This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer (raw, json) Hash identifier: Lvu9RzC0PN6KoTqBqXNAHkoUHF8Q/1BM/tCB18v3QME= Subject key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79106F45100DB073CB610756A98C9F01 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216010 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:45:10:0d:b0:73:cb:61:07:56:a9:8c:9f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954cf721c08c8e9bc5242d56196677217350455c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:6d:64:2e:4e:97:da:ba:27:be:4a:54:d7: 20:7e:4a:c1:08:7c:06:13:ce:df:85:e6:20:15:66: 99:0e:95:e1:6b:7a:79:b6:df:b4:50:ba:1b:b3:16: 92:67:10:1a:fb:44:8b:9a:2e:51:ae:42:d9:4f:6a: a1:c3:cd:21:51:83:2d:87:42:87:68:46:eb:fb:e0: 1f:82:26:c9:c8:1a:47:88:40:dc:75:25:6d:0f:2c: 21:d1:79:c0:9a:5e:48:3b:c7:b8:a6:c6:c1:ae:bb: bf:ba:34:c0:1d:32:cf:d2:da:ce:84:6f:45:a5:cc: 2b:be:ae:56:b4:40:3e:da:c9:5a:ce:15:7c:e6:14: a1:1f:49:54:85:85:e4:b0:3c:17:1e:7e:f9:bc:db: 06:25:a9:da:96:a2:f1:b0:e0:60:21:9c:d6:66:21: 7f:f9:d7:a7:36:2f:5e:61:7c:1b:3f:b8:4f:cb:f1: b3:96:16:14:7f:f4:6d:f6:f5:41:21:a1:9a:81:ea: 09:62:ec:be:67:55:2f:94:6f:ab:f5:f5:65:50:78: 72:bd:e3:00:f3:60:52:8a:e2:97:21:01:02:71:f8: 27:38:d7:aa:92:00:bb:2e:db:ab:ec:59:fc:75:e8: f5:d0:b1:2c:1d:e7:ac:da:46:09:6f:ae:a6:10:1a: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216010 Signature Algorithm: sha256WithRSAEncryption 96:b0:b0:80:ba:79:4c:6a:5b:7f:8f:86:4e:f2:bb:ae:41:94: cd:03:86:34:e1:2f:d7:bc:25:4d:3d:07:43:12:03:7a:49:89: 51:ed:26:5e:9c:fc:6b:d4:86:08:c9:b3:54:15:41:42:19:96: 23:72:8e:03:04:7f:9b:44:30:09:86:a3:db:f4:81:fd:19:ee: 63:11:61:7d:2c:ad:8f:4b:59:54:6f:bd:b6:3e:3e:80:11:85: d1:83:a9:6d:62:b4:55:c8:db:4c:09:e0:51:a6:24:6c:57:5a: 3e:3a:7a:f6:ca:bc:5f:35:d2:50:93:d4:c6:a9:94:71:cc:da: a0:31:c4:10:5f:16:d6:52:b3:c7:95:ce:6a:35:3f:8d:a7:a4: ab:87:0f:03:d1:e2:8e:3a:44:75:70:d0:ee:3a:93:ba:b0:a8: b7:31:be:ff:b3:7a:b1:6f:2b:6f:a1:48:44:ba:19:9b:7a:15: 8d:74:34:22:d3:fd:54:04:2a:66:fa:26:18:4f:2a:9b:20:b3: 19:db:43:fd:23:57:0a:87:ca:5b:2c:2e:15:34:92:90:eb:fb: 45:e9:d1:56:f7:3a:73:f2:11:8f:d8:44:ee:51:80:34:63:30: 21:97:ee:a6:29:3a:1d:74:cc:09:2e:38:00:f4:ac:6d:9d:d4: f0:5e:30:4e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EG9FEA2wc8thB1apjJ8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRjZjcyMWMwOGM4ZTliYzUyNDJkNTYxOTY2NzcyMTczNTA0NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqJtZC5Ol9q6J75KVNcgfkrBCHwG E87fheYgFWaZDpXha3p5tt+0ULobsxaSZxAa+0SLmi5RrkLZT2qhw80hUYMth0KH aEbr++AfgibJyBpHiEDcdSVtDywh0XnAml5IO8e4psbBrru/ujTAHTLP0trOhG9F pcwrvq5WtEA+2slazhV85hShH0lUhYXksDwXHn75vNsGJanalqLxsOBgIZzWZiF/ +denNi9eYXwbP7hPy/GzlhYUf/Rt9vVBIaGageoJYuy+Z1UvlG+r9fVlUHhyveMA 82BSiuKXIQECcfgnONeqkgC7Ltur7Fn8dej10LEsHees2kYJb66mEBpZ1wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJVM9yHAjI6bxSQtVhlmdyFzUEVcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzI4MjNk ZC0yNWExLTQ0YTAtYmZjMS1jYmJkMDhhZDNlYzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMjgyM2Rk LTI1YTEtNDRhMC1iZmMxLWNiYmQwOGFkM2VjMi8xL2xVejNJY0NNanB2RkpDMVdH V1ozSVhOUVJWdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNLyjANBgkqhkiG9w0BAQsFAAOCAQEAlrCwgLp5TGpb f4+GTvK7rkGUzQOGNOEv17wlTT0HQxIDekmJUe0mXpz8a9SGCMmzVBVBQhmWI3KO AwR/m0QwCYaj2/SB/RnuYxFhfSytj0tZVG+9tj4+gBGF0YOpbWK0VcjbTAngUaYk bFdaPjp69sq8XzXSUJPUxqmUcczaoDHEEF8W1lKzx5XOajU/jaekq4cPA9HijjpE dXDQ7jqTurCotzG+/7N6sW8rb6FIRLoZm3oVjXQ0ItP9VAQqZvomGE8qmyCzGdtD /SNXCofKWywuFTSSkOv7RenRVvc6c/IRj9hE7lGANGMwIZfupik6HXTMCS44APSs bZ3U8F4wTg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:56 2026 by rpki-client