:d3:12:5d:01:ef:81:c0:80:df:ce:e8: 23:5b:86:66:e6:91:15:82:fb:dc:ff:79:bd:98:cc: db:13:f4:42:e2:86:cf:97:f0:1e:45:f1:84:b4:84: 76:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:10:37:08:7C:6F:7C:6C:F3:3C:80:C6:CC:D4:BF:45:D8:E9:3C:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202446 Signature Algorithm: sha256WithRSAEncryption 8a:2e:7b:57:2e:22:aa:58:a0:28:95:82:8d:9d:9f:e0:44:a7: 97:0c:7b:57:6d:22:67:5b:a6:ee:03:63:2f:86:fa:e8:12:15: 08:c0:2d:8d:75:0b:6a:c1:e3:58:4d:bf:26:e2:ad:f6:a3:54: 07:1a:d4:db:af:1a:95:1f:61:58:c1:8d:22:65:07:bd:c0:a4: 7d:a9:a8:e3:e4:f1:62:27:3b:3f:35:59:27:93:d2:44:d5:76: 2c:cc:fe:fd:75:53:a2:c9:78:64:94:90:27:d4:2d:ce:c1:e3: 63:38:05:a1:77:e5:2f:09:e9:07:42:73:dd:05:d7:c6:94:93: 26:54:ba:0e:b3:75:f4:28:f3:61:8e:e9:3e:8a:9f:0c:12:fc: 35:9e:19:3d:40:9d:67:26:6a:e4:9d:30:07:af:79:b3:b3:8b: d8:ca:26:ae:03:aa:b3:19:1a:b3:34:04:8a:67:a9:17:d3:b7: f0:51:f1:df:ca:83:e8:90:12:ed:b8:89:3b:d4:68:9a:68:b3: 6b:b4:5a:07:6e:50:fe:ce:83:f9:38:0f:73:6c:26:5c:99:2b: 5c:47:a7:36:7a:ac:de:e2:fe:ec:00:99:98:21:98:3c:63:92: 8b:13:ea:32:d3:29:80:79:68:91:38:51:3a:90:69:5c:8a:26: 48:7b:14:11 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZwxdvlG1pWD6VpBOfCi/PeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MDU0MDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTEwMzcwODdjNmY3YzZjZjMzYzgwYzZjY2Q0YmY0NWQ4ZTkzYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7j4f8c59tOwIVIJ3KiWYGAWMEoH P23GSSjH4v4aGSHSnvpEEO9XOpOJZkxNDx41vR8zikw/tBr/PbVMlLelhPvcveMI A+Qt3YkYYPNu6ESk0wZsdAYpC6ScqcqpHD6b41ZM9xX8jC9Bzak0nk9q0RwIHvPp alft++JewBD7KOyOgWOCMtscKRQVmjKgx/9kA4U4K6ysnoLVOmt0RQIKcO4G/rdR PNcf7xGwHJCFhwmzD1unVgTXcelurlrZaqUuLmVc7hecRer8LN9s4mHBEDbBKwnT 0xJdAe+BwIDfzugjW4Zm5pEVgvvc/3m9mMzbE/RC4obPl/AeRfGEtIR2nQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJUQNwh8b3xs8zyAxszUv0XY6Tw4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzJhNjdh Zi04OTNkLTRhMTYtOWI1ZC1kMzY5ZGUzMDEyM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMmE2N2Fm LTg5M2QtNGExNi05YjVkLWQzNjlkZTMwMTIzZC8xL2xSQTNDSHh2Zkd6elBJREd6 TlNfUmRqcFBEZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWzjANBgkqhkiG9w0BAQsFAAOCAQEAii57Vy4iqlig KJWCjZ2f4ESnlwx7V20iZ1um7gNjL4b66BIVCMAtjXULasHjWE2/JuKt9qNUBxrU 268alR9hWMGNImUHvcCkfamo4+TxYic7PzVZJ5PSRNV2LMz+/XVTosl4ZJSQJ9Qt zsHjYzgFoXflLwnpB0Jz3QXXxpSTJlS6DrN19CjzYY7pPoqfDBL8NZ4ZPUCdZyZq 5J0wB695s7OL2MomrgOqsxkaszQEimepF9O38FHx38qD6JAS7biJO9Rommiza7Ra B25Q/s6D+TgPc2wmXJkrXEenNnqs3uL+7ACZmCGYPGOSixPqMtMpgHlokThROpBp XIomSHsUEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:37 2026 by rpki-client