This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer (raw, json) Hash identifier: dswe0omriBLNRLVMxF4+upg7EHUQN7ucj5HZALTIFE4= Subject key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BD81D9CDF0811E636759607938C36 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31059 AS: 208783 IP: 46.227.165.0/24 IP: 91.200.178.0/24 IP: 91.213.251.0/24 IP: 194.48.199.0/24 IP: 217.113.48.0/24 IP: 2a13:2000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d8:1d:9c:df:08:11:e6:36:75:96:07:93:8c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:6e:a7:83:c0:8c:53:1f:6c:6f:3c:21:e6: b6:1b:15:7c:41:a4:b3:97:d3:ef:a6:32:e4:92:20: 00:8f:91:01:b3:41:8d:ce:ae:e9:9f:9f:9d:db:09: 67:14:05:05:8c:e8:58:f9:44:22:f1:4c:48:c3:29: e3:6d:50:91:f0:0a:dd:74:eb:2c:ff:95:3b:8c:62: 61:05:1e:ea:45:bd:05:98:f4:ec:26:bb:ee:10:35: 5d:86:ae:01:1f:c9:a7:34:91:0a:ae:9c:86:4f:57: fa:dd:9e:ab:4a:59:60:b7:4c:00:b6:6a:57:2f:fc: 2b:bf:91:f1:dd:52:53:39:85:19:b0:d5:83:0f:80: 41:8f:27:16:cc:d4:d9:9c:73:2e:bc:c2:e4:56:a4: 55:64:bc:d5:3b:e3:0f:e1:cb:30:df:b8:9a:95:17: df:0e:5d:42:e7:d2:55:d5:35:5b:fc:16:18:80:19: f0:ea:7a:d5:01:cd:23:b7:3d:a8:46:38:61:f3:f0: f1:46:5e:8b:af:54:92:02:c1:88:93:df:25:e5:72: 78:f7:78:03:4d:16:c2:e2:90:9c:80:9c:f4:c9:ab: 11:d8:11:d2:3d:1f:a6:e2:59:bb:fa:3b:1a:6e:bb: d2:91:07:8c:52:bb:42:58:db:74:01:4c:20:4b:1c: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.165.0/24 91.200.178.0/24 91.213.251.0/24 194.48.199.0/24 217.113.48.0/24 IPv6: 2a13:2000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31059 208783 Signature Algorithm: sha256WithRSAEncryption 68:58:bc:40:76:14:80:03:ff:ca:bd:97:8b:b4:d9:c3:e8:81: 30:f9:b4:13:37:34:b4:ab:74:71:8e:c2:e5:93:26:cc:d9:e7: 13:cb:db:be:56:30:5f:64:6f:96:2a:63:ff:e2:1a:b5:06:e8: 61:b7:53:96:63:13:d1:61:a2:3c:0a:98:97:86:19:80:f3:78: a4:5c:39:f6:69:74:75:31:45:8a:4a:96:02:62:71:e0:b4:b1: 1a:5f:81:80:57:54:44:62:b5:67:dc:ae:d2:c4:0f:d6:bf:20: 6d:d5:db:da:99:dc:af:9f:f8:a0:33:98:e8:41:b1:7c:d1:1a: a9:e8:0f:88:93:d0:9b:a1:e5:4e:eb:75:74:98:68:f8:f7:4a: c9:48:b0:27:b2:79:60:c3:10:56:f2:1e:17:4c:0a:72:90:99: 35:a2:ab:73:02:23:ce:26:fd:d8:65:40:13:50:a0:60:e8:f0: e9:60:dd:54:ff:3a:53:01:7e:db:c6:ac:d3:2c:e8:6b:2c:0b: 75:cc:38:74:10:ce:92:45:a8:b4:37:7a:b0:a0:48:d8:73:61: 94:c3:b7:5c:c3:26:d6:f5:4d:ac:fa:a4:ab:48:43:21:f1:c5: dc:fb:52:cd:ef:32:a7:75:35:c2:c7:6a:6a:00:fd:97:cd:51: 01:e2:fd:50 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt9W9gdnN8IEeY2dZYHk4w2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTI2ZmI2ODFmYjg3NTRlNGQ5NjY5YjJkYzY4MDZhYjI4NGNlMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMdup4PAjFMfbG88Iea2GxV8QaSz l9PvpjLkkiAAj5EBs0GNzq7pn5+d2wlnFAUFjOhY+UQi8UxIwynjbVCR8ArddOss /5U7jGJhBR7qRb0FmPTsJrvuEDVdhq4BH8mnNJEKrpyGT1f63Z6rSllgt0wAtmpX L/wrv5Hx3VJTOYUZsNWDD4BBjycWzNTZnHMuvMLkVqRVZLzVO+MP4csw37ialRff Dl1C59JV1TVb/BYYgBnw6nrVAc0jtz2oRjhh8/DxRl6Lr1SSAsGIk98l5XJ493gD TRbC4pCcgJz0yasR2BHSPR+m4lm7+jsabrvSkQeMUrtCWNt0AUwgSxz7AQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFJUm+2gfuHVOTZZpstxoBqsoTOFHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2M1Y2M2 Yi1iZmRmLTQwMmYtYmU2Yy00Nzc1NWM2M2NjMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvYzVjYzZi LWJmZGYtNDAyZi1iZTZjLTQ3NzU1YzYzY2MwMy8xL2xTYjdhQi00ZFU1TmxtbXkz R2dHcXloTTRVYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQALuOlAwQAW8iyAwQAW9X7AwQAwjDHAwQA2XEw MA0EAgACMAcDBQMqEyAAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAnlTAgMDL48w DQYJKoZIhvcNAQELBQADggEBAGhYvEB2FIAD/8q9l4u02cPogTD5tBM3NLSrdHGO wuWTJszZ5xPL275WMF9kb5YqY//iGrUG6GG3U5ZjE9FhojwKmJeGGYDzeKRcOfZp dHUxRYpKlgJiceC0sRpfgYBXVERitWfcrtLED9a/IG3V29qZ3K+f+KAzmOhBsXzR GqnoD4iT0Juh5U7rdXSYaPj3SslIsCeyeWDDEFbyHhdMCnKQmTWiq3MCI84m/dhl QBNQoGDo8Olg3VT/OlMBftvGrNMs6GssC3XMOHQQzpJFqLQ3erCgSNhzYZTDt1zD Jtb1Taz6pKtIQyHxxdz7Us3vMqd1NcLHamoA/ZfNUQHi/VA= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:57 2026 by rpki-client