This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer (raw, json) Hash identifier: wFZOOMakTw9h14YuKOsaXm52iDORQ00xwsm+2KhNu9w= Subject key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791083AE38CC29A5F2BDB4B75DF45186 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47242 IP: 81.31.144.0/20 IP: 149.62.184.0/21 IP: 185.84.96.0/22 IP: 185.201.64.0/22 IP: 192.81.193.0/24 IP: 2a01:a600::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:83:ae:38:cc:29:a5:f2:bd:b4:b7:5d:f4:51:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:48:b4:33:7a:cd:88:5a:6a:f7:b7:5b:d2: e7:ae:3d:e8:40:eb:6b:eb:8d:bf:b0:a6:33:de:38: e3:ab:02:08:a7:84:23:7b:13:e0:dd:04:26:38:93: a0:52:1e:36:99:f3:3e:1d:a4:48:b2:1f:6d:1e:0c: 8a:84:cc:43:a1:8f:1c:7a:9b:94:84:c6:3b:eb:39: 69:2b:00:d1:1d:6a:0a:cf:ff:40:94:90:b3:60:74: 71:b6:01:54:99:dd:1d:86:1e:b9:08:43:65:b5:e1: 75:46:bb:44:28:39:63:52:a7:4a:d6:64:9c:47:8b: e7:cc:c1:fb:a1:bf:2a:c1:41:cc:47:32:da:9e:6f: 6d:2d:5d:5d:44:28:81:e5:6a:62:57:97:9c:5a:7b: ee:8d:96:58:b2:bf:27:eb:17:8d:8d:a5:e5:9e:76: 76:18:01:5c:60:59:55:9e:88:40:3a:d0:eb:47:98: ed:f2:4a:66:33:88:72:8b:68:e9:ca:3d:6c:ef:0d: 82:d2:df:a3:81:70:eb:c0:b4:5f:d1:e4:d6:d5:41: 4d:40:26:53:77:e7:f1:d1:86:cd:c0:ba:fd:02:40: 31:b6:5d:75:9a:b3:0b:39:3f:c5:55:e6:f4:19:fc: 4a:a7:d2:f2:ee:c7:46:4e:b7:f4:48:ad:9a:94:f3: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.144.0/20 149.62.184.0/21 185.84.96.0/22 185.201.64.0/22 192.81.193.0/24 IPv6: 2a01:a600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47242 Signature Algorithm: sha256WithRSAEncryption 25:48:56:89:91:23:91:ba:5a:97:24:8b:b8:5b:16:43:4f:11: 0f:cd:25:11:95:06:77:ed:17:f7:5f:a9:8d:cc:57:6a:a3:1c: c1:29:de:0f:8d:cc:0a:69:0c:42:12:ec:8d:5c:40:df:f3:ea: 31:c2:26:a2:86:b9:f8:fe:08:62:40:6a:32:f6:ab:03:a5:dd: 4d:00:a7:dd:75:e6:c7:62:2e:59:63:e6:5d:8c:af:71:8d:b8: c2:e9:25:16:42:71:0b:20:bb:59:aa:e3:cc:1b:48:43:b2:8b: d1:33:c4:68:fe:7d:69:c4:c5:08:9c:50:05:f4:9f:29:a4:38: 84:16:b2:94:e5:cb:f5:cd:f6:96:9b:01:3f:48:0c:8c:17:06: 1a:fc:f4:81:4d:60:3f:af:89:ba:73:e0:70:c8:5c:2b:8f:63: 3c:85:5a:bf:3a:e0:86:bd:2a:92:2e:65:c5:03:f4:03:85:da: 1d:6b:4f:80:ff:e7:3a:66:19:8a:90:dd:bf:ff:5a:18:91:75: 92:46:62:d6:c7:97:bf:d0:8d:5f:5e:4f:93:d1:b2:39:16:59: 74:eb:6f:f1:4a:ee:1f:9b:d7:9f:0f:03:22:de:f8:5f:c2:2d: 40:be:e4:6a:82:64:5e:9f:d2:cf:d2:a6:4f:80:b9:04:91:11: 2f:74:a0:01 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt5EIOuOMwppfK9tLdd9FGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzE1MzNjYjdhNjc5NmFjNWMzODJiMzhkY2Y0NTlmOTE3NjkzMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprJItDN6zYhaave3W9Lnrj3oQOtr 642/sKYz3jjjqwIIp4QjexPg3QQmOJOgUh42mfM+HaRIsh9tHgyKhMxDoY8cepuU hMY76zlpKwDRHWoKz/9AlJCzYHRxtgFUmd0dhh65CENlteF1RrtEKDljUqdK1mSc R4vnzMH7ob8qwUHMRzLanm9tLV1dRCiB5WpiV5ecWnvujZZYsr8n6xeNjaXlnnZ2 GAFcYFlVnohAOtDrR5jt8kpmM4hyi2jpyj1s7w2C0t+jgXDrwLRf0eTW1UFNQCZT d+fx0YbNwLr9AkAxtl11mrMLOT/FVeb0GfxKp9Ly7sdGTrf0SK2alPPNgQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFJcVM8t6Z5asXDgrONz0WfkXaTH0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2Q2NTc3 ZC1mMmQyLTQ1MzAtYjlkMi0zOWVjYTQ3MjY2OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvZDY1Nzdk LWYyZDItNDUzMC1iOWQyLTM5ZWNhNDcyNjY4Yi8xL2x4VXp5M3BubHF4Y09DczQz UFJaLVJkcE1mUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQEUR+QAwQDlT64AwQCuVRgAwQCuclAAwQAwFHB MA0EAgACMAcDBQAqAaYAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4ijANBgkq hkiG9w0BAQsFAAOCAQEAJUhWiZEjkbpalySLuFsWQ08RD80lEZUGd+0X91+pjcxX aqMcwSneD43MCmkMQhLsjVxA3/PqMcImooa5+P4IYkBqMvarA6XdTQCn3XXmx2Iu WWPmXYyvcY24wuklFkJxCyC7WarjzBtIQ7KL0TPEaP59acTFCJxQBfSfKaQ4hBay lOXL9c32lpsBP0gMjBcGGvz0gU1gP6+JunPgcMhcK49jPIVavzrghr0qki5lxQP0 A4XaHWtPgP/nOmYZipDdv/9aGJF1kkZi1seXv9CNX15Pk9GyORZZdOtv8UruH5vX nw8DIt74X8ItQL7kaoJkXp/Sz9KmT4C5BJERL3SgAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:08 2026 by rpki-client