This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer File: LBLwoIDwIfK6JbwMbqfga2eq0F4.cer (raw, json) Hash identifier: tP7tO3zSqgj8WYMf0JwNVLR4V2OPYNOlNghgWTO+R3g= Subject key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A814F88C83B011B13109DD56D67A8D852 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 07:41:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213279 IP: 2a14:b400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:4f:88:c8:3b:01:1b:13:10:9d:d5:6d:67:a8:d8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 07:41:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:db:cb:67:fe:dc:34:58:70:d6:92:fc:3f: 47:52:e1:54:46:dd:6b:02:5c:b2:48:e0:e1:3e:65: 73:69:c8:35:a0:56:5b:72:83:53:8b:14:1d:12:71: ee:23:ff:fa:42:08:f1:05:2c:9c:b2:05:c7:05:20: 5d:50:1c:52:30:f4:fe:c7:1d:08:95:88:58:e9:86: 02:ea:58:26:a0:29:02:37:95:37:d8:fe:bd:5d:58: 2c:39:dc:2c:af:ad:7c:89:88:1f:8f:79:d8:5e:00: e8:67:d3:58:53:84:4b:5d:55:e5:90:32:bf:1c:ca: 7a:0d:51:df:8e:f0:ca:8e:f7:c6:f7:5e:98:a2:57: 60:b2:8d:c2:89:a2:62:d6:4d:7c:74:3f:40:b8:2a: 33:19:68:75:ac:44:08:2a:62:87:ed:4c:36:30:2a: b1:3a:dd:0a:11:61:00:9a:dd:fc:59:09:35:93:b8: 18:06:25:9d:39:7b:07:fd:26:67:6d:a8:fc:52:ca: 0d:2f:f8:fe:73:2b:9a:89:09:42:f7:32:4d:1b:11: 87:95:19:7f:06:3c:c6:34:8d:e9:6f:09:dc:6e:7d: e5:e8:99:46:24:85:b2:fa:78:f4:33:a2:76:c8:f7: 04:9c:4d:c8:8d:39:4d:f0:f2:7e:bb:ea:fc:c0:c5: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:b400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213279 Signature Algorithm: sha256WithRSAEncryption 84:78:31:42:ae:c6:1f:d9:4e:10:b5:cb:d6:01:cf:c3:38:3f: b4:97:7d:e0:5b:2e:76:74:f4:9d:72:47:73:26:0d:7a:35:ff: ba:7e:ee:92:67:a4:13:0d:19:61:dc:4a:83:6c:37:ca:16:95: aa:39:95:a9:a7:b7:b8:f5:da:01:b3:91:7a:60:71:31:33:34: ad:78:c8:55:06:0d:63:b4:10:d7:73:97:46:f0:4f:bb:ff:2e: 61:3e:eb:fb:92:1f:16:c8:7c:30:c6:e0:e6:24:6c:96:ed:50: df:ee:f8:0e:80:c8:66:5d:9e:2b:12:7e:12:b1:18:f3:5b:c5: e5:ba:66:44:09:cf:53:06:2e:3b:ae:c0:d8:4d:1c:f3:9a:6c: 14:0c:fb:60:bc:ee:0d:f1:1c:af:54:5e:6f:88:90:6c:df:87: 87:b8:86:73:de:e8:26:22:42:ce:12:99:84:d7:c8:7c:96:be: 69:0b:a5:8a:3e:0f:5c:d9:bf:3f:63:e7:19:ff:07:8c:9d:e1: 0f:f3:ee:a2:40:53:bc:d6:a8:9d:8c:66:45:59:57:e6:ca:e3: d4:ea:15:0e:56:0b:38:b9:8c:13:61:99:82:cd:9c:d7:65:90: d3:84:8d:84:6a:6f:8b:7d:4a:d4:71:4f:8f:4d:a3:d0:6e:49: 83:c7:fc:4c -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZqBT4jIOwEbExCd1W1nqNhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MDc0MTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzEyZjBhMDgwZjAyMWYyYmEyNWJjMGM2ZWE3ZTA2YjY3YWFkMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzzby2f+3DRYcNaS/D9HUuFURt1r AlyySODhPmVzacg1oFZbcoNTixQdEnHuI//6QgjxBSycsgXHBSBdUBxSMPT+xx0I lYhY6YYC6lgmoCkCN5U32P69XVgsOdwsr618iYgfj3nYXgDoZ9NYU4RLXVXlkDK/ HMp6DVHfjvDKjvfG916Yoldgso3CiaJi1k18dD9AuCozGWh1rEQIKmKH7Uw2MCqx Ot0KEWEAmt38WQk1k7gYBiWdOXsH/SZnbaj8UsoNL/j+cyuaiQlC9zJNGxGHlRl/ BjzGNI3pbwncbn3l6JlGJIWy+nj0M6J2yPcEnE3IjTlN8PJ+u+r8wMUDAQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFCwS8KCA8CHyuiW8DG6n4GtnqtBeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzgwNzA2 MTVmLWQyNmQtNDJlMy1hMTQ1LTVjN2I2N2IyYjY0ZS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODA3 MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJiNjRlLzAvMkMxMkYwQTA4MEYw MjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF AyoUtAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0EfMA0GCSqGSIb3DQEBCwUA A4IBAQCEeDFCrsYf2U4QtcvWAc/DOD+0l33gWy52dPSdckdzJg16Nf+6fu6SZ6QT DRlh3EqDbDfKFpWqOZWpp7e49doBs5F6YHExMzSteMhVBg1jtBDXc5dG8E+7/y5h Puv7kh8WyHwwxuDmJGyW7VDf7vgOgMhmXZ4rEn4SsRjzW8XlumZECc9TBi47rsDY TRzzmmwUDPtgvO4N8RyvVF5viJBs34eHuIZz3ugmIkLOEpmE18h8lr5pC6WKPg9c 2b8/Y+cZ/weMneEP8+6iQFO81qidjGZFWVfmyuPU6hUOVgs4uYwTYZmCzZzXZZDT hI2Eam+LfUrUcU+PTaPQbkmDx/xM -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:29 2025 by rpki-client