This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer File: lugqtki4s_iFdWnDmvlUSt_BfAE.cer (raw, json) Hash identifier: ZTIfWibydWI7pAr+O7AwMVd3wnNHhSP35cl0BlguIUE= Subject key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C709685213BB1D49D8F88F61ED962B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9103 AS: 13065 IP: 89.28.224.0/21 IP: 185.9.56.0/22 IP: 212.109.128.0/19 IP: 2a00:6c40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:09:68:52:13:bb:1d:49:d8:f8:8f:61:ed:96:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96e82ab648b8b3f8857569c39af9544adfc17c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:3a:1a:df:21:1c:a9:66:f1:63:30:dd:b4: b3:c6:f3:f8:b2:e8:d7:71:a5:51:9d:fa:f6:2f:36: 5c:57:13:f1:03:af:46:55:09:5a:ae:50:33:b7:c9: 36:5c:99:a4:9e:94:ea:66:dd:fb:a0:6a:c4:11:9e: 61:44:b5:af:25:98:57:81:1e:54:95:dc:d7:ff:cd: a3:9f:87:5a:57:8c:d6:7a:6b:35:41:bd:eb:0e:63: 59:ff:d3:75:4a:55:e3:66:a7:34:43:a3:97:d3:42: 2c:bb:de:65:ba:2b:01:45:e2:fb:9a:0e:c9:d4:43: 00:03:ad:77:46:b8:f8:cc:0c:b6:aa:09:b9:04:b8: 96:e5:47:70:9c:78:86:c0:7b:cf:7b:ef:b0:85:bd: a3:98:d6:dd:db:48:3f:95:a7:0e:2a:29:2b:e0:aa: 39:2c:a6:c6:d8:fc:0d:59:95:70:3d:37:37:e5:e1: 0a:61:ef:ab:d4:b9:11:a8:d8:b5:6a:c4:ac:9c:8c: d6:bf:31:42:66:5d:97:5f:b7:dc:73:56:36:7d:d9: ed:9e:a6:35:21:9e:21:61:50:51:3e:32:0b:20:b7: 7a:ba:75:85:7f:cd:46:cc:30:27:23:ae:17:7e:ee: 07:b2:e0:18:de:4f:de:ce:31:cf:de:d8:87:e3:17: ef:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.224.0/21 185.9.56.0/22 212.109.128.0/19 IPv6: 2a00:6c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9103 13065 Signature Algorithm: sha256WithRSAEncryption 74:e6:f6:48:8e:1f:7f:91:6d:b9:bc:83:ba:d7:4d:05:3a:a7: 21:60:ba:82:e2:3c:d6:77:5e:cc:01:1c:6b:8f:13:27:71:ba: 92:e8:67:3b:91:c0:58:87:91:43:f0:6a:5f:73:19:6c:10:45: 6f:3e:2a:77:b0:55:02:06:46:22:27:64:e7:51:af:ad:02:f5: 15:26:21:cc:36:5d:a4:5f:fc:a6:de:81:5d:20:d8:63:cb:86: 8e:6e:9e:e8:48:e9:2d:63:a6:e7:fb:e5:e8:8d:b4:7f:7c:50: a5:0c:56:02:2d:55:e0:75:8e:1d:f5:b1:a5:77:ef:0d:b8:20: 0a:ae:a6:cb:79:ff:f3:3c:46:aa:1f:ba:8b:05:f2:03:28:cb: 9b:29:2b:df:8e:d4:9e:ad:05:da:3b:1f:2f:19:91:fa:84:14: 99:38:46:f4:2d:1a:9e:20:56:f5:e6:07:b8:8f:28:21:d7:34: b8:97:40:75:e3:11:1d:8d:8f:0b:f8:5f:98:71:07:58:62:4a: 6d:90:1b:8b:36:39:cc:d2:d5:2a:c1:76:b1:dd:ea:95:7b:1a: e0:62:ee:7f:36:de:b6:15:7c:e6:d0:99:09:f1:9c:db:9c:81: 72:49:d6:a6:7e:39:6c:f4:1c:55:e4:43:8c:37:4c:da:b8:26: 01:72:8c:25 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt3xwloUhO7HUnY+I9h7ZYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmU4MmFiNjQ4YjhiM2Y4ODU3NTY5YzM5YWY5NTQ0YWRmYzE3YzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfM6Gt8hHKlm8WMw3bSzxvP4sujX caVRnfr2LzZcVxPxA69GVQlarlAzt8k2XJmknpTqZt37oGrEEZ5hRLWvJZhXgR5U ldzX/82jn4daV4zWems1Qb3rDmNZ/9N1SlXjZqc0Q6OX00Isu95luisBReL7mg7J 1EMAA613Rrj4zAy2qgm5BLiW5UdwnHiGwHvPe++whb2jmNbd20g/lacOKikr4Ko5 LKbG2PwNWZVwPTc35eEKYe+r1LkRqNi1asSsnIzWvzFCZl2XX7fcc1Y2fdntnqY1 IZ4hYVBRPjILILd6unWFf81GzDAnI64Xfu4HsuAY3k/ezjHP3tiH4xfv9QIDAQAB o4ICvjCCArowHQYDVR0OBBYEFJboKrZIuLP4hXVpw5r5VErfwXwBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzI0MjZm MS04ZjJhLTQ5ZmYtODY0My0xOTNhZDVjNzliODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMjQyNmYx LThmMmEtNDlmZi04NjQzLTE5M2FkNWM3OWI4My8xL2x1Z3F0a2k0c19pRmRXbkRt dmxVU3RfQmZBRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDWRzgAwQCuQk4AwQF1G2AMA0EAgACMAcDBQAq AGxAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAiOPAgIzCTANBgkqhkiG9w0BAQsF AAOCAQEAdOb2SI4ff5FtubyDutdNBTqnIWC6guI81ndezAEca48TJ3G6kuhnO5HA WIeRQ/BqX3MZbBBFbz4qd7BVAgZGIidk51GvrQL1FSYhzDZdpF/8pt6BXSDYY8uG jm6e6EjpLWOm5/vl6I20f3xQpQxWAi1V4HWOHfWxpXfvDbggCq6my3n/8zxGqh+6 iwXyAyjLmykr347Unq0F2jsfLxmR+oQUmThG9C0aniBW9eYHuI8oIdc0uJdAdeMR HY2PC/hfmHEHWGJKbZAbizY5zNLVKsF2sd3qlXsa4GLufzbethV85tCZCfGc25yB cknWpn45bPQcVeRDjDdM2rgmAXKMJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:03 2026 by rpki-client