This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer File: rlLbggkLND-J98Y3z0GpS8_UNGo.cer (raw, json) Hash identifier: 3fmF2GoNsUnigQGA9+zVEdVEfBVvSx7CKmuXw8wvRXc= Subject key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C012762037AA48EAE9497A9A03CAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213093 IP: 128.140.176.0/20 IP: 185.184.60.0/22 IP: 2a0d:eec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:01:27:62:03:7a:a4:8e:ae:94:97:a9:a0:3c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:7e:76:6f:ed:fe:76:ff:f0:5f:d1:72:94: c3:9c:07:0d:9c:38:f1:5d:91:65:d3:e8:b0:28:ba: f4:1d:f3:82:03:53:24:33:75:8f:e2:cc:5e:6e:c3: a8:ec:c0:46:d5:f2:8a:b0:de:ef:bd:72:eb:cf:f7: 8d:01:40:e2:e2:d5:41:46:83:d9:a0:9f:b8:4b:a4: 1d:c1:8f:bf:01:cc:68:66:f0:0e:f2:2d:0b:a2:bd: 3b:59:6d:0c:b2:b4:e4:da:f2:6d:f5:d9:5d:11:8e: 4a:43:4e:7b:0e:e0:72:4d:c7:52:57:2d:5b:d7:7f: 94:12:89:d5:6f:d2:47:e1:c6:da:4e:86:f2:ad:6e: 30:26:38:a5:43:13:90:90:0b:a9:c7:4e:07:66:d4: 1d:a2:ed:c6:a2:94:a3:ce:b8:75:f5:9e:d7:7a:bd: ba:2d:b0:64:f7:d6:ce:da:ae:c4:1c:1c:22:97:db: f2:80:c8:7b:42:d8:dc:0a:88:3a:ff:0a:ff:82:a9: 55:49:f2:18:fc:db:1b:1d:3c:6c:4d:23:87:2b:14: 64:1b:ac:bf:fb:85:ca:3b:26:87:01:97:96:35:0f: 74:c0:12:92:e2:f3:7c:9b:a3:79:c8:4f:8e:f7:85: 4c:d2:4d:c8:03:94:b1:4f:c0:81:a0:b5:6f:bc:bd: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.140.176.0/20 185.184.60.0/22 IPv6: 2a0d:eec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213093 Signature Algorithm: sha256WithRSAEncryption a2:f7:fc:9d:c5:9a:bb:a0:bf:8e:36:cb:1e:ed:1b:c2:7e:63: 91:6f:2f:6e:d3:95:c1:03:eb:2d:f0:0c:2f:0a:c3:e4:ac:eb: 24:b4:57:8d:34:94:bb:b4:49:46:20:09:f7:7e:e9:db:3b:8a: bc:65:b9:70:db:24:c9:28:61:89:77:f0:8e:51:d8:a0:84:7d: 22:5d:6d:4b:30:91:ce:68:79:b1:eb:4f:21:07:37:e6:a0:6c: 29:b1:6a:b4:ea:c1:d4:5f:71:9b:24:f8:44:f0:6d:e8:6a:4c: 6f:e5:d4:9b:c0:37:bc:21:75:78:3b:a3:6f:5e:bf:16:bd:b2: a3:88:10:72:c6:ec:6d:33:f4:26:d5:b7:53:f5:04:c5:36:f4: ce:57:2f:0a:bd:3a:0c:af:77:52:c4:59:88:27:27:3e:ec:f5: bd:32:09:72:df:fd:f1:f9:39:e6:28:3b:8f:7c:61:d7:75:e1: 1a:22:9d:91:4a:44:45:6e:d9:87:9b:7e:86:61:c9:cb:9d:1c: 4c:78:68:da:b7:6c:0f:ac:5f:90:20:84:62:15:a2:12:23:3a: 99:61:0a:58:fb:e7:22:bb:50:f6:58:a3:ea:62:e8:fb:90:8f: cf:08:28:42:2d:2f:7b:90:54:5e:8c:56:cb:1f:7d:6b:10:b3: 3c:98:86:4e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9XAEnYgN6pI6ulJepoDytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTUyZGI4MjA5MGIzNDNmODlmN2M2MzdjZjQxYTk0YmNmZDQzNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Z+dm/t/nb/8F/RcpTDnAcNnDjx XZFl0+iwKLr0HfOCA1MkM3WP4sxebsOo7MBG1fKKsN7vvXLrz/eNAUDi4tVBRoPZ oJ+4S6QdwY+/AcxoZvAO8i0Lor07WW0MsrTk2vJt9dldEY5KQ057DuByTcdSVy1b 13+UEonVb9JH4cbaTobyrW4wJjilQxOQkAupx04HZtQdou3GopSjzrh19Z7Xer26 LbBk99bO2q7EHBwil9vygMh7QtjcCog6/wr/gqlVSfIY/NsbHTxsTSOHKxRkG6y/ +4XKOyaHAZeWNQ90wBKS4vN8m6N5yE+O94VM0k3IA5SxT8CBoLVvvL0WHwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFK5S24IJCzQ/iffGN89BqUvP1DRqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2JjZjE2 Ny1iNjE4LTQ4ZDMtOWE0ZS1kN2I2MDYzZGNhMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYmNmMTY3 LWI2MTgtNDhkMy05YTRlLWQ3YjYwNjNkY2EzNy8xL3JsTGJnZ2tMTkQtSjk4WTN6 MEdwUzhfVU5Hby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEgIywAwQCubg8MA0EAgACMAcDBQMqDe7AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNAZTANBgkqhkiG9w0BAQsFAAOCAQEAovf8 ncWau6C/jjbLHu0bwn5jkW8vbtOVwQPrLfAMLwrD5KzrJLRXjTSUu7RJRiAJ937p 2zuKvGW5cNskyShhiXfwjlHYoIR9Il1tSzCRzmh5setPIQc35qBsKbFqtOrB1F9x myT4RPBt6GpMb+XUm8A3vCF1eDujb16/Fr2yo4gQcsbsbTP0JtW3U/UExTb0zlcv Cr06DK93UsRZiCcnPuz1vTIJct/98fk55ig7j3xh13XhGiKdkUpERW7Zh5t+hmHJ y50cTHho2rdsD6xfkCCEYhWiEiM6mWEKWPvnIrtQ9lij6mLo+5CPzwgoQi0ve5BU XoxWyx99axCzPJiGTg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:12 2026 by rpki-client