This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer File: LDljuiquWr04pu7QnamFYR8bUCE.cer (raw, json) Hash identifier: YpQHturXQQOvP9pL8WqUfZYQTyI3pxhs+39d5QKPTdI= Subject key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1441AC0EB7173A7D84F11054D4483F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39499 AS: 42739 AS: 207217 IP: 37.139.144.0/21 IP: 77.242.224.0/20 IP: 78.159.64.0/19 IP: 92.55.192.0/18 IP: 185.46.92.0/22 IP: 188.112.0.0/18 IP: 195.210.34.0/23 IP: 2a02:7f0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:41:ac:0e:b7:17:3a:7d:84:f1:10:54:d4:48:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2f:92:14:4e:be:ca:7e:99:61:43:36:d5:75: 8a:26:8c:6a:16:49:79:e3:16:f4:d0:33:c4:82:ff: cc:db:4e:e0:d3:12:50:27:b6:3c:4f:f8:ac:a1:c0: ba:fb:8a:4e:58:14:af:16:00:b2:07:0b:2d:67:9c: ee:3f:77:eb:36:83:5b:d5:99:80:e8:72:4a:cd:20: 9c:a4:5f:b1:17:93:97:d3:4b:b3:e2:1f:ef:8d:cc: 4d:8e:f0:b8:63:ec:2f:f3:e6:94:ac:38:98:78:a0: 4a:08:8f:d2:61:22:81:a4:12:0a:b7:8d:f8:da:0a: b5:c7:57:6f:c3:31:cc:ef:cd:2e:0c:98:4e:52:90: 97:81:43:46:43:c8:f2:6e:08:12:e0:aa:a7:82:88: ea:a5:f6:e8:22:81:17:be:b2:2f:88:2a:57:09:71: d5:f1:97:fd:c6:eb:4c:e4:65:75:83:6a:62:94:6b: a1:7e:e1:1b:fa:d3:6c:30:70:cd:e1:13:88:6e:8a: bf:c4:82:84:d3:76:4d:4c:65:f5:52:22:86:70:63: c9:87:b0:8f:37:76:47:ab:cf:47:09:39:c3:95:6c: 38:2b:e4:86:9c:fe:a5:30:52:17:5c:3c:23:10:34: f6:32:96:17:cf:fe:bb:f0:ef:fe:57:bb:c8:47:f1: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.144.0/21 77.242.224.0/20 78.159.64.0/19 92.55.192.0/18 185.46.92.0/22 188.112.0.0/18 195.210.34.0/23 IPv6: 2a02:7f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39499 42739 207217 Signature Algorithm: sha256WithRSAEncryption 9e:02:02:1d:ee:16:a1:3b:9f:56:d2:3a:29:b3:e1:08:e1:1f: 4f:92:46:a2:b5:75:bc:24:ba:5a:d4:1a:22:a8:37:06:ce:87: 34:02:ed:d1:84:ee:50:8a:8d:8b:40:36:52:97:7f:1d:af:93: f3:16:4d:25:2a:8e:c2:75:fe:c5:22:16:f1:d8:45:a6:c8:1f: 93:81:24:bb:4b:4f:27:73:3d:e7:c8:a3:85:02:10:11:d0:36: 77:33:26:97:54:99:9c:49:3b:e4:cc:1f:d8:ae:d5:37:d6:56: 45:53:0e:f5:bd:03:ef:30:80:53:3d:0b:93:b6:76:55:f6:a5: ea:9d:07:54:ab:cf:41:fe:07:17:50:c7:fc:3d:52:17:2b:ff: ac:dc:8b:48:c8:c4:57:9e:a4:25:bb:b1:41:3f:81:40:3b:54: dc:bd:4e:65:f5:c3:c9:1b:d2:fe:8e:4d:40:be:c1:58:b6:c6: 81:64:30:85:fb:c6:02:c4:4e:75:eb:b8:61:0b:bb:eb:00:38: 38:32:61:68:f5:13:38:ff:ac:c8:d6:32:12:cc:f6:83:ea:48: ed:8f:17:77:ce:5d:41:ae:65:27:30:66:1d:be:32:4f:41:41: c9:f4:3d:2f:2c:a3:61:db:af:23:fa:4a:e0:60:95:26:96:c8: f0:b7:3b:72 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZt/FEGsDrcXOn2E8RBU1Eg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzM5NjNiYTJhYWU1YWJkMzhhNmVlZDA5ZGE5ODU2MTFmMWI1MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S+SFE6+yn6ZYUM21XWKJoxqFkl5 4xb00DPEgv/M207g0xJQJ7Y8T/isocC6+4pOWBSvFgCyBwstZ5zuP3frNoNb1ZmA 6HJKzSCcpF+xF5OX00uz4h/vjcxNjvC4Y+wv8+aUrDiYeKBKCI/SYSKBpBIKt434 2gq1x1dvwzHM780uDJhOUpCXgUNGQ8jybggS4KqngojqpfboIoEXvrIviCpXCXHV 8Zf9xutM5GV1g2pilGuhfuEb+tNsMHDN4ROIboq/xIKE03ZNTGX1UiKGcGPJh7CP N3ZHq89HCTnDlWw4K+SGnP6lMFIXXDwjEDT2MpYXz/678O/+V7vIR/EXiwIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFCw5Y7oqrlq9OKbu0J2phWEfG1AhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzM4MWVj Yy05ZDc1LTQxYmEtODVmNi0xNzY5M2U3ZWE2N2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMzgxZWNj LTlkNzUtNDFiYS04NWY2LTE3NjkzZTdlYTY3YS8xL0xEbGp1aXF1V3IwNHB1N1Fu YW1GWVI4YlVDRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDJYuQAwQETfLgAwQFTp9AAwQGXDfAAwQCuS5c AwQGvHAAAwQBw9IiMA0EAgACMAcDBQAqAgfwMCQGCCsGAQUFBwEIAQH/BBUwE6AR MA8CAwCaSwIDAKbzAgMDKXEwDQYJKoZIhvcNAQELBQADggEBAJ4CAh3uFqE7n1bS Oimz4QjhH0+SRqK1dbwkulrUGiKoNwbOhzQC7dGE7lCKjYtANlKXfx2vk/MWTSUq jsJ1/sUiFvHYRabIH5OBJLtLTydzPefIo4UCEBHQNnczJpdUmZxJO+TMH9iu1TfW VkVTDvW9A+8wgFM9C5O2dlX2peqdB1Srz0H+BxdQx/w9Uhcr/6zci0jIxFeepCW7 sUE/gUA7VNy9TmX1w8kb0v6OTUC+wVi2xoFkMIX7xgLETnXruGELu+sAODgyYWj1 Ezj/rMjWMhLM9oPqSO2PF3fOXUGuZScwZh2+Mk9BQcn0PS8so2HbryP6SuBglSaW yPC3O3I= -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:03 2026 by rpki-client