This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer File: lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer (raw, json) Hash identifier: QlGMXEQ/m1mLAvz6xtP7d/wO+Q07Lw67bGH9MZgpJa0= Subject key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3A9BE3DF7D72E8FA07001A9039305 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43286 AS: 49088 IP: 45.86.108.0/22 IP: 45.90.92.0/22 IP: 45.135.68.0/22 IP: 62.146.244.0/22 IP: 91.212.72.0/23 IP: 91.212.160.0/23 IP: 185.1.124.0/24 IP: 185.144.72.0/22 IP: 185.214.200.0/22 IP: 185.216.184.0/22 IP: 195.39.250.0 -- 195.39.253.255 IP: 2001:7f8:cf::/48 IP: 2a07:3d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a9:be:3d:f7:d7:2e:8f:a0:70:01:a9:03:93:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:4b:0a:80:a1:38:99:23:53:f0:cc:ac:e7: 83:83:69:c5:74:f8:f5:41:af:26:8a:b1:5c:ba:3d: 8d:95:fb:ec:6b:f2:27:98:c6:32:62:5a:7b:f3:3c: ab:32:0f:a8:00:96:f6:b6:05:94:90:17:71:ba:8c: 43:7a:ef:a1:ab:54:77:e2:e1:4c:61:78:8e:cc:32: 62:e2:17:5a:d0:f8:0e:dc:dc:2f:73:fd:3c:f2:28: 9b:4f:28:2c:47:fb:90:f0:aa:11:7a:46:27:e2:e3: f8:9d:a9:08:9b:df:ad:58:85:4a:02:ca:f5:ee:d7: d3:ae:1d:2e:2e:77:17:48:a1:25:af:93:4c:c8:3d: e0:de:a6:ad:ae:ac:d5:fe:0f:69:22:c8:3b:e0:40: 56:07:7d:e7:bf:06:5b:82:da:9f:6e:58:71:38:fe: f4:9d:52:cc:36:50:3c:7a:eb:40:18:e1:65:d2:63: 69:11:13:e4:e9:ba:57:18:12:47:d0:4d:29:93:c4: f7:29:39:86:1a:0c:0e:b7:96:c8:fd:c8:37:85:02: 5d:6e:aa:fa:e6:a1:64:52:25:61:b6:92:74:30:80: a1:dd:12:19:9c:d3:43:b7:73:e0:fb:4f:64:99:4c: 1a:2a:40:ee:77:27:0b:3a:25:bd:90:68:bd:ed:50: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.108.0/22 45.90.92.0/22 45.135.68.0/22 62.146.244.0/22 91.212.72.0/23 91.212.160.0/23 185.1.124.0/24 185.144.72.0/22 185.214.200.0/22 185.216.184.0/22 195.39.250.0-195.39.253.255 IPv6: 2001:7f8:cf::/48 2a07:3d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43286 49088 Signature Algorithm: sha256WithRSAEncryption 5e:4d:13:93:d1:47:be:48:fc:75:3e:20:da:dd:ad:be:0e:80: a3:eb:6f:41:96:72:4b:15:32:53:da:4b:80:2e:9d:94:38:99: dd:14:2e:70:e2:8f:83:7a:0d:07:2c:1f:58:4b:ca:d1:f8:46: 9f:73:92:a0:c6:14:0d:75:27:39:65:b4:25:ef:53:25:d8:1a: 82:48:30:a3:36:a1:9b:46:e0:a9:e2:fb:dc:0a:ef:63:92:27: d6:5a:19:51:63:24:ac:05:b5:20:d0:86:49:88:98:63:8a:cd: 17:1f:e7:c2:ed:28:5d:93:9e:bd:8a:01:d5:3f:4f:26:0c:25: fb:f2:e6:57:e2:bd:f7:3a:11:3c:ae:59:ca:cf:2b:78:b8:86: 8f:db:ca:5e:53:23:2d:f6:f8:8d:67:3c:84:36:f6:0d:83:9b: 13:4d:e4:5c:a0:cf:8f:14:fd:76:38:86:bc:9d:2f:2e:9b:8c: c5:03:f9:a5:77:cb:b5:25:ae:bd:06:f4:d8:d1:d4:1e:b3:ec: a7:eb:af:25:f7:6b:c6:2a:ff:9e:e2:eb:df:94:df:31:3e:2d: 8a:99:e5:76:14:d6:fd:08:78:d1:2b:4f:b3:50:13:71:83:e4: 7e:3a:86:72:a8:87:cb:7c:8e:72:96:d3:d5:33:4b:bf:04:c7: ff:1a:3f:dc -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISAZt7o6m+PffXLo+gcAGpA5MFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmFiNDY5N2E2YTQ4ZjZjNmM2OTNlMzgzOWJmZDViM2ZiMGUzYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYRLCoChOJkjU/DMrOeDg2nFdPj1 Qa8mirFcuj2Nlfvsa/InmMYyYlp78zyrMg+oAJb2tgWUkBdxuoxDeu+hq1R34uFM YXiOzDJi4hda0PgO3Nwvc/088iibTygsR/uQ8KoRekYn4uP4nakIm9+tWIVKAsr1 7tfTrh0uLncXSKElr5NMyD3g3qatrqzV/g9pIsg74EBWB33nvwZbgtqfblhxOP70 nVLMNlA8eutAGOFl0mNpERPk6bpXGBJH0E0pk8T3KTmGGgwOt5bI/cg3hQJdbqr6 5qFkUiVhtpJ0MICh3RIZnNNDt3Pg+09kmUwaKkDudycLOiW9kGi97VDqJQIDAQAB o4IDATCCAv0wHQYDVR0OBBYEFJarRpempI9sbGk+ODm/1bP7DjvxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzM3MWNh OS01NmFkLTRkMTItOTZmNC0zYjFlNzIyYTlkYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvMzcxY2E5 LTU2YWQtNGQxMi05NmY0LTNiMWU3MjJhOWRjOC8xL2xxdEdsNmFrajJ4c2FUNDRP Yl9Wc19zT09fRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHsGCCsGAQUF BwEHAQH/BGwwajBQBAIAATBKAwQCLVZsAwQCLVpcAwQCLYdEAwQCPpL0AwQBW9RI AwQBW9SgAwQAuQF8AwQCuZBIAwQCudbIAwQCudi4MAwDBAHDJ/oDBAHDJ/wwFgQC AAIwEAMHACABB/gAzwMFAyoHPQAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAKkW AgMAv8AwDQYJKoZIhvcNAQELBQADggEBAF5NE5PRR75I/HU+INrdrb4OgKPrb0GW cksVMlPaS4AunZQ4md0ULnDij4N6DQcsH1hLytH4Rp9zkqDGFA11JzlltCXvUyXY GoJIMKM2oZtG4Kni+9wK72OSJ9ZaGVFjJKwFtSDQhkmImGOKzRcf58LtKF2Tnr2K AdU/TyYMJfvy5lfivfc6ETyuWcrPK3i4ho/byl5TIy32+I1nPIQ29g2DmxNN5Fyg z48U/XY4hrydLy6bjMUD+aV3y7Ulrr0G9NjR1B6z7KfrryX3a8Yq/57i69+U3zE+ LYqZ5XYU1v0IeNErT7NQE3GD5H46hnKoh8t8jnKW09UzS78Ex/8aP9w= -----END CERTIFICATE-----Generated at Tue Feb 10 02:49:32 2026 by rpki-client