This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer File: lUqTUetm2NhiTiDRafdmty9YrMA.cer (raw, json) Hash identifier: DeoiQS3ADPZJfayP5z1xqJ+2b/dI9t74bmDxyTO9++w= Subject key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A344064F7C6A6CA8E43D366A087826 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 134.2.0.0/16 IP: 192.42.143.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:44:06:4f:7c:6a:6c:a8:e4:3d:36:6a:08:78:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954a9351eb66d8d8624e20d169f766b72f58acc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:da:47:79:ad:f0:1d:e8:32:9f:1f:38:99: ea:6f:87:d3:89:48:8b:18:5f:75:16:8a:8d:ba:68: ac:d7:62:0a:78:f5:3a:06:cc:7f:3d:1e:f0:e3:4c: a4:0c:79:07:5d:4e:ea:6c:a6:b0:2e:45:d1:49:76: 4e:dd:64:af:1a:65:84:ea:e4:32:b7:cb:90:f9:5f: 85:ac:44:bc:43:0a:81:d7:36:51:44:fa:fc:95:bd: 16:62:bc:00:9a:ac:b6:d4:77:2b:f4:a1:44:76:fa: 9d:a1:d3:bc:df:c0:44:32:d5:ad:6e:ee:40:b3:36: 4e:42:4c:e1:53:a6:98:22:25:bf:d2:6b:6b:a8:b4: b4:38:4e:cb:cc:15:6f:7b:9e:f6:f0:33:1d:42:15: 36:42:da:26:b9:56:d2:6b:c5:03:b7:e2:64:0e:3d: 70:4d:60:52:5d:cf:0a:b9:8c:a6:22:8a:37:6d:15: 6e:dd:32:e5:fe:9f:42:7c:38:8c:66:97:84:39:aa: 21:8e:bb:e8:32:45:7b:2e:38:0f:c4:f8:5f:c9:41: 0b:0c:5d:55:f4:ba:16:a9:26:e3:f1:a6:4a:27:85: 99:8b:d9:dd:b4:e1:88:a7:b6:8f:11:40:1e:9d:01: d1:01:01:92:ba:11:16:06:7e:ca:a3:be:8c:f3:0c: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.2.0.0/16 192.42.143.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:bc:88:2e:0c:54:7f:a9:ef:e9:78:40:af:5a:7e:51:88:77: fd:ad:b0:65:66:13:31:73:38:d5:0d:f3:13:b4:b4:53:4d:cb: 56:10:99:d5:ae:35:c8:d0:e2:5f:9a:a1:5b:bf:d4:f4:ac:67: f2:47:e9:3a:5a:f3:bd:35:d3:84:aa:3a:dd:27:4e:a9:e2:c2: 69:d2:63:d3:e8:d3:22:b8:74:06:bb:49:a9:32:84:ba:83:f9: 45:bb:61:7e:a0:70:f3:76:95:85:74:d7:fc:c1:cc:a1:dc:4e: ce:1c:a5:1c:86:9d:e4:c7:36:35:be:d9:37:fd:af:19:46:0c: d2:69:6f:00:92:04:41:c4:fc:62:b5:63:ed:93:30:1c:b2:12: 60:4d:91:0f:d7:9c:66:3b:f9:85:a0:15:dd:c7:44:73:2e:5f: 58:4d:66:19:f8:19:f9:bd:0d:b2:79:7f:53:bd:a0:e7:5f:39: b9:33:86:8f:00:cc:dd:45:d7:1f:65:89:73:10:ef:ed:1a:88: 48:86:08:3e:14:a6:14:44:62:1f:f2:db:58:ef:33:f8:a2:e8: f6:9a:4c:96:39:30:31:db:c1:b5:1d:77:69:b6:e2:42:e4:fa: 6d:60:d9:83:91:31:fa:39:ae:34:e3:61:8e:19:59:d7:29:a8: bd:f0:76:cf -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt4o0QGT3xqbKjkPTZqCHgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRhOTM1MWViNjZkOGQ4NjI0ZTIwZDE2OWY3NjZiNzJmNThhY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryPaR3mt8B3oMp8fOJnqb4fTiUiL GF91FoqNumis12IKePU6Bsx/PR7w40ykDHkHXU7qbKawLkXRSXZO3WSvGmWE6uQy t8uQ+V+FrES8QwqB1zZRRPr8lb0WYrwAmqy21Hcr9KFEdvqdodO838BEMtWtbu5A szZOQkzhU6aYIiW/0mtrqLS0OE7LzBVve5728DMdQhU2QtomuVbSa8UDt+JkDj1w TWBSXc8KuYymIoo3bRVu3TLl/p9CfDiMZpeEOaohjrvoMkV7LjgPxPhfyUELDF1V 9LoWqSbj8aZKJ4WZi9ndtOGIp7aPEUAenQHRAQGSuhEWBn7Ko76M8wxb4wIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFJVKk1HrZtjYYk4g0Wn3ZrcvWKzAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2NmNjgz ZS02YWJkLTRmNWQtOTk0My0wMmYzZGRiYTE5NDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvY2Y2ODNl LTZhYmQtNGY1ZC05OTQzLTAyZjNkZGJhMTk0Mi8xL2xVcVRVZXRtMk5oaVRpRFJh ZmRtdHk5WXJNQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAhgIDBADAKo8wDQYJKoZIhvcNAQELBQADggEB AI28iC4MVH+p7+l4QK9aflGId/2tsGVmEzFzONUN8xO0tFNNy1YQmdWuNcjQ4l+a oVu/1PSsZ/JH6Tpa870104SqOt0nTqniwmnSY9Po0yK4dAa7SakyhLqD+UW7YX6g cPN2lYV01/zBzKHcTs4cpRyGneTHNjW+2Tf9rxlGDNJpbwCSBEHE/GK1Y+2TMByy EmBNkQ/XnGY7+YWgFd3HRHMuX1hNZhn4Gfm9DbJ5f1O9oOdfObkzho8AzN1F1x9l iXMQ7+0aiEiGCD4UphREYh/y21jvM/ii6PaaTJY5MDHbwbUdd2m24kLk+m1g2YOR Mfo5rjTjYY4ZWdcpqL3wds8= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:39 2026 by rpki-client