This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer File: lXbbt2mVtJUKhsXwfKjbPrSWePY.cer (raw, json) Hash identifier: sbxHsQV50DQL4tI5Jk8yAjggXeFoAaRl42qA0JthtZY= Subject key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C695FD3C9F924F5092E76D1BC463BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24889 IP: 46.253.176.0/20 IP: 80.254.64.0/20 IP: 93.94.240.0/21 IP: 109.205.168.0/21 IP: 185.196.120.0/22 IP: 2a02:200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:95:fd:3c:9f:92:4f:50:92:e7:6d:1b:c4:63:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:e5:2a:e5:e6:67:82:21:37:ce:bf:3a:34: c6:1b:b0:2e:9e:dc:b1:a9:6e:b1:3c:29:e3:1e:f9: 15:b1:9d:93:eb:92:8d:81:11:15:63:10:7a:6c:b5: fa:5f:55:99:45:45:6b:e5:a3:77:25:7e:92:b4:94: 69:e6:dd:fb:58:7f:c4:85:ef:03:92:90:91:26:c3: 34:78:73:f9:5d:f7:eb:98:c3:59:18:36:7a:33:95: c6:da:1d:ea:08:9d:f5:aa:45:e1:a5:41:5c:73:d7: 82:ec:36:a1:a1:a4:95:ff:0e:1f:e9:00:84:1c:42: bb:c9:fe:2a:a1:0d:53:f1:ee:61:0c:96:96:83:05: 3c:d8:bc:6d:c5:2f:3c:a4:24:2f:47:7c:71:27:12: 18:3b:df:a7:0b:30:f2:4c:60:d6:68:52:31:94:7f: 60:2d:bf:01:87:63:80:0c:6d:95:b5:4f:5d:cd:23: 5d:a6:6d:88:fb:ee:c1:f6:71:2a:7d:94:b1:13:a0: 69:15:2d:c3:5f:89:a4:6d:66:32:c5:a2:61:2c:bf: 53:72:10:c7:f6:af:91:e1:99:5c:fa:5b:23:e5:55: 94:5f:b3:f1:73:33:09:8d:7f:44:fc:e8:90:a2:43: d5:8d:f3:77:0e:5f:c8:13:a5:30:59:8f:a7:c9:35: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.176.0/20 80.254.64.0/20 93.94.240.0/21 109.205.168.0/21 185.196.120.0/22 IPv6: 2a02:200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24889 Signature Algorithm: sha256WithRSAEncryption 35:ec:9e:21:29:36:45:e2:79:f0:c5:54:64:d6:c4:70:cd:01: 88:6f:c1:f7:be:ba:9d:58:ae:de:38:15:e6:42:0e:06:d3:2d: 76:c0:f0:53:8b:cd:b1:78:e0:bb:fe:90:95:c0:10:c8:5b:47: d8:85:86:10:8d:b8:29:79:e3:e1:41:5b:e2:e6:f3:e8:d6:3f: c6:17:93:0a:7d:fe:f4:f8:2d:11:62:4e:36:91:19:5f:61:cf: d4:f0:71:99:8f:fc:bb:35:4a:03:19:90:6c:94:a4:4b:7c:c0: 52:0e:4b:10:58:5f:e8:72:e0:0b:1f:54:43:ab:05:9f:9c:4f: 4b:07:99:b2:ae:e7:7d:34:30:2f:0f:b3:16:bb:ab:50:5f:d1: 71:83:08:b6:2e:e6:66:1d:c5:37:c2:77:49:ca:dc:16:e6:b0: 1b:c1:21:9d:72:73:33:3b:b8:49:21:8b:c6:85:ff:b9:70:fe: 81:87:9a:7b:c9:26:84:9b:e9:0f:1d:9c:fa:2f:60:6f:85:5b: 23:42:15:71:5a:92:54:3b:4a:49:ac:ac:9a:32:e5:97:61:f1: 0e:ba:7f:20:06:33:f2:da:d6:ac:f1:33:ad:82:d3:d5:ec:b3: a6:f4:2c:df:c5:31:e8:52:50:db:fd:1e:2c:0d:f3:0b:74:43: 79:95:63:46 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt3xpX9PJ+ST1CS520bxGO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTc2ZGJiNzY5OTViNDk1MGE4NmM1ZjA3Y2E4ZGIzZWI0OTY3OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbblKuXmZ4IhN86/OjTGG7Auntyx qW6xPCnjHvkVsZ2T65KNgREVYxB6bLX6X1WZRUVr5aN3JX6StJRp5t37WH/Ehe8D kpCRJsM0eHP5XffrmMNZGDZ6M5XG2h3qCJ31qkXhpUFcc9eC7DahoaSV/w4f6QCE HEK7yf4qoQ1T8e5hDJaWgwU82LxtxS88pCQvR3xxJxIYO9+nCzDyTGDWaFIxlH9g Lb8Bh2OADG2VtU9dzSNdpm2I++7B9nEqfZSxE6BpFS3DX4mkbWYyxaJhLL9TchDH 9q+R4Zlc+lsj5VWUX7PxczMJjX9E/OiQokPVjfN3Dl/IE6UwWY+nyTUPXQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFJV227dplbSVCobF8Hyo2z60lnj2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzA5MjYz Yy1hNWNjLTQ0ZDYtOTFjNC02MTgwMmQ5YzkzNDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMDkyNjNj LWE1Y2MtNDRkNi05MWM0LTYxODAyZDljOTM0NC8xL2xYYmJ0Mm1WdEpVS2hzWHdm S2piUHJTV2VQWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQELv2wAwQEUP5AAwQDXV7wAwQDbc2oAwQCucR4 MA0EAgACMAcDBQMqAgIAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmE5MA0GCSqG SIb3DQEBCwUAA4IBAQA17J4hKTZF4nnwxVRk1sRwzQGIb8H3vrqdWK7eOBXmQg4G 0y12wPBTi82xeOC7/pCVwBDIW0fYhYYQjbgpeePhQVvi5vPo1j/GF5MKff70+C0R Yk42kRlfYc/U8HGZj/y7NUoDGZBslKRLfMBSDksQWF/ocuALH1RDqwWfnE9LB5my rud9NDAvD7MWu6tQX9Fxgwi2LuZmHcU3wndJytwW5rAbwSGdcnMzO7hJIYvGhf+5 cP6Bh5p7ySaEm+kPHZz6L2BvhVsjQhVxWpJUO0pJrKyaMuWXYfEOun8gBjPy2tas 8TOtgtPV7LOm9CzfxTHoUlDb/R4sDfMLdEN5lWNG -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:28 2026 by rpki-client