This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer File: ljUcRzoWujj6tNUXBZIl4PEzyL8.cer (raw, json) Hash identifier: V8pXmCLfWKKaLjx8YVpu3tY964WNys2/tO8cwAEHfMQ= Subject key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35EB47771D2BC7DF20072AFCECBEF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.225.180.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:eb:47:77:1d:2b:c7:df:20:07:2a:fc:ec:be:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96351c473a16ba38fab4d517059225e0f133c8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:ef:53:66:01:20:c7:06:82:c6:d3:01:dd: 6a:93:94:1a:b9:c4:fe:14:81:fa:84:f8:4b:27:2a: 2e:30:60:87:0b:55:8e:a5:e3:47:9c:9a:11:11:c7: 63:7b:09:03:ca:c4:b2:60:06:45:d0:1c:29:ea:f3: 11:df:81:8d:e8:26:3c:0e:f7:0c:cf:00:73:df:a0: d3:c7:52:93:f8:4f:dd:c5:25:bc:b7:c7:05:35:27: 60:d1:ef:45:a6:89:6b:de:bb:85:34:02:36:86:c9: 2d:e2:d1:ab:fc:06:e9:93:7e:6b:bc:86:67:c8:a4: 9b:07:d4:05:22:1f:b6:e2:0f:66:ac:ff:f8:70:8d: c8:fe:87:0f:c7:dc:51:c1:d3:ce:18:2d:43:3f:7b: 75:d9:78:92:66:09:a5:bb:83:b8:67:e5:e9:22:ef: 3d:97:13:89:f8:93:e8:f5:c8:a7:4d:50:08:d8:0e: 95:33:a3:a7:bf:bb:32:6a:ce:9e:73:61:5a:86:b4: 2f:22:4f:24:c5:04:e7:f1:78:49:31:d8:55:ba:a2: c7:e1:dc:0c:20:1b:e2:4f:02:1e:de:5a:b2:d1:47: d7:8c:01:6b:04:43:db:bb:28:46:e7:4e:c1:c9:b3: 32:76:ff:86:d4:7a:a5:2e:47:ad:f2:5b:b5:28:4e: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.180.0/22 Signature Algorithm: sha256WithRSAEncryption 08:75:01:5e:e8:b6:2f:04:65:de:35:45:6f:f6:2a:18:80:de: 42:c2:71:71:86:4d:07:3a:99:11:53:1c:31:25:33:ea:b5:fe: 50:a5:fe:4d:1f:86:c9:42:70:64:26:e4:d8:16:af:93:be:89: 41:d5:b4:1e:71:c2:27:dc:9c:51:23:0b:6d:40:95:4e:68:af: c0:be:0a:a1:3b:92:65:e6:df:95:3d:18:18:4a:11:29:89:4e: c2:9c:4a:de:c6:08:4c:8d:79:a0:0e:43:c4:0d:13:d9:99:6f: 9f:d2:a7:93:96:2e:f5:04:0f:76:f4:2c:d9:ab:d6:f2:7a:72: 6d:49:43:28:4b:ae:e7:5b:65:ac:8b:9e:68:1b:12:86:85:92: b8:e0:a3:30:78:30:59:3d:cd:29:05:ff:86:9d:2f:aa:60:0d: 68:eb:bd:69:33:bf:57:c8:64:c0:87:86:eb:b7:f0:db:ad:72: 1d:89:33:59:7b:4d:1d:ce:06:3e:d2:ed:1f:0e:3d:2e:8d:e8: 4e:1a:60:88:30:ec:78:6f:3b:cc:3a:ec:9b:eb:a2:24:28:8b: 61:01:7a:ae:91:22:f7:de:e1:db:5a:df:e7:1a:6e:bf:d7:cd: da:31:34:82:d8:10:93:a8:d3:2b:84:2e:36:6b:c2:90:4d:b1: 06:4c:56:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NetHdx0rx98gByr87L73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjM1MWM0NzNhMTZiYTM4ZmFiNGQ1MTcwNTkyMjVlMGYxMzNjOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+3vU2YBIMcGgsbTAd1qk5QaucT+ FIH6hPhLJyouMGCHC1WOpeNHnJoREcdjewkDysSyYAZF0Bwp6vMR34GN6CY8DvcM zwBz36DTx1KT+E/dxSW8t8cFNSdg0e9Fpolr3ruFNAI2hskt4tGr/Abpk35rvIZn yKSbB9QFIh+24g9mrP/4cI3I/ocPx9xRwdPOGC1DP3t12XiSZgmlu4O4Z+XpIu89 lxOJ+JPo9cinTVAI2A6VM6Onv7syas6ec2FahrQvIk8kxQTn8XhJMdhVuqLH4dwM IBviTwIe3lqy0UfXjAFrBEPbuyhG507BybMydv+G1HqlLket8lu1KE6WMwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJY1HEc6Fro4+rTVFwWSJeDxM8i/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2E1Mzdj MC1mZDRiLTQzYjYtODg5MS1kNTczNzNiZjUxNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvYTUzN2Mw LWZkNGItNDNiNi04ODkxLWQ1NzM3M2JmNTE2Mi8xL2xqVWNSem9XdWpqNnROVVhC WklsNFBFenlMOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW+G0MA0GCSqGSIb3DQEBCwUAA4IBAQAIdQFe 6LYvBGXeNUVv9ioYgN5CwnFxhk0HOpkRUxwxJTPqtf5Qpf5NH4bJQnBkJuTYFq+T volB1bQeccIn3JxRIwttQJVOaK/AvgqhO5Jl5t+VPRgYShEpiU7CnErexghMjXmg DkPEDRPZmW+f0qeTli71BA929CzZq9byenJtSUMoS67nW2Wsi55oGxKGhZK44KMw eDBZPc0pBf+GnS+qYA1o671pM79XyGTAh4brt/DbrXIdiTNZe00dzgY+0u0fDj0u jehOGmCIMOx4bzvMOuyb66IkKIthAXqukSL33uHbWt/nGm6/183aMTSC2BCTqNMr hC42a8KQTbEGTFae -----END CERTIFICATE-----Generated at Tue Jan 27 09:58:54 2026 by rpki-client