This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer File: luqxm-wiLHBaHrA6gN80FTnZfxQ.cer (raw, json) Hash identifier: RNq8EoYFNtclVJXWZgUUx5TcW2d2Es4s93q2M11yc+k= Subject key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36718366D46E3430876DF981C47768 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.202.119.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:71:83:66:d4:6e:34:30:87:6d:f9:81:c4:77:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96eab19bec222c705a1eb03a80df341539d97f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:41:49:37:ee:54:49:b5:b9:8e:ed:56:87: 98:e7:d2:70:42:f6:3f:36:bc:61:2d:2d:04:78:18: 39:92:44:cf:5f:f3:65:98:38:68:6d:c9:b3:f9:f7: d9:0b:3b:ec:8e:f6:95:cc:18:b6:9a:b5:26:4e:9f: 25:12:d0:0e:ef:14:e7:f6:ae:07:0f:1c:3d:22:62: 03:82:c8:40:8f:98:df:1c:d6:05:76:7c:58:69:07: 02:3c:0e:64:b1:16:cc:5f:b4:24:25:11:f8:e9:1c: 91:20:b9:f9:fd:6f:a0:7c:dd:0a:e0:be:24:36:83: f9:73:95:7e:2f:14:78:a6:a7:de:cf:99:84:e6:f8: f2:eb:f7:c6:40:39:5e:af:1f:24:fb:30:72:24:d0: 7c:4f:9e:80:43:6d:65:93:18:67:24:fb:db:93:f1: d8:35:2b:5b:af:b9:95:57:69:a3:3a:12:5a:1a:d3: b0:f9:eb:e0:a0:90:cb:05:14:9f:c1:9c:a2:12:10: 42:b0:64:c7:7e:ff:6b:31:40:fc:ab:20:ae:2c:6f: f3:f1:bc:e1:3e:db:a0:9a:79:2e:9e:32:9c:a2:d4: 43:e3:d9:0f:52:5e:e7:06:e1:0a:38:60:fc:d3:7a: 62:95:6c:5a:47:c5:e7:c1:1d:00:06:b3:c0:33:b2: 5f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:40:cd:19:a5:0e:13:ab:a1:d9:a0:d4:78:fb:f2:aa:eb:f1: 25:3d:1f:99:dc:79:1a:e3:fe:3a:47:27:fb:1c:36:d1:dc:dc: 05:66:d1:57:d5:9f:c8:55:9f:4f:dc:53:2c:ff:47:27:36:e1: f8:ef:b0:2b:7e:5f:fc:ec:51:ce:71:18:c0:7b:8a:a7:8e:93: 4d:e9:52:f9:82:8d:36:4e:b9:fb:cf:b4:ec:09:de:5c:f5:39: ae:af:e2:82:be:26:fa:89:9e:18:16:e5:4f:3e:b6:50:e0:6d: 0c:bc:c8:f9:9d:7f:71:32:b1:7b:b8:55:75:53:b4:b8:cf:29: 9b:dd:9c:33:81:cb:40:2b:ae:73:e0:49:2a:21:6f:93:73:74: 78:e7:86:5e:46:84:4a:7a:ec:11:44:51:f3:49:69:ee:95:1d: ba:08:8a:a9:af:93:e7:8a:49:af:eb:74:89:b6:00:5a:68:8c: b1:5e:77:6a:ca:aa:57:61:eb:b9:00:40:eb:f9:5c:ae:20:d9: e8:77:59:03:b9:fb:85:be:52:59:91:3e:4d:1b:25:51:ea:34: de:6e:dc:bc:6b:0f:e6:de:08:12:1f:70:7b:08:e9:fd:21:72: 35:96:7e:9d:94:6e:75:aa:da:93:91:96:f5:9c:41:ea:10:fa: 1e:19:ee:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NnGDZtRuNDCHbfmBxHdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmVhYjE5YmVjMjIyYzcwNWExZWIwM2E4MGRmMzQxNTM5ZDk3ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qJBSTfuVEm1uY7tVoeY59JwQvY/ NrxhLS0EeBg5kkTPX/NlmDhobcmz+ffZCzvsjvaVzBi2mrUmTp8lEtAO7xTn9q4H Dxw9ImIDgshAj5jfHNYFdnxYaQcCPA5ksRbMX7QkJRH46RyRILn5/W+gfN0K4L4k NoP5c5V+LxR4pqfez5mE5vjy6/fGQDlerx8k+zByJNB8T56AQ21lkxhnJPvbk/HY NStbr7mVV2mjOhJaGtOw+evgoJDLBRSfwZyiEhBCsGTHfv9rMUD8qyCuLG/z8bzh PtugmnkunjKcotRD49kPUl7nBuEKOGD803pilWxaR8XnwR0ABrPAM7Jf1QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJbqsZvsIixwWh6wOoDfNBU52X8UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2Q3N2E2 MC0xMjI3LTRkZTctOTdiYi00MTAwNjFlMzU3NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZDc3YTYw LTEyMjctNGRlNy05N2JiLTQxMDA2MWUzNTc2YS8xL2x1cXhtLXdpTEhCYUhyQTZn TjgwRlRuWmZ4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcp3MA0GCSqGSIb3DQEBCwUAA4IBAQAfQM0Z pQ4Tq6HZoNR4+/Kq6/ElPR+Z3Hka4/46Ryf7HDbR3NwFZtFX1Z/IVZ9P3FMs/0cn NuH477Arfl/87FHOcRjAe4qnjpNN6VL5go02Trn7z7TsCd5c9Tmur+KCvib6iZ4Y FuVPPrZQ4G0MvMj5nX9xMrF7uFV1U7S4zymb3ZwzgctAK65z4EkqIW+Tc3R454Ze RoRKeuwRRFHzSWnulR26CIqpr5Pnikmv63SJtgBaaIyxXndqyqpXYeu5AEDr+Vyu INnod1kDufuFvlJZkT5NGyVR6jTebty8aw/m3ggSH3B7COn9IXI1ln6dlG51qtqT kZb1nEHqEPoeGe6e -----END CERTIFICATE-----Generated at Mon Jan 26 22:34:43 2026 by rpki-client