This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer (raw, json) Hash identifier: gcjld5lc5owSyyapeqt8MmxK51xfZdsXhCbX+sf0mgk= Subject key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B84E7148E07459358000D6798824E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206426 IP: 185.108.224.0/22 IP: 2a06:4c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:84:e7:14:8e:07:45:93:58:00:0d:67:98:82:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9735a94f31546d437b89720e844b2f12a5abf268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:c0:53:fe:49:fc:c6:4a:ec:4e:1b:b4:4e: 9d:15:4e:f6:b7:f3:42:65:60:c5:ba:1e:7d:ac:b9: 98:c8:fe:62:7a:1a:fd:d8:db:7d:4c:4d:00:56:29: 2e:00:28:9b:d1:bd:c6:21:ec:f6:35:ee:0e:8f:23: bb:40:e8:f0:3c:6a:e2:17:b6:02:c9:f1:9e:96:62: b4:02:a8:85:2e:65:dd:68:51:0b:b1:2b:c4:bd:c4: 09:61:c0:ac:d2:ab:ca:c5:e7:6a:ec:b6:37:f2:77: 8c:b3:c3:c6:37:58:22:0c:65:04:01:d2:9e:e9:fa: 12:db:a8:67:02:e6:9b:74:8e:08:d4:65:32:27:db: 74:2b:d9:29:8d:1a:f7:c3:ec:a1:b9:f2:cc:d2:08: 54:79:51:ff:35:73:b8:e1:3e:54:bf:62:ac:ca:11: 2e:e2:c6:6f:82:8b:95:0a:59:fe:49:86:dd:81:05: 03:c5:f6:7f:8d:93:e6:9e:e1:16:b4:13:ab:b1:7c: f8:e9:15:fc:39:cd:35:50:b4:9d:17:d5:77:e9:c1: a1:33:b5:27:a3:f9:9c:b9:bd:98:7a:00:26:d2:6d: c9:98:40:b4:cc:23:42:e8:f2:88:8a:85:b3:d0:17: e6:43:89:45:ae:9c:4f:66:20:44:d2:6e:24:a5:76: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.224.0/22 IPv6: 2a06:4c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206426 Signature Algorithm: sha256WithRSAEncryption 81:bd:07:02:b3:84:f9:9a:24:14:2d:aa:3e:23:a3:d7:e6:62: ec:27:76:e8:f6:17:a5:ed:ff:c9:41:c7:4f:03:b6:ff:bd:df: 87:1b:3d:ba:db:95:2e:07:07:bd:2d:8d:91:90:39:4e:ae:a5: 14:44:60:37:7a:57:4a:a4:63:ca:d5:a2:fb:64:9e:6b:18:5c: 89:7c:75:33:9e:95:c9:7f:ea:13:56:4c:e2:93:bd:95:d7:83: 0d:0b:73:47:1b:7d:45:16:38:2e:c8:28:d6:ae:e2:98:ea:bb: 90:1a:e9:fa:a2:34:87:f0:7d:67:85:08:11:de:98:90:a8:42: 07:44:62:99:0c:84:0b:28:5a:6e:1a:59:bb:4c:03:73:b7:f9: da:33:8a:7b:f1:a0:86:ce:78:5c:56:12:9c:26:8a:db:97:cd: 5b:49:26:06:b8:7c:84:da:b8:8c:d7:fd:25:bb:54:49:70:13: c6:cf:7a:bb:c3:bb:d0:60:cb:37:16:ec:78:27:9c:1a:ee:38: 0f:e2:c9:9a:77:a1:c1:0b:ff:f6:c7:d3:a6:23:e3:40:47:9c: de:6a:27:cf:3f:d3:10:26:45:a5:56:3a:01:5f:a1:c0:d3:ca: 98:af:cc:46:c0:0f:ef:ca:cf:3d:93:c8:6d:c0:a2:5d:2d:21: 1a:ff:de:78 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9W4TnFI4HRZNYAA1nmIJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzM1YTk0ZjMxNTQ2ZDQzN2I4OTcyMGU4NDRiMmYxMmE1YWJmMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2/AU/5J/MZK7E4btE6dFU72t/NC ZWDFuh59rLmYyP5iehr92Nt9TE0AVikuACib0b3GIez2Ne4OjyO7QOjwPGriF7YC yfGelmK0AqiFLmXdaFELsSvEvcQJYcCs0qvKxedq7LY38neMs8PGN1giDGUEAdKe 6foS26hnAuabdI4I1GUyJ9t0K9kpjRr3w+yhufLM0ghUeVH/NXO44T5Uv2KsyhEu 4sZvgouVCln+SYbdgQUDxfZ/jZPmnuEWtBOrsXz46RX8Oc01ULSdF9V36cGhM7Un o/mcub2YegAm0m3JmEC0zCNC6PKIioWz0BfmQ4lFrpxPZiBE0m4kpXa2zQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJc1qU8xVG1De4lyDoRLLxKlq/JoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2NkNDM1 MC1iZTc0LTQ3ZTAtOTZiMy1iMGRiMmVhYTk3ZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvY2Q0MzUw LWJlNzQtNDdlMC05NmIzLWIwZGIyZWFhOTdlZC8xL2x6V3BUekZVYlVON2lYSU9o RXN2RXFXcjhtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWzgMA0EAgACMAcDBQMqBkyAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmWjANBgkqhkiG9w0BAQsFAAOCAQEAgb0HArOE+Zok FC2qPiOj1+Zi7Cd26PYXpe3/yUHHTwO2/73fhxs9utuVLgcHvS2NkZA5Tq6lFERg N3pXSqRjytWi+2SeaxhciXx1M56VyX/qE1ZM4pO9ldeDDQtzRxt9RRY4Lsgo1q7i mOq7kBrp+qI0h/B9Z4UIEd6YkKhCB0RimQyECyhabhpZu0wDc7f52jOKe/Gghs54 XFYSnCaK25fNW0kmBrh8hNq4jNf9JbtUSXATxs96u8O70GDLNxbseCecGu44D+LJ mnehwQv/9sfTpiPjQEec3monzz/TECZFpVY6AV+hwNPKmK/MRsAP78rPPZPIbcCi XS0hGv/eeA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:45 2026 by rpki-client