This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer File: lSC_jHciaj-ojr4RzI8RacxWCnk.cer (raw, json) Hash identifier: tU54d4uesKJX9wcIHeMNkoENOhF1ERi/ALTyTUGbPCM= Subject key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC12BB82A9F46897EE3D367CEAB03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57265 IP: 91.216.41.0/24 IP: 2001:678:71c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c1:2b:b8:2a:9f:46:89:7e:e3:d3:67:ce:ab:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:8a:bd:44:c9:e7:d6:7d:7a:08:9d:0b:33: 5d:cf:d3:17:8d:a6:77:6e:53:17:29:69:d0:de:d4: 73:32:a3:f5:39:d6:86:15:61:90:94:56:59:ad:e5: 8b:fa:8e:41:7b:10:ca:83:16:bf:1f:eb:42:4e:c3: a2:92:93:1e:16:56:de:30:01:39:40:56:91:f7:dd: d4:fb:30:c1:f5:e7:9c:48:b8:73:58:9a:ed:75:9b: ef:c7:bc:e6:4b:79:d2:5c:49:40:57:2d:d2:3f:89: 1f:f3:31:5a:72:88:02:6b:9b:08:f5:e2:9b:ae:bc: 86:b9:4c:40:ab:9e:d1:63:86:79:73:c1:bd:b0:61: 05:2d:2b:82:62:f0:5f:c2:ff:1f:0d:ce:07:59:59: ad:b4:9a:f9:0f:3f:64:db:4f:ce:2a:af:44:4e:38: ae:77:93:76:b0:7f:80:c7:03:dd:5c:1b:69:eb:7d: 66:27:5d:ca:cc:ba:da:c2:f9:af:59:aa:e4:be:44: d3:bd:df:df:25:ec:b8:a7:c5:62:72:e2:ff:fb:69: c8:33:a7:f4:1a:95:7c:db:62:ef:34:9b:c3:71:8e: f3:a0:93:a5:c6:2a:9f:b3:03:1c:13:cd:7f:f4:a1: c4:94:cc:33:64:4c:2d:9e:7f:bc:05:f4:75:b3:a3: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.41.0/24 IPv6: 2001:678:71c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57265 Signature Algorithm: sha256WithRSAEncryption 0e:c8:a7:fe:59:d6:47:72:5f:80:2e:bc:56:ed:1f:54:a3:41: 51:88:0e:ec:4d:02:e5:a4:02:c0:da:dc:8b:33:41:53:37:83: 3c:05:d7:48:a8:00:02:e0:52:c6:68:9d:38:ad:1e:e8:87:72: ab:e0:5e:85:88:68:41:95:1b:17:cf:c3:04:81:34:9c:e6:49: 44:69:df:f9:5e:51:38:25:cf:b5:4b:df:25:d7:c3:3c:7a:bc: ef:a2:c5:71:5b:c6:cb:96:98:c6:37:72:e6:47:da:65:af:b6: d5:42:ab:38:fa:ba:7f:b4:20:a6:8a:3f:8d:35:13:65:ab:2e: 21:17:76:8f:b1:bf:69:34:99:bf:e4:d0:41:0f:e6:34:f2:7a: 05:68:5e:e7:68:86:ff:fa:38:d2:80:b9:2e:8d:b1:f5:bf:51: 0b:22:40:7d:b7:0a:bf:55:61:f6:44:9f:5d:dd:80:77:e8:ea: 11:33:00:2e:05:03:bf:af:61:ea:77:69:68:c7:84:cc:04:58: 31:ab:77:62:71:51:d2:0e:57:9d:30:20:8c:bc:1f:6f:d4:99: c3:a0:fb:15:02:3a:7b:2a:ec:68:bb:f2:0d:96:ec:cc:b3:34: 58:17:ed:be:9f:7b:e4:5a:c8:64:a8:f1:48:d0:2a:4c:46:41: 03:55:a4:f9 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9ysEruCqfRol+49NnzqsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTIwYmY4Yzc3MjI2YTNmYTg4ZWJlMTFjYzhmMTE2OWNjNTYwYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjSKvUTJ59Z9egidCzNdz9MXjaZ3 blMXKWnQ3tRzMqP1OdaGFWGQlFZZreWL+o5BexDKgxa/H+tCTsOikpMeFlbeMAE5 QFaR993U+zDB9eecSLhzWJrtdZvvx7zmS3nSXElAVy3SP4kf8zFacogCa5sI9eKb rryGuUxAq57RY4Z5c8G9sGEFLSuCYvBfwv8fDc4HWVmttJr5Dz9k20/OKq9ETjiu d5N2sH+AxwPdXBtp631mJ13KzLrawvmvWarkvkTTvd/fJey4p8VicuL/+2nIM6f0 GpV822LvNJvDcY7zoJOlxiqfswMcE81/9KHElMwzZEwtnn+8BfR1s6N5eQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFJUgv4x3Imo/qI6+EcyPEWnMVgp5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2YwOWE3 Zi01NzYxLTQ1YTctOWNjYi0xZjNlZDZkODgxYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZjA5YTdm LTU3NjEtNDVhNy05Y2NiLTFmM2VkNmQ4ODFiOC8xL2xTQ19qSGNpYWotb2pyNFJ6 SThSYWN4V0Nuay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9gpMA8EAgACMAkDBwAgAQZ4BxwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAN+xMA0GCSqGSIb3DQEBCwUAA4IBAQAOyKf+WdZH cl+ALrxW7R9Uo0FRiA7sTQLlpALA2tyLM0FTN4M8BddIqAAC4FLGaJ04rR7oh3Kr 4F6FiGhBlRsXz8MEgTSc5klEad/5XlE4Jc+1S98l18M8erzvosVxW8bLlpjGN3Lm R9plr7bVQqs4+rp/tCCmij+NNRNlqy4hF3aPsb9pNJm/5NBBD+Y08noFaF7naIb/ +jjSgLkujbH1v1ELIkB9twq/VWH2RJ9d3YB36OoRMwAuBQO/r2Hqd2lox4TMBFgx q3dicVHSDledMCCMvB9v1JnDoPsVAjp7Kuxou/INluzMszRYF+2+n3vkWshkqPFI 0CpMRkEDVaT5 -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:53 2026 by rpki-client