This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer File: llpqv9sIdPL-wiYs3qM3Otyy3FU.cer (raw, json) Hash identifier: /GM2Nb8ipRAYPojIXQrFXhBB6bZrROSzGdT1X1DjQiQ= Subject key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8451D5D841E98706154E7759996B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12511 IP: 84.246.232.0/21 IP: 138.189.0.0/16 IP: 138.191.0.0/16 IP: 193.24.26.0/24 IP: 194.41.128.0/17 IP: 2a00:17c8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:45:1d:5d:84:1e:98:70:61:54:e7:75:99:96:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:1a:34:90:ca:04:12:8a:67:cd:95:0d:45: 83:9d:4d:82:65:f1:fa:59:d1:db:ad:b0:a2:a8:14: df:95:d9:37:ab:00:eb:11:32:ef:6a:75:52:d7:3c: 22:4f:74:6e:9b:ff:0d:d9:45:fe:74:19:f6:1e:34: 14:6f:a9:0c:a6:88:88:aa:b4:d6:9e:81:66:9f:33: d6:57:91:e3:ac:e8:23:4d:da:0e:0e:12:90:fe:89: c7:66:39:ee:c1:dd:74:37:84:44:05:88:ec:6a:13: 95:f5:56:9e:d2:3b:52:9d:99:bc:90:80:c4:59:bf: c8:30:44:3e:e0:fd:36:07:fc:ea:67:36:c5:a4:10: 5c:73:93:b5:9b:16:0d:dc:3c:d6:d8:5c:30:9c:a2: 74:b2:b2:b9:5e:04:bb:96:96:b3:36:62:0f:1d:03: 96:10:f0:38:91:de:a7:09:bd:c2:c5:45:cd:c0:18: 7f:76:73:d7:a9:1e:fb:52:22:45:b8:1c:56:b4:2a: ef:d5:40:61:5c:20:e2:d1:68:c3:a8:78:33:0a:03: 36:b4:92:49:57:ef:28:8e:ec:ff:29:2d:fd:27:c1: 18:ea:b6:a4:84:56:36:f9:4e:d8:c6:4b:c6:26:a0: cf:8f:e5:ce:d6:44:0f:92:8e:25:e8:5d:a3:c3:03: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.232.0/21 138.189.0.0/16 138.191.0.0/16 193.24.26.0/24 194.41.128.0/17 IPv6: 2a00:17c8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12511 Signature Algorithm: sha256WithRSAEncryption 14:56:92:21:3a:44:e8:64:db:ce:9d:37:81:d4:0f:77:8b:d1: 99:d1:e1:4c:40:2a:b6:dd:7b:54:5c:90:ae:cb:42:96:21:5c: 2e:60:1c:ed:cf:aa:3c:16:55:cb:0e:15:6c:a0:02:9b:d7:71: 03:6d:19:03:a4:ca:d9:a6:b2:93:91:3e:7f:fb:00:98:7f:88: ee:f2:e1:73:4b:a5:bb:d2:d6:50:3c:24:99:dc:af:df:7c:cf: e2:e5:62:32:14:0f:a2:22:5e:61:71:4c:17:7d:a9:f0:9a:86: aa:97:be:f6:37:e8:0d:83:4f:42:bf:77:e3:ab:9c:fa:70:c7: 7c:b9:54:03:37:1d:ef:82:43:e1:9e:69:a4:1e:bb:54:0f:ce: bd:8f:84:f9:d2:14:23:9a:86:fc:ef:c4:b5:cc:3b:52:1e:c4: 63:52:e0:fb:23:f0:d2:4d:c1:a5:36:78:de:e7:41:cc:2a:44: f8:3e:38:a9:63:39:b3:d9:98:f5:cc:43:1a:25:89:52:18:2a: 2e:02:1a:4d:60:35:f6:fc:da:f4:5c:6e:95:51:43:0e:73:15: cc:87:62:ec:0c:a7:a0:46:95:2b:52:fd:40:47:e2:e4:f2:01: aa:99:e2:00:d8:08:18:22:a1:40:92:64:41:f7:d5:5a:2e:bc: 3d:21:e5:df -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt6yEUdXYQemHBhVOd1mZa3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjVhNmFiZmRiMDg3NGYyZmVjMjI2MmNkZWEzMzczYWRjYjJkYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5gaNJDKBBKKZ82VDUWDnU2CZfH6 WdHbrbCiqBTfldk3qwDrETLvanVS1zwiT3Rum/8N2UX+dBn2HjQUb6kMpoiIqrTW noFmnzPWV5HjrOgjTdoODhKQ/onHZjnuwd10N4REBYjsahOV9Vae0jtSnZm8kIDE Wb/IMEQ+4P02B/zqZzbFpBBcc5O1mxYN3DzW2FwwnKJ0srK5XgS7lpazNmIPHQOW EPA4kd6nCb3CxUXNwBh/dnPXqR77UiJFuBxWtCrv1UBhXCDi0WjDqHgzCgM2tJJJ V+8ojuz/KS39J8EY6rakhFY2+U7YxkvGJqDPj+XO1kQPko4l6F2jwwNEpwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFJZaar/bCHTy/sImLN6jNzrcstxVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzEyNDE3 Zi03NjY1LTQwOTgtYTMzOC00OTQ5YjFlMmI2MGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvMTI0MTdm LTc2NjUtNDA5OC1hMzM4LTQ5NDliMWUyYjYwZi8xL2xscHF2OXNJZFBMLXdpWXMz cU0zT3R5eTNGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEQGCCsGAQUF BwEHAQH/BDUwMzAiBAIAATAcAwQDVPboAwMAir0DAwCKvwMEAMEYGgMEB8IpgDAN BAIAAjAHAwUDKgAXyDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIw3zANBgkqhkiG 9w0BAQsFAAOCAQEAFFaSITpE6GTbzp03gdQPd4vRmdHhTEAqtt17VFyQrstCliFc LmAc7c+qPBZVyw4VbKACm9dxA20ZA6TK2aayk5E+f/sAmH+I7vLhc0ulu9LWUDwk mdyv33zP4uViMhQPoiJeYXFMF32p8JqGqpe+9jfoDYNPQr9346uc+nDHfLlUAzcd 74JD4Z5ppB67VA/OvY+E+dIUI5qG/O/Etcw7Uh7EY1Lg+yPw0k3BpTZ43udBzCpE +D44qWM5s9mY9cxDGiWJUhgqLgIaTWA19vza9FxulVFDDnMVzIdi7AynoEaVK1L9 QEfi5PIBqpniANgIGCKhQJJkQffVWi68PSHl3w== -----END CERTIFICATE-----Generated at Mon Jan 26 22:10:38 2026 by rpki-client