This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer File: LAzrgevOhZ9Qko6O0-HwqFERUts.cer (raw, json) Hash identifier: vesy3aoBL+zZb/4fD02H8+GGtIUYuKiusqjr+gvxr7s= Subject key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB7C3FAC04D277060E15401894739 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.201.33.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b7:c3:fa:c0:4d:27:70:60:e1:54:01:89:47:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:c9:14:ba:3f:28:d3:a0:36:81:67:b9:83: 5b:de:54:0b:01:40:ed:c8:f1:3d:f0:3a:c1:6f:14: 35:c5:be:3a:f3:35:73:7f:9b:94:93:1b:1f:d5:79: b3:e1:a3:08:02:d0:5b:40:e8:6d:44:4f:e6:b4:2c: 2b:c4:18:62:a9:18:d7:1b:78:66:0e:cd:fa:1b:50: b5:c2:3b:37:48:d4:2c:78:8a:6c:72:fb:d8:5f:3c: c6:7b:a1:0d:12:89:91:e6:ad:07:ff:54:f1:08:29: b5:f6:ef:0a:bf:2a:ce:0a:55:66:34:5f:c6:91:25: 01:7e:73:12:1d:8c:70:06:b3:e4:6c:1d:e3:24:82: 25:61:3e:ca:55:b0:bf:6c:c9:6a:7c:e7:0b:68:7c: c4:6a:65:84:6d:04:c9:4b:09:1e:ce:94:a6:72:d1: f2:91:1c:d4:aa:05:43:69:e1:4c:f4:f4:41:2a:79: 10:a2:ca:6e:a0:fb:5b:4b:3c:65:c2:25:37:f2:ab: 2d:a7:cc:43:f4:4d:f6:13:7e:01:20:fe:15:be:54: 24:ce:52:e9:98:86:ae:70:69:12:13:a5:bb:b8:58: 90:5e:c0:6c:ab:ee:1e:38:2b:ed:68:16:80:ed:f2: ae:f7:56:40:7c:f4:ba:4e:ca:5a:33:e0:75:ee:2e: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.33.0/24 Signature Algorithm: sha256WithRSAEncryption 76:f5:a5:68:6e:8e:c6:c1:59:e1:a7:cf:f4:53:b2:91:d3:d1: 79:aa:01:a6:b9:0a:c8:56:18:39:80:ac:04:fd:25:2d:8b:27: 16:0d:e1:bb:67:37:fd:ab:ea:0f:29:87:77:8f:27:97:8e:6e: 81:b6:c5:fa:76:44:3f:56:25:a6:5d:d0:56:4e:54:81:86:58: 8d:b6:a4:af:94:35:05:3a:91:48:98:6e:31:a4:7d:4a:7d:f6: 4f:66:eb:40:d2:14:f6:5e:21:c6:ce:6d:05:fb:f0:c6:82:69: 6d:55:eb:ca:11:3a:97:f5:13:01:6a:cb:80:2a:85:25:37:9c: 5e:1b:6a:82:a4:aa:91:c9:d1:a6:a3:12:7f:da:ce:9c:8a:e6: 6c:e2:e5:6d:08:6a:a5:db:a1:a3:3a:7a:0b:04:fb:a3:84:39: 8a:68:26:89:c4:e6:2a:33:77:69:19:bb:6e:c7:13:b1:18:ca: 6f:a7:82:8b:a5:00:60:3b:cd:b6:7d:83:d9:53:71:b5:8f:3d: 94:a3:cc:53:ef:24:d1:33:62:c3:74:01:a2:35:8b:df:a2:d7: a8:03:42:85:99:27:97:ac:79:8b:cf:6c:67:52:99:71:a6:cd: 6d:64:a6:fb:86:9a:af:7f:b5:b8:ed:dc:2f:67:14:90:3a:4c: cf:e3:d2:f9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XLfD+sBNJ3Bg4VQBiUc5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzBjZWI4MWViY2U4NTlmNTA5MjhlOGVkM2UxZjBhODUxMTE1MmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oLJFLo/KNOgNoFnuYNb3lQLAUDt yPE98DrBbxQ1xb468zVzf5uUkxsf1Xmz4aMIAtBbQOhtRE/mtCwrxBhiqRjXG3hm Ds36G1C1wjs3SNQseIpscvvYXzzGe6ENEomR5q0H/1TxCCm19u8KvyrOClVmNF/G kSUBfnMSHYxwBrPkbB3jJIIlYT7KVbC/bMlqfOcLaHzEamWEbQTJSwkezpSmctHy kRzUqgVDaeFM9PRBKnkQospuoPtbSzxlwiU38qstp8xD9E32E34BIP4VvlQkzlLp mIaucGkSE6W7uFiQXsBsq+4eOCvtaBaA7fKu91ZAfPS6TspaM+B17i4ItwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCwM64HrzoWfUJKOjtPh8KhREVLbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzA0OTgy Yy01ZmZjLTQyYTgtOTg3OS02ZThiMzRmMTk3NmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvMDQ5ODJj LTVmZmMtNDJhOC05ODc5LTZlOGIzNGYxOTc2Yi8xL0xBenJnZXZPaFo5UWtvNk8w LUh3cUZFUlV0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwckhMA0GCSqGSIb3DQEBCwUAA4IBAQB29aVo bo7GwVnhp8/0U7KR09F5qgGmuQrIVhg5gKwE/SUtiycWDeG7Zzf9q+oPKYd3jyeX jm6BtsX6dkQ/ViWmXdBWTlSBhliNtqSvlDUFOpFImG4xpH1KffZPZutA0hT2XiHG zm0F+/DGgmltVevKETqX9RMBasuAKoUlN5xeG2qCpKqRydGmoxJ/2s6ciuZs4uVt CGql26GjOnoLBPujhDmKaCaJxOYqM3dpGbtuxxOxGMpvp4KLpQBgO822fYPZU3G1 jz2Uo8xT7yTRM2LDdAGiNYvfoteoA0KFmSeXrHmLz2xnUplxps1tZKb7hpqvf7W4 7dwvZxSQOkzP49L5 -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:41 2026 by rpki-client