This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer File: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer (raw, json) Hash identifier: n3tQT/F3sxZ0HNmcsiFNuKTkK9uS5+u62cCbxdHRByw= Subject key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36922BE86CB7266989048E185022D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59771 IP: 185.205.24.0/22 IP: 193.105.119.0/24 IP: 195.85.224.0/24 IP: 2001:678:39c::/48 IP: 2a0b:c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:92:2b:e8:6c:b7:26:69:89:04:8e:18:50:22:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d4:bd:2a:7e:65:59:61:5f:cd:38:34:e1:b9: 6b:33:0f:9c:e3:62:7e:13:cc:8a:59:52:a9:17:79: c6:bf:c6:34:f1:12:7c:e6:99:7f:e5:4c:2e:7c:4c: 2b:85:ec:44:2b:aa:d8:99:e6:fb:f9:a9:c9:4e:a4: 5b:e2:91:36:ca:4a:c1:e6:f6:93:58:d7:e9:ca:74: f5:e1:62:94:ca:1b:c9:29:0c:d2:ae:e2:1f:56:ba: cf:8d:0f:b3:8d:7a:11:80:55:f3:56:35:05:db:e6: ae:34:fd:5a:ca:cc:f6:b8:c1:15:05:1f:6e:b8:51: 95:f0:95:fa:95:99:54:52:19:45:c9:60:44:48:ca: d3:f7:ff:d6:8f:f0:f5:d7:80:48:58:16:ad:fb:ae: 42:e8:68:f1:b9:97:0f:d1:67:d2:f8:bd:93:53:85: bf:79:06:20:41:84:78:42:9c:03:5f:43:1b:0f:55: 01:d1:6c:42:a0:8d:98:c6:27:08:71:5f:cf:2c:b6: c0:a4:7a:b8:d9:e0:27:62:3b:39:b8:de:81:10:cb: 91:4c:56:6d:a9:16:8d:53:64:06:a4:d6:2b:a6:9d: e7:9f:dd:00:61:86:90:3e:da:60:b5:ad:65:fd:29: 07:27:20:5f:c1:86:e7:3d:2f:cf:d0:0f:b1:d3:70: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.24.0/22 193.105.119.0/24 195.85.224.0/24 IPv6: 2001:678:39c::/48 2a0b:c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59771 Signature Algorithm: sha256WithRSAEncryption 99:ab:eb:83:21:b2:89:2d:64:3e:b7:67:55:70:64:4e:fe:07: 12:d8:29:44:19:f0:b7:c0:c5:cb:f5:32:ff:55:57:96:e1:b4: cf:b6:81:3c:b7:b8:6b:9f:ca:e9:c0:87:10:4e:19:60:96:42: b0:cb:e8:b8:fd:2a:80:03:11:79:f1:79:5f:98:d8:c8:33:41: 64:57:1f:cf:fa:4a:e8:03:3a:0f:4b:a4:36:43:95:91:c7:b5: fd:c2:5d:d4:1c:e7:2a:ea:f4:3f:78:b1:8d:db:e1:c0:47:c3: 11:10:b2:44:3b:b4:e1:98:2d:4a:0e:56:07:a1:7c:d2:af:aa: 6a:f6:a1:bc:02:77:de:d9:8a:65:87:17:df:8d:4f:1f:1f:15: 1e:54:90:90:c8:50:6e:5c:9d:5a:18:4c:47:34:5c:8a:ce:94: ed:b4:53:1f:08:b1:19:3c:52:3a:dd:ab:25:09:a4:c8:26:2a: d4:44:f3:fe:2c:f8:98:c5:a6:94:85:0a:06:66:a5:a2:b1:07: 80:0e:f2:cf:3c:e4:4a:d4:16:59:75:ae:36:18:1f:06:62:8d: 24:6b:41:c2:74:66:68:c4:78:76:c1:7c:79:94:91:9a:9d:c9: dd:0e:18:d0:f5:05:d0:9e:af:66:62:12:a2:83:38:9b:01:1e: 6f:3f:46:63 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt7NpIr6Gy3JmmJBI4YUCLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmQ3YmE2NTE0MDNkMThkZGRiN2E3NGIyMGRkYzIxZGViOTQyMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tS9Kn5lWWFfzTg04blrMw+c42J+ E8yKWVKpF3nGv8Y08RJ85pl/5UwufEwrhexEK6rYmeb7+anJTqRb4pE2ykrB5vaT WNfpynT14WKUyhvJKQzSruIfVrrPjQ+zjXoRgFXzVjUF2+auNP1aysz2uMEVBR9u uFGV8JX6lZlUUhlFyWBESMrT9//Wj/D114BIWBat+65C6GjxuZcP0WfS+L2TU4W/ eQYgQYR4QpwDX0MbD1UB0WxCoI2YxicIcV/PLLbApHq42eAnYjs5uN6BEMuRTFZt qRaNU2QGpNYrpp3nn90AYYaQPtpgta1l/SkHJyBfwYbnPS/P0A+x03BNLQIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFJbXumUUA9GN3benSyDdwh3rlCIOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzBkMzNj OS02YTg0LTRjZTMtODFiMC00MThhZjkwYWNiOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMGQzM2M5 LTZhODQtNGNlMy04MWIwLTQxOGFmOTBhY2I4YS8xL2x0ZTZaUlFEMFkzZHQ2ZExJ TjNDSGV1VUlnNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAYBAIAATASAwQCuc0YAwQAwWl3AwQAw1XgMBYEAgACMBADBwAg AQZ4A5wDBQMqCwDAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDpezANBgkqhkiG 9w0BAQsFAAOCAQEAmavrgyGyiS1kPrdnVXBkTv4HEtgpRBnwt8DFy/Uy/1VXluG0 z7aBPLe4a5/K6cCHEE4ZYJZCsMvouP0qgAMRefF5X5jYyDNBZFcfz/pK6AM6D0uk NkOVkce1/cJd1BznKur0P3ixjdvhwEfDERCyRDu04ZgtSg5WB6F80q+qavahvAJ3 3tmKZYcX341PHx8VHlSQkMhQblydWhhMRzRcis6U7bRTHwixGTxSOt2rJQmkyCYq 1ETz/iz4mMWmlIUKBmalorEHgA7yzzzkStQWWXWuNhgfBmKNJGtBwnRmaMR4dsF8 eZSRmp3J3Q4Y0PUF0J6vZmISooM4mwEebz9GYw== -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:04 2026 by rpki-client