This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer File: luWtU7_HOEDEJXEcAQRTVxBX3CM.cer (raw, json) Hash identifier: r13bNjFEJLLmjHktzw+34iQNmT1p9qnIwolmJ9uA684= Subject key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDBD0B1323E31550FC4427488007D134A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 14:30:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215197 IP: 204.57.220.0/24 IP: 2001:67c:e40::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:d0:b1:32:3e:31:55:0f:c4:42:74:88:00:7d:13:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 14:30:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96e5ad53bfc73840c425711c010453571057dc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:cb:f0:ee:22:a6:2a:f8:ac:0b:6d:0f:6c: f6:f6:e3:df:3c:74:eb:62:e3:4d:d1:0c:67:0b:bb: f1:95:50:66:1c:df:63:f5:dc:fa:07:70:23:bb:27: 7d:62:79:09:fe:ba:0d:e6:67:eb:38:bf:01:c4:bd: 74:49:a7:66:69:51:ec:14:f4:c7:dc:e7:70:81:20: 2d:9f:aa:33:d3:cd:02:f1:81:c7:fb:7e:53:5f:19: 8b:ed:19:f4:8e:a9:a9:1b:9c:20:e1:a5:df:97:d2: 59:d0:08:36:a9:60:c4:9e:52:94:a6:da:77:42:d7: f9:d4:9e:38:bb:10:a7:8e:58:3a:0f:6c:ae:83:81: 4f:a3:cf:f7:be:59:7a:88:c1:e3:85:cf:dd:94:11: e4:34:5b:92:c6:68:19:c8:d7:24:78:e1:e1:0d:73: 53:9a:e6:c9:09:b1:0f:9a:be:4e:0c:a6:36:8b:c9: 19:41:7b:c1:5f:57:62:9b:56:51:30:a5:b7:6f:98: 29:53:e2:58:4d:4d:59:cc:cc:0f:af:c1:72:4a:01: a9:5d:8d:ea:75:ba:89:18:a8:48:d2:c1:ca:04:86: ad:90:c7:3e:b5:63:22:24:f2:be:2a:80:1b:cf:a8: e7:8d:8c:1a:fd:63:26:e9:df:cb:f7:4a:b1:26:de: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.57.220.0/24 IPv6: 2001:67c:e40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215197 Signature Algorithm: sha256WithRSAEncryption 4a:83:23:08:4c:ae:4e:0e:e0:9e:a3:5b:5f:cb:4b:2e:fd:c4: 5f:8e:04:c8:93:27:04:b0:e7:cc:4a:4d:fb:69:cb:87:9a:b7: c5:ec:d0:87:d4:f1:f7:71:b9:74:37:21:a5:42:04:43:8c:c7: 5b:b9:77:f3:4b:c3:2f:46:e3:74:3f:e5:18:de:21:62:7a:07: 1d:3e:c2:b3:0c:08:c3:7e:aa:fa:42:db:92:3a:3d:7a:8a:34: 11:0b:72:d5:91:3d:56:b2:90:43:ce:8d:10:9d:28:97:8a:63: a6:6f:1a:1d:2c:af:cc:1c:c0:36:ed:9f:81:8b:6b:d2:df:f0: 05:f1:10:e2:3c:6c:bb:17:c2:b7:b4:5e:3f:eb:d6:5c:2b:da: 33:bc:ee:2e:a8:ba:2f:2d:e2:b6:61:30:47:10:0e:05:a9:5a: 10:92:d2:a3:a7:44:5a:0a:7b:bb:a4:8d:62:81:77:f4:20:82: 1b:1f:85:b5:23:cd:38:da:26:97:7c:ca:93:4f:9e:0c:21:86: fe:43:71:82:ef:b1:11:0f:66:97:ff:43:a2:74:aa:51:b5:26: 35:c3:54:a7:d7:44:e4:d2:9a:c4:0e:47:15:d3:4f:4a:60:41: 63:4b:a7:00:0d:61:99:27:da:60:9d:2e:b1:62:a5:7c:2f:49: 4d:ba:79:0f -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZvb0LEyPjFVD8RCdIgAfRNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTQzMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmU1YWQ1M2JmYzczODQwYzQyNTcxMWMwMTA0NTM1NzEwNTdkYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyvL8O4ipir4rAttD2z29uPfPHTr YuNN0QxnC7vxlVBmHN9j9dz6B3Ajuyd9YnkJ/roN5mfrOL8BxL10SadmaVHsFPTH 3OdwgSAtn6oz080C8YHH+35TXxmL7Rn0jqmpG5wg4aXfl9JZ0Ag2qWDEnlKUptp3 Qtf51J44uxCnjlg6D2yug4FPo8/3vll6iMHjhc/dlBHkNFuSxmgZyNckeOHhDXNT mubJCbEPmr5ODKY2i8kZQXvBX1dim1ZRMKW3b5gpU+JYTU1ZzMwPr8FySgGpXY3q dbqJGKhI0sHKBIatkMc+tWMiJPK+KoAbz6jnjYwa/WMm6d/L90qxJt67mQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFJblrVO/xzhAxCVxHAEEU1cQV9wjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzJkOGU2 Yy02OWUyLTQ3Y2ItYmY4ZC1lZjlhNTg0YmQxMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvMmQ4ZTZj LTY5ZTItNDdjYi1iZjhkLWVmOWE1ODRiZDExMy8xL2x1V3RVN19IT0VERUpYRWNB UVJUVnhCWDNDTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAzDncMA8EAgACMAkDBwAgAQZ8DkAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDA0idMA0GCSqGSIb3DQEBCwUAA4IBAQBKgyMITK5O DuCeo1tfy0su/cRfjgTIkycEsOfMSk37acuHmrfF7NCH1PH3cbl0NyGlQgRDjMdb uXfzS8MvRuN0P+UY3iFiegcdPsKzDAjDfqr6QtuSOj16ijQRC3LVkT1WspBDzo0Q nSiXimOmbxodLK/MHMA27Z+Bi2vS3/AF8RDiPGy7F8K3tF4/69ZcK9ozvO4uqLov LeK2YTBHEA4FqVoQktKjp0RaCnu7pI1igXf0IIIbH4W1I8042iaXfMqTT54MIYb+ Q3GC77ERD2aX/0OidKpRtSY1w1Sn10Tk0prEDkcV009KYEFjS6cADWGZJ9pgnS6x YqV8L0lNunkP -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:02 2026 by rpki-client