This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer File: lmr8FNShmnwsFo6yyB1WIrMBSes.cer (raw, json) Hash identifier: foYUaqSzj+6Uscvb6W4E24JYjMz9/7MQdmSuDwzcvSE= Subject key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3844671CDEFDB4DEF457B2DDE5803A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43273 IP: 5.252.172.0/22 IP: 91.196.248.0/22 IP: 91.238.168.0/22 IP: 185.149.244.0/22 IP: 2a12:6440::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:44:67:1c:de:fd:b4:de:f4:57:b2:dd:e5:80:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:4a:04:3d:30:61:7a:80:43:ca:99:f6:11: 4c:07:56:cb:17:a2:6b:af:4b:77:11:77:e3:4d:f8: c5:17:f8:92:17:3d:9b:75:8f:71:8c:5b:2e:c5:bb: 46:6e:9e:ff:c1:2f:62:b2:61:d0:2d:d7:6b:88:79: 2b:fd:55:85:da:c6:a7:de:30:e2:f4:4f:18:ca:be: 5d:7c:99:10:1e:20:f4:e9:34:4f:26:5b:02:2b:d5: 76:45:27:96:0e:42:ba:f4:5e:cb:f6:3f:1c:cd:24: ab:f5:8f:c1:4c:86:1d:f5:12:96:f8:2d:89:7c:5f: 66:f9:f0:98:a1:05:0c:3f:4b:14:b2:54:81:a3:75: 43:7a:22:1c:e1:bc:76:5d:e8:8e:2e:be:58:24:78: 13:d8:a4:9a:ac:e2:c4:f9:26:2a:61:b3:fc:04:2f: d9:e3:8d:10:fc:07:2f:f9:57:9e:3f:ff:be:ae:3a: cf:50:8f:76:5a:8b:be:72:b1:d5:ca:50:d3:52:2b: 80:c4:55:64:43:a2:52:eb:58:59:86:73:52:a5:2c: b8:d9:82:61:44:cd:9e:53:5b:e6:2f:2c:ba:db:88: 1f:ea:b2:11:08:d2:91:7a:1a:00:d6:e7:19:34:56: 4e:d4:bf:c4:50:1b:81:ee:d2:0a:ed:2f:08:19:c5: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.172.0/22 91.196.248.0/22 91.238.168.0/22 185.149.244.0/22 IPv6: 2a12:6440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43273 Signature Algorithm: sha256WithRSAEncryption 85:ab:0d:c7:7e:f9:ae:cf:fe:71:2d:95:3e:e8:ca:05:a4:c7: 53:bf:12:69:0b:c4:bb:32:d5:65:68:89:46:a2:fe:bf:2e:ab: 26:0c:99:77:83:f4:59:09:40:2b:76:46:56:e3:6b:0e:dd:4b: 48:88:2c:73:98:40:a6:dd:e9:69:35:fc:17:3e:5f:21:51:33: 59:bd:58:4c:cd:dd:19:fa:57:e8:91:30:08:64:3f:ae:2c:d6: 3b:f5:88:21:79:05:b0:e6:0f:39:9b:5c:fe:4c:a3:01:b9:8f: 6c:7b:90:42:b4:f8:e0:2d:26:55:f7:57:2b:81:90:ea:33:af: 08:5c:c0:13:28:e6:dc:06:53:5e:fd:88:a6:c6:25:02:d4:a6: 06:51:fe:c7:d1:b7:48:2c:04:9b:72:c1:f2:d9:a4:34:10:ff: 25:89:2e:73:7d:cb:09:fc:40:af:97:b0:5e:a0:01:3a:65:cd: 49:b9:8f:0d:c7:97:14:46:38:8d:f1:57:c7:97:56:a6:19:19: 92:37:79:95:ff:c8:5b:47:f4:b6:c2:28:6e:a6:19:fc:e3:78: 85:59:a5:40:c8:e9:72:ad:7c:08:02:7f:72:ef:74:85:ed:e5: 92:54:81:a9:8e:08:56:75:35:d6:c6:82:e7:d1:0d:47:44:e7: cd:20:9f:69 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+OERnHN79tN70V7Ld5YA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjZhZmMxNGQ0YTE5YTdjMmMxNjhlYjJjODFkNTYyMmIzMDE0OWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrFKBD0wYXqAQ8qZ9hFMB1bLF6Jr r0t3EXfjTfjFF/iSFz2bdY9xjFsuxbtGbp7/wS9ismHQLddriHkr/VWF2san3jDi 9E8Yyr5dfJkQHiD06TRPJlsCK9V2RSeWDkK69F7L9j8czSSr9Y/BTIYd9RKW+C2J fF9m+fCYoQUMP0sUslSBo3VDeiIc4bx2XeiOLr5YJHgT2KSarOLE+SYqYbP8BC/Z 440Q/Acv+VeeP/++rjrPUI92Wou+crHVylDTUiuAxFVkQ6JS61hZhnNSpSy42YJh RM2eU1vmLyy624gf6rIRCNKRehoA1ucZNFZO1L/EUBuB7tIK7S8IGcXZvQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFJZq/BTUoZp8LBaOssgdViKzAUnrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzFmN2M5 OC0xOGFhLTQ3ZDgtYWI0MS0xMTYxZWRiOWJmMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvMWY3Yzk4 LTE4YWEtNDdkOC1hYjQxLTExNjFlZGI5YmYwZS8xL2xtcjhGTlNobW53c0ZvNnl5 QjFXSXJNQlNlcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCBfysAwQCW8T4AwQCW+6oAwQCuZX0MA0EAgAC MAcDBQAqEmRAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCpCTANBgkqhkiG9w0B AQsFAAOCAQEAhasNx375rs/+cS2VPujKBaTHU78SaQvEuzLVZWiJRqL+vy6rJgyZ d4P0WQlAK3ZGVuNrDt1LSIgsc5hApt3paTX8Fz5fIVEzWb1YTM3dGfpX6JEwCGQ/ rizWO/WIIXkFsOYPOZtc/kyjAbmPbHuQQrT44C0mVfdXK4GQ6jOvCFzAEyjm3AZT Xv2IpsYlAtSmBlH+x9G3SCwEm3LB8tmkNBD/JYkuc33LCfxAr5ewXqABOmXNSbmP DceXFEY4jfFXx5dWphkZkjd5lf/IW0f0tsIobqYZ/ON4hVmlQMjpcq18CAJ/cu90 he3lklSBqY4IVnU11saC59ENR0TnzSCfaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:16 2026 by rpki-client