This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer File: laK2pvOHvqbovS6VKiNpCTkrBxM.cer (raw, json) Hash identifier: YAzuqDUGF8ScVUAxYFPFu4cA3gRtAFOM64B8MRtH9Ms= Subject key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BEB7091D8946CA532101989F22EDAC301 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 15:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201957 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:70:91:d8:94:6c:a5:32:10:19:89:f2:2e:da:c3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 15:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:3c:f5:90:0c:e1:3a:91:81:cf:c8:b7:28: ea:44:2a:f7:54:60:4f:6a:f0:64:e8:6c:bd:34:20: c2:d6:d5:a7:76:fb:89:e9:f2:7c:a6:b5:ff:cb:a0: 6f:e2:d0:6f:e3:ce:fb:c8:ca:8b:f6:4f:bd:54:39: ff:e0:d0:24:b7:44:1c:54:b4:82:fa:77:77:49:36: 73:f1:7b:1f:a8:14:9c:98:6f:f5:41:e9:4c:0a:77: 9d:f0:64:a5:35:d6:33:2e:81:28:9b:83:32:ea:a3: 8d:bf:35:75:c8:d4:fb:a8:0e:67:23:60:d7:87:af: 45:85:58:96:7d:fb:84:40:b6:15:a1:e5:b6:f0:99: 98:fc:9b:4d:4b:8b:b7:87:12:93:71:f2:1d:39:bf: 22:44:4b:f9:f3:39:a8:35:56:1a:f0:8c:33:6c:af: b6:c2:cc:d9:7e:4c:2c:50:f0:fa:c4:aa:e1:89:18: 6a:af:3b:62:f9:23:cb:4a:fa:82:22:af:04:7b:52: 8a:c0:d5:f1:88:09:75:c9:bf:e3:3e:f4:4f:ba:fd: 37:2e:d7:63:d7:f0:ae:b4:b0:85:a0:de:78:ed:29: 1f:03:9e:47:22:da:d1:31:f6:5c:4c:31:42:bb:8b: 8d:ca:76:53:f7:91:8d:b6:98:00:f9:ed:8c:1e:c9: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201957 Signature Algorithm: sha256WithRSAEncryption 1a:f7:58:b4:5c:01:32:f1:25:7d:75:5c:7a:fd:cc:61:2c:27: 7f:40:e9:8b:fc:60:5c:30:b8:fd:32:db:8d:8a:4e:f9:6e:cc: f5:fc:91:e5:ba:b6:9c:04:98:c6:26:e2:36:45:91:2e:ff:f4: 19:1d:a5:6c:1a:b8:94:cb:1c:9c:26:08:7a:95:44:34:35:aa: 28:45:d0:c1:8c:e5:e7:d9:0d:3f:38:cf:cc:ea:db:db:f1:d7: 42:c2:2d:72:06:53:e2:15:0c:16:dc:ac:18:0d:73:51:8e:2d: 04:0b:d1:9c:e7:73:e2:fc:57:1c:0c:79:59:cc:09:d2:d8:5e: 70:63:44:72:98:96:25:ed:67:66:a5:e2:c4:5b:08:85:86:20: 24:6d:a8:ae:a2:aa:b3:e0:0a:23:0f:1c:5b:c8:08:d4:ce:3d: 68:a5:5b:ad:ce:85:7d:13:62:c1:e2:5d:60:52:be:5d:26:5d: 9a:33:56:76:5c:52:71:da:45:fd:b7:55:9f:c8:0b:2d:78:aa: 2c:80:d8:02:dc:2c:62:ac:eb:46:9b:4b:c9:2f:a7:bf:10:eb: 66:8e:59:fd:1b:37:f3:77:a9:6d:56:ec:50:3d:3d:70:1f:b6: df:63:3f:47:6c:23:70:c9:69:59:f1:92:06:8c:7a:6c:be:83: f2:06:02:47 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvrcJHYlGylMhAZifIu2sMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMTUxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWEyYjZhNmYzODdiZWE2ZThiZDJlOTUyYTIzNjkwOTM5MmIwNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFA89ZAM4TqRgc/ItyjqRCr3VGBP avBk6Gy9NCDC1tWndvuJ6fJ8prX/y6Bv4tBv4877yMqL9k+9VDn/4NAkt0QcVLSC +nd3STZz8XsfqBScmG/1QelMCned8GSlNdYzLoEom4My6qONvzV1yNT7qA5nI2DX h69FhViWffuEQLYVoeW28JmY/JtNS4u3hxKTcfIdOb8iREv58zmoNVYa8IwzbK+2 wszZfkwsUPD6xKrhiRhqrzti+SPLSvqCIq8Ee1KKwNXxiAl1yb/jPvRPuv03Ltdj 1/CutLCFoN547SkfA55HItrRMfZcTDFCu4uNynZT95GNtpgA+e2MHskHHQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJWitqbzh76m6L0ulSojaQk5KwcTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzkyOTlm Yy1iNjY4LTRmN2UtYmYwZC01YWE5YTQ5ZDNiOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvOTI5OWZj LWI2NjgtNGY3ZS1iZjBkLTVhYTlhNDlkM2I5ZS8xL2xhSzJwdk9IdnFib3ZTNlZL aU5wQ1RrckJ4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMU5TANBgkqhkiG9w0BAQsFAAOCAQEAGvdYtFwBMvEl fXVcev3MYSwnf0Dpi/xgXDC4/TLbjYpO+W7M9fyR5bq2nASYxibiNkWRLv/0GR2l bBq4lMscnCYIepVENDWqKEXQwYzl59kNPzjPzOrb2/HXQsItcgZT4hUMFtysGA1z UY4tBAvRnOdz4vxXHAx5WcwJ0thecGNEcpiWJe1nZqXixFsIhYYgJG2orqKqs+AK Iw8cW8gI1M49aKVbrc6FfRNiweJdYFK+XSZdmjNWdlxScdpF/bdVn8gLLXiqLIDY AtwsYqzrRptLyS+nvxDrZo5Z/Rs383epbVbsUD09cB+232M/R2wjcMlpWfGSBox6 bL6D8gYCRw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:47 2026 by rpki-client