This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer File: lmbCOPf_2s8VyALjILUuCYCGnOw.cer (raw, json) Hash identifier: iljV7CBLZjJQW9qdvSvYh6OTK+8hOKmeBj3pi/FlscU= Subject key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6D3D622CCC110F2A46215984F84E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197864 IP: 195.225.50.0/24 IP: 2001:67c:2424::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d3:d6:22:cc:c1:10:f2:a4:62:15:98:4f:84:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9666c238f7ffdacf15c802e320b52e0980869cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:13:f9:0d:b4:f2:32:1a:2e:51:b3:45:49: 7a:35:86:ca:4c:8f:15:37:ee:22:28:9d:b8:08:3e: 22:f1:ba:38:a3:f8:0a:14:45:35:dc:b0:cd:d7:c9: 89:89:a0:09:3d:a5:db:53:d3:dc:d1:55:b5:0b:0d: f4:73:66:95:02:5b:16:1d:36:56:30:b3:19:b3:00: 73:23:ab:39:2c:f0:0d:b0:c7:62:16:57:bc:4a:72: af:82:99:2b:1b:6b:1a:26:2b:81:93:51:e8:e1:1b: 59:ba:2a:8f:5b:4c:a8:e9:bc:f0:3e:bb:82:c6:ed: 57:12:ab:e3:9b:92:57:23:7e:7d:79:28:e1:2e:9c: 40:1f:33:7a:29:b6:50:a8:1a:a0:e8:8a:5e:56:80: 8c:7c:63:7d:60:ce:f3:5a:fe:9c:62:70:6d:a6:12: 1d:98:b2:e5:9f:a1:77:30:87:6d:f5:48:3f:68:eb: cd:cd:57:1b:06:ae:9c:9c:a2:d0:ea:4b:e2:73:96: 85:c5:bd:84:69:9a:cd:a4:6a:7a:33:77:02:5d:e9: 2a:25:7e:9b:dc:b3:a7:2a:20:63:10:c5:ba:4d:cd: c2:ed:b0:74:e1:f0:7f:05:1e:c8:a5:40:5f:6c:77: ca:4c:7d:e5:e8:ee:63:04:0f:f0:5b:44:dc:58:87: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.50.0/24 IPv6: 2001:67c:2424::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197864 Signature Algorithm: sha256WithRSAEncryption 4e:96:1a:34:38:3a:08:85:30:3e:16:2b:f7:95:72:a3:fa:61: da:35:05:70:6e:69:ee:cc:a0:66:03:be:09:5a:7c:a6:61:ab: d8:04:7c:88:56:6f:5b:80:bc:af:cf:a1:f6:e0:93:e7:65:e8: 0d:2c:3c:f8:c1:1a:85:b8:c4:92:da:15:5f:18:2a:cb:5c:a8: 94:38:57:76:22:96:f3:dd:53:b1:60:1b:6d:92:55:fe:59:1b: 9b:9e:1c:f7:6c:14:f8:26:d1:78:c9:05:bf:3c:8f:b8:99:4d: 19:ff:e6:0e:21:99:66:ce:9b:8c:4c:ba:55:dc:a7:65:2c:69: 92:74:42:f5:eb:61:c7:2f:26:8f:3d:30:9d:df:f8:25:65:0a: 76:8e:87:04:ce:fe:e7:bf:2f:4e:9b:36:97:a7:b8:ae:ab:0c: 52:e0:ca:82:c4:dc:59:1c:a8:b5:0c:39:be:fd:ec:20:1e:88: 71:e5:77:3d:7b:f7:9c:44:a9:0d:c6:36:99:ff:33:09:6c:ac: d6:f1:00:82:81:c4:80:41:7f:84:64:48:a7:f0:a9:0d:b6:ff: 4f:a6:d3:7b:18:40:a5:d3:d1:7d:e5:8a:13:6f:d8:71:a5:c9: 55:84:df:ba:71:d3:71:bd:ae:ca:e8:b1:74:ed:a0:b5:b9:bf: d4:85:ea:93 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+ptPWIszBEPKkYhWYT4TmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjY2YzIzOGY3ZmZkYWNmMTVjODAyZTMyMGI1MmUwOTgwODY5Y2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSwT+Q208jIaLlGzRUl6NYbKTI8V N+4iKJ24CD4i8bo4o/gKFEU13LDN18mJiaAJPaXbU9Pc0VW1Cw30c2aVAlsWHTZW MLMZswBzI6s5LPANsMdiFle8SnKvgpkrG2saJiuBk1Ho4RtZuiqPW0yo6bzwPruC xu1XEqvjm5JXI359eSjhLpxAHzN6KbZQqBqg6IpeVoCMfGN9YM7zWv6cYnBtphId mLLln6F3MIdt9Ug/aOvNzVcbBq6cnKLQ6kvic5aFxb2EaZrNpGp6M3cCXekqJX6b 3LOnKiBjEMW6Tc3C7bB04fB/BR7IpUBfbHfKTH3l6O5jBA/wW0TcWIeLhwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFJZmwjj3/9rPFcgC4yC1LgmAhpzsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzUwNzUz YS05MWFhLTQ0N2ItYjIzMi1hMDAwZDc2OWUwMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvNTA3NTNh LTkxYWEtNDQ3Yi1iMjMyLWEwMDBkNzY5ZTAyNi8xL2xtYkNPUGZfMnM4VnlBTGpJ TFV1Q1lDR25Pdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAw+EyMA8EAgACMAkDBwAgAQZ8JCQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwToMA0GCSqGSIb3DQEBCwUAA4IBAQBOlho0ODoI hTA+Fiv3lXKj+mHaNQVwbmnuzKBmA74JWnymYavYBHyIVm9bgLyvz6H24JPnZegN LDz4wRqFuMSS2hVfGCrLXKiUOFd2Ipbz3VOxYBttklX+WRubnhz3bBT4JtF4yQW/ PI+4mU0Z/+YOIZlmzpuMTLpV3KdlLGmSdEL162HHLyaPPTCd3/glZQp2jocEzv7n vy9OmzaXp7iuqwxS4MqCxNxZHKi1DDm+/ewgHohx5Xc9e/ecRKkNxjaZ/zMJbKzW 8QCCgcSAQX+EZEin8KkNtv9PptN7GECl09F95YoTb9hxpclVhN+6cdNxva7K6LF0 7aC1ub/UheqT -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:31 2026 by rpki-client