This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer File: ljKargKzZu0aAbUqwzq-dgWTqAY.cer (raw, json) Hash identifier: iSFibZrF5mbtyQj8q4TtPk6kwKj2oYCMAFUteT4nZv8= Subject key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37D4CD814103D36B1F565D3828CE39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50453 AS: 202796 IP: 185.18.236.0/22 IP: 185.134.56.0/22 IP: 2a03:fb40::/29 IP: 2a05:1e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d4:cd:81:41:03:d3:6b:1f:56:5d:38:28:ce:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96329aae02b366ed1a01b52ac33abe760593a806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:f2:23:dc:fc:5b:1c:2b:39:09:1d:ec:74: 7e:9a:3d:cb:1c:cf:25:4b:67:08:84:79:3c:17:7f: cc:ec:a2:66:18:fe:05:a9:da:7b:9e:72:d4:dc:66: 3a:ce:cd:de:86:62:79:74:43:60:0f:7b:cb:cd:1c: 25:6d:ba:f8:14:83:05:18:fb:98:4d:6b:30:04:99: e5:79:c3:75:9f:e1:51:a4:1a:c4:0d:e4:94:ff:6a: a6:30:c3:5a:5e:b5:ef:97:6b:43:b8:46:7d:6e:9d: 0c:e0:1c:b6:98:8f:22:f4:f4:a5:f6:4e:fa:0d:e3: 62:b1:82:c8:63:78:ec:92:33:e7:62:b7:10:5e:ff: a6:bc:84:3a:86:aa:26:50:19:43:bc:88:42:d5:88: 60:c9:d9:c2:0a:ef:3a:0f:57:3a:ff:64:c0:06:f1: bd:0d:a2:b6:30:16:d7:44:e8:dc:88:d4:cb:63:e5: ee:41:32:8d:90:17:9f:8b:12:77:9d:a4:1c:3f:40: 98:14:f9:f0:85:a2:1b:31:67:66:59:08:57:a5:c8: 42:ea:82:3e:ba:58:d1:2d:81:ce:b4:eb:e2:a2:38: 74:ca:2b:28:eb:0b:1f:13:e3:99:c9:f8:d1:1b:ab: d4:1c:f3:f1:14:09:80:b0:39:54:6c:cf:68:2d:01: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.236.0/22 185.134.56.0/22 IPv6: 2a03:fb40::/29 2a05:1e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50453 202796 Signature Algorithm: sha256WithRSAEncryption 0e:0e:43:89:b1:6d:0e:70:2d:31:0f:9c:a4:25:a0:d7:61:54: b7:a4:e7:2b:1a:62:bf:eb:aa:ce:4c:22:1a:b5:7e:c6:d7:89: ec:ac:d0:b5:9a:d4:d3:e9:f5:2d:5e:42:3c:c3:96:31:b3:3a: 83:cb:d6:a3:95:ae:1c:66:be:ee:e3:9e:87:13:09:92:5c:f8: a6:de:b0:a6:91:71:fe:1b:36:e9:e0:3e:a4:4d:c9:f9:45:07: dd:17:48:ef:16:b2:b6:06:58:8f:a7:6b:8e:88:8b:50:39:b9: 44:46:f2:ee:6c:1e:68:5e:51:e8:38:8c:d2:9b:f0:56:82:0a: f6:1a:27:62:d2:67:e4:17:70:d7:e1:66:fc:40:ba:52:77:d1: f3:79:b3:44:a2:f4:31:5a:21:67:b1:af:0f:41:e9:a7:f2:4c: e5:b6:4a:7d:2f:f8:32:5b:61:a4:a1:8c:53:04:c3:b3:c5:6b: ca:7b:d6:42:ec:42:fe:80:15:72:1e:69:df:af:b3:97:41:e8: 2b:ba:2a:fc:93:f3:b8:f7:59:f3:2e:90:d2:66:0c:e7:d8:17: 44:ea:78:5e:a9:f6:5f:df:20:87:ba:d6:33:5b:de:b1:e1:e5: 18:55:e2:f9:e9:cc:a9:93:0d:6c:22:64:d4:25:9d:38:62:9f: b5:be:91:5f -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+N9TNgUED02sfVl04KM45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjMyOWFhZTAyYjM2NmVkMWEwMWI1MmFjMzNhYmU3NjA1OTNhODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut3yI9z8WxwrOQkd7HR+mj3LHM8l S2cIhHk8F3/M7KJmGP4Fqdp7nnLU3GY6zs3ehmJ5dENgD3vLzRwlbbr4FIMFGPuY TWswBJnlecN1n+FRpBrEDeSU/2qmMMNaXrXvl2tDuEZ9bp0M4By2mI8i9PSl9k76 DeNisYLIY3jskjPnYrcQXv+mvIQ6hqomUBlDvIhC1YhgydnCCu86D1c6/2TABvG9 DaK2MBbXROjciNTLY+XuQTKNkBefixJ3naQcP0CYFPnwhaIbMWdmWQhXpchC6oI+ uljRLYHOtOviojh0yiso6wsfE+OZyfjRG6vUHPPxFAmAsDlUbM9oLQFNIQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFJYymq4Cs2btGgG1KsM6vnYFk6gGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzE0YmNh NS05MDQ2LTQ4NzYtODI4My1hZTkzZGVmNTEwYzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMTRiY2E1 LTkwNDYtNDg3Ni04MjgzLWFlOTNkZWY1MTBjMi8xL2xqS2FyZ0t6WnUwYUFiVXF3 enEtZGdXVHFBWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuRLsAwQCuYY4MBQEAgACMA4DBQMqA/tAAwUD KgUegDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAxRUCAwMYLDANBgkqhkiG9w0B AQsFAAOCAQEADg5DibFtDnAtMQ+cpCWg12FUt6TnKxpiv+uqzkwiGrV+xteJ7KzQ tZrU0+n1LV5CPMOWMbM6g8vWo5WuHGa+7uOehxMJklz4pt6wppFx/hs26eA+pE3J +UUH3RdI7xaytgZYj6drjoiLUDm5REby7mweaF5R6DiM0pvwVoIK9honYtJn5Bdw 1+Fm/EC6UnfR83mzRKL0MVohZ7GvD0Hpp/JM5bZKfS/4MlthpKGMUwTDs8VrynvW QuxC/oAVch5p36+zl0HoK7oq/JPzuPdZ8y6Q0mYM59gXROp4Xqn2X98gh7rWM1ve seHlGFXi+enMqZMNbCJk1CWdOGKftb6RXw== -----END CERTIFICATE-----Generated at Tue Feb 10 10:13:36 2026 by rpki-client