This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer File: ltzrqozTLcS_HWbQhzobbz1zSY8.cer (raw, json) Hash identifier: VwVpk1Z0HjV0t/Nxqvk00LWQRWMZ/CH2zoGU6R0H7Ic= Subject key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC855966B15B7EFE388868D45D0C180 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209621 IP: 139.28.116.0/22 IP: 2a07:5fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:55:96:6b:15:b7:ef:e3:88:86:8d:45:d0:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:e3:91:b7:8a:c7:8f:ec:3c:43:8b:38:93: 11:38:8d:93:c1:39:c9:68:0e:23:11:db:48:93:a5: 62:6b:10:40:26:6d:a1:06:1c:1d:69:ea:e8:2e:3b: 8e:61:78:b6:1d:84:70:b8:d2:7c:48:e6:6b:0b:b2: 8b:c4:d8:14:bf:9f:77:ff:60:cb:11:82:b9:89:27: 80:cf:a1:a2:2e:18:e1:b4:9a:b7:cf:b1:b1:77:63: d2:32:ea:5d:26:d2:d4:ac:0f:65:0e:f2:c5:95:80: 4d:0b:1a:97:a1:23:9c:69:14:e9:64:49:08:82:29: 49:2b:de:26:75:39:5c:de:4d:29:96:be:aa:65:b1: ea:c9:e1:57:4f:a0:2d:12:f7:02:a8:42:40:c4:25: f2:7a:3a:cb:10:33:64:d7:90:2f:65:fb:cd:74:92: fe:a5:8c:79:8d:0a:ef:26:69:fc:91:83:71:a9:04: 92:a7:fb:16:f1:bf:71:bf:e4:11:35:8e:f2:d8:fe: a3:88:a3:74:5f:84:5c:e5:d2:53:b8:cb:35:c2:86: 85:74:82:b8:c3:8d:9b:fb:5a:0e:9b:e2:24:8e:da: 72:41:2a:80:8a:3c:db:f0:c9:ba:f0:1d:b2:fc:b3: f7:94:1a:38:35:39:75:e9:f7:7b:48:10:40:70:ff: 5b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.116.0/22 IPv6: 2a07:5fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209621 Signature Algorithm: sha256WithRSAEncryption 27:e5:10:b8:48:02:97:8c:49:05:b8:4b:32:b9:61:4c:a6:c9: 02:47:43:25:86:b1:41:65:9a:b2:b9:b7:fc:60:ba:ae:6a:7a: ad:0a:21:f2:52:5c:3a:a1:fc:d5:e6:e4:29:6b:d4:e6:b9:b8: cd:6b:4c:0a:16:be:ef:72:bd:66:de:c9:15:ea:4b:df:e4:7c: 84:a7:b8:31:5d:25:73:d7:b7:3b:74:f9:e0:7b:4d:22:e1:ed: 03:fb:e4:e9:a1:9e:96:9f:5f:93:3b:ee:cc:72:c7:a8:75:be: e4:98:a8:34:2c:83:90:88:5f:fa:33:60:7e:51:5a:3a:a3:28: c1:ab:12:bf:b4:4e:0e:77:c2:03:87:42:26:ed:fa:95:83:1a: 08:8f:8d:58:64:3a:69:9e:b1:10:05:ab:3b:7f:38:77:ea:62: bd:67:39:7b:ed:63:57:1d:fc:b5:2e:ab:da:35:53:e9:43:9a: 8f:b1:4c:7d:33:ce:d6:48:50:c1:42:e9:24:0b:a7:36:2f:2d: 79:b2:b0:d2:8f:82:eb:b2:b8:91:2e:b0:eb:d1:2b:f5:1a:41: f9:c7:38:5a:ca:69:db:6e:a1:20:2b:05:ba:19:dd:59:7f:36: fc:e7:87:07:cb:59:88:37:00:11:9c:09:f2:70:71:b7:00:0b: 37:bf:05:56 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yFWWaxW37+OIho1F0MGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRjZWJhYThjZDMyZGM0YmYxZDY2ZDA4NzNhMWI2ZjNkNzM0OThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF/jkbeKx4/sPEOLOJMROI2TwTnJ aA4jEdtIk6ViaxBAJm2hBhwdaeroLjuOYXi2HYRwuNJ8SOZrC7KLxNgUv593/2DL EYK5iSeAz6GiLhjhtJq3z7Gxd2PSMupdJtLUrA9lDvLFlYBNCxqXoSOcaRTpZEkI gilJK94mdTlc3k0plr6qZbHqyeFXT6AtEvcCqEJAxCXyejrLEDNk15AvZfvNdJL+ pYx5jQrvJmn8kYNxqQSSp/sW8b9xv+QRNY7y2P6jiKN0X4Rc5dJTuMs1woaFdIK4 w42b+1oOm+IkjtpyQSqAijzb8Mm68B2y/LP3lBo4NTl16fd7SBBAcP9bZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJbc66qM0y3Evx1m0Ic6G289c0mPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzA2OTdj MC05OGFlLTQ0YWItYjRhYi1iNjE1YzVjNjA2NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvMDY5N2Mw LTk4YWUtNDRhYi1iNGFiLWI2MTVjNWM2MDY1Mi8xL2x0enJxb3pUTGNTX0hXYlFo em9iYnoxelNZOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCixx0MA0EAgACMAcDBQMqB1/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMy1TANBgkqhkiG9w0BAQsFAAOCAQEAJ+UQuEgCl4xJ BbhLMrlhTKbJAkdDJYaxQWWasrm3/GC6rmp6rQoh8lJcOqH81ebkKWvU5rm4zWtM Cha+73K9Zt7JFepL3+R8hKe4MV0lc9e3O3T54HtNIuHtA/vk6aGelp9fkzvuzHLH qHW+5JioNCyDkIhf+jNgflFaOqMowasSv7RODnfCA4dCJu36lYMaCI+NWGQ6aZ6x EAWrO384d+pivWc5e+1jVx38tS6r2jVT6UOaj7FMfTPO1khQwULpJAunNi8tebKw 0o+C67K4kS6w69Er9RpB+cc4Wspp226hICsFuhndWX82/OeHB8tZiDcAEZwJ8nBx twALN78FVg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:45 2026 by rpki-client