This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer (raw, json) Hash identifier: boFwg4TwPQInJuQgGklhZtLu3XE2YGiEa56MSteu81E= Subject key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE337EBAFE4DAE74E04E0C585E3113 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202407 IP: 193.56.196.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:33:7e:ba:fe:4d:ae:74:e0:4e:0c:58:5e:31:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:a4:53:e5:d8:cd:63:31:df:83:eb:f0:c8: b6:8d:cd:00:55:3e:ef:45:bc:cf:c1:f3:c6:7f:e0: 61:e0:84:7a:78:18:d1:8f:b5:89:bb:88:da:45:6a: ec:32:f8:d9:27:b4:ab:c4:55:03:d0:c3:d7:ae:e9: fb:53:77:a7:cf:90:ee:3c:48:01:33:79:25:a7:d5: 81:89:3e:d5:48:25:38:20:74:4a:1b:ed:58:b8:1d: df:1e:b1:64:e3:d1:0d:1f:01:42:64:63:91:5a:8d: 35:ac:a6:79:bd:fd:f7:6e:a6:5d:a1:01:f7:93:22: df:2e:57:66:99:3b:1a:0f:d5:6a:9f:90:09:4f:cd: 64:88:6d:af:a2:b2:cb:b8:89:af:55:a3:08:ab:64: 61:9e:60:2b:0d:3a:e4:12:5d:75:8d:4c:7a:13:51: 99:e3:b2:3c:ef:74:6b:ac:94:62:40:80:5e:19:b9: 66:db:08:65:45:42:19:37:01:81:cb:a6:6e:4a:f9: 7c:9f:c2:8b:da:00:15:0b:11:6c:f6:10:c0:7b:ba: 01:05:53:b1:9d:92:b1:dc:a5:83:90:02:3f:19:b0: 58:d4:9d:fc:af:70:7e:3c:49:91:dd:6d:d9:c8:73: a8:22:51:5e:20:65:a2:e6:fd:79:16:4e:9f:95:90: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.196.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202407 Signature Algorithm: sha256WithRSAEncryption 33:ce:d7:a2:0a:78:80:70:b8:98:e6:04:47:43:25:d6:69:19: 31:dd:dd:e7:26:d5:80:04:d7:32:0e:a0:5a:1d:6e:a7:c7:44: 06:e0:b5:67:69:7d:13:48:5b:e7:52:e7:65:50:08:d9:f8:25: 7b:32:81:fc:1c:e8:41:6b:89:f7:f7:73:2e:1d:a1:8a:04:40: a9:ce:a4:34:10:ee:39:58:af:3e:cc:03:bf:c2:b0:ad:be:ba: c4:0b:62:3f:c6:d5:53:8f:3c:c6:e2:45:88:79:c3:fd:02:53: 21:b3:94:b6:7a:ac:a9:d3:ca:f4:32:12:de:04:52:fd:4b:bd: 11:49:e7:00:48:21:38:b7:86:9d:0f:a0:85:f9:d1:7b:1c:93: f1:76:af:a0:60:4d:e6:a6:4d:50:33:c7:d1:3c:29:02:be:97: f8:71:6e:23:60:80:40:f0:41:9f:46:ab:24:33:c6:e5:8b:36: 7d:ee:4f:ca:13:a2:74:b7:c3:7a:c0:30:46:ef:62:8e:d0:e9: 5d:8e:e5:73:6d:77:6f:84:af:9e:fd:68:73:fe:54:53:c9:61: 36:b0:37:fd:81:fd:db:d8:b6:df:ad:47:05:14:2f:0d:a8:20: 57:68:b7:10:7b:15:02:6d:ad:50:9f:31:9f:4a:25:35:34:54: af:62:85:cb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87jN+uv5NrnTgTgxYXjETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTJkZGNiMzUwNzgyNjdmNGYzNzUyZTViNGNjYzY1YTY2M2E2M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kqkU+XYzWMx34Pr8Mi2jc0AVT7v RbzPwfPGf+Bh4IR6eBjRj7WJu4jaRWrsMvjZJ7SrxFUD0MPXrun7U3enz5DuPEgB M3klp9WBiT7VSCU4IHRKG+1YuB3fHrFk49ENHwFCZGORWo01rKZ5vf33bqZdoQH3 kyLfLldmmTsaD9Vqn5AJT81kiG2vorLLuImvVaMIq2RhnmArDTrkEl11jUx6E1GZ 47I873RrrJRiQIBeGblm2whlRUIZNwGBy6ZuSvl8n8KL2gAVCxFs9hDAe7oBBVOx nZKx3KWDkAI/GbBY1J38r3B+PEmR3W3ZyHOoIlFeIGWi5v15Fk6flZCVuwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJUt3LNQeCZ/TzdS5bTMxlpmOmPnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2M1OWI2 MS05MTE1LTQxNWYtODFmMi1hNGMxYmJjYjhjOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvYzU5YjYx LTkxMTUtNDE1Zi04MWYyLWE0YzFiYmNiOGM5Ny8xL2xTM2NzMUI0Sm45UE4xTGx0 TXpHV21ZNlktYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwTjEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMWpzANBgkqhkiG9w0BAQsFAAOCAQEAM87Xogp4gHC4mOYER0Ml1mkZMd3d5ybV gATXMg6gWh1up8dEBuC1Z2l9E0hb51LnZVAI2fglezKB/BzoQWuJ9/dzLh2higRA qc6kNBDuOVivPswDv8Kwrb66xAtiP8bVU488xuJFiHnD/QJTIbOUtnqsqdPK9DIS 3gRS/Uu9EUnnAEghOLeGnQ+ghfnRexyT8XavoGBN5qZNUDPH0TwpAr6X+HFuI2CA QPBBn0arJDPG5Ys2fe5PyhOidLfDesAwRu9ijtDpXY7lc213b4Svnv1oc/5UU8lh NrA3/YH929i2361HBRQvDaggV2i3EHsVAm2tUJ8xn0olNTRUr2KFyw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:09 2026 by rpki-client