This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer (raw, json) Hash identifier: 6EFOZNIg1UZvuDFcbu2c0zSNFab+WWANMm0l1zxO29s= Subject key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BC42729E960F1691081225C7C8542 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29644 IP: 31.193.216.0/21 IP: 77.75.96.0/21 IP: 178.250.112.0/21 IP: 185.51.104.0/22 IP: 2a03:5f00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c4:27:29:e9:60:f1:69:10:81:22:5c:7c:85:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c83dfb24629c16779350b4a777b5b280fc59d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:a2:de:af:33:ee:9b:ff:d5:f8:09:4e:19: a8:b2:04:e7:86:e2:ad:00:54:07:37:29:b7:5a:8a: c7:20:12:84:48:6e:4d:cd:92:07:90:b6:b1:f8:27: 4d:f5:eb:c0:cf:3b:a9:71:6a:e0:41:3c:e8:fe:19: 2b:e5:00:d3:55:5c:f9:ce:9e:4d:ea:68:e7:bc:14: ae:39:42:65:0d:e9:31:26:54:23:3b:e6:b5:a1:06: 47:51:9b:76:56:a8:8a:20:2f:1b:41:c1:40:3e:2c: c0:b7:d6:e9:4d:17:b5:ed:b5:a5:a3:2b:f7:7b:d6: 10:68:55:4a:9c:48:03:99:80:3f:f7:d0:a7:08:3c: 7b:60:da:56:97:37:1e:d5:3a:87:5e:a2:d4:13:96: 73:66:19:55:46:57:7a:d4:26:e6:97:6a:4b:4f:ee: 74:e4:6f:5c:64:f1:90:a4:49:c1:ac:36:3b:09:f5: c1:25:95:61:b8:07:71:6b:bc:2d:fb:cf:cd:67:85: 32:37:cd:e4:b2:72:12:cf:da:d8:ac:8d:f8:77:af: c3:0e:ae:48:bd:f2:40:f7:f0:17:04:4b:a8:fa:f6: 4d:95:99:fc:47:a0:b4:c2:9d:a8:16:18:fe:4e:74: 5a:65:fb:20:40:df:11:23:af:81:83:8d:35:29:b8: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.216.0/21 77.75.96.0/21 178.250.112.0/21 185.51.104.0/22 IPv6: 2a03:5f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29644 Signature Algorithm: sha256WithRSAEncryption 22:23:c6:3a:e3:17:62:00:fd:e1:71:c8:96:fa:1b:41:8c:be: a1:aa:df:ab:20:da:ea:4d:34:98:22:08:89:fc:79:66:69:ba: e9:4a:ef:e8:e4:06:38:1e:ac:92:01:92:fe:ae:17:20:4d:4f: 2e:74:3b:39:dd:71:e7:72:38:85:b8:e7:7e:be:14:fa:b5:69: 3d:93:4a:8a:8a:b3:69:c2:81:9f:0f:55:b7:5e:f6:1b:9f:8e: 2a:36:5d:3f:01:a4:cd:1b:5e:1f:77:d9:9a:ca:f0:84:13:a3: 39:04:fa:2b:5c:de:6f:23:2e:cb:c1:ee:5b:f8:eb:43:b5:73: ce:d5:41:7b:80:d4:bd:41:19:91:b3:ed:51:99:28:59:81:e4: 27:6a:1c:0d:97:1f:73:68:4b:e6:c3:d6:b1:6d:61:0f:9b:3c: 1c:a4:8c:b0:3f:be:d1:a1:16:e9:79:87:7e:08:22:db:3f:be: e9:fa:1a:ba:d5:5a:ef:c5:8c:3e:fe:b2:5d:b5:75:3a:24:bd: 93:ec:eb:ba:fc:60:ad:5f:a9:c4:08:03:c8:4b:05:03:11:57: 07:10:55:21:b7:d3:c7:98:5e:0d:28:7b:54:74:9b:80:85:cc: d6:8d:c3:cf:e3:37:95:a8:61:80:57:82:de:2e:6a:0d:ae:1b: 4a:89:5c:d6 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt9W8QnKelg8WkQgSJcfIVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzgzZGZiMjQ2MjljMTY3NzkzNTBiNGE3NzdiNWIyODBmYzU5ZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFOi3q8z7pv/1fgJThmosgTnhuKt AFQHNym3WorHIBKESG5NzZIHkLax+CdN9evAzzupcWrgQTzo/hkr5QDTVVz5zp5N 6mjnvBSuOUJlDekxJlQjO+a1oQZHUZt2VqiKIC8bQcFAPizAt9bpTRe17bWloyv3 e9YQaFVKnEgDmYA/99CnCDx7YNpWlzce1TqHXqLUE5ZzZhlVRld61Cbml2pLT+50 5G9cZPGQpEnBrDY7CfXBJZVhuAdxa7wt+8/NZ4UyN83ksnISz9rYrI34d6/DDq5I vfJA9/AXBEuo+vZNlZn8R6C0wp2oFhj+TnRaZfsgQN8RI6+Bg401KbhOXQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFCyD37JGKcFneTULSnd7WygPxZ1EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzQyMGMx NC1jYjJjLTRlM2UtODdiOS0zZmMzOTQ4NzgwN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNDIwYzE0 LWNiMmMtNGUzZS04N2I5LTNmYzM5NDg3ODA3Yy8xL0xJUGZza1lwd1dkNU5RdEtk M3RiS0FfRm5VUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDH8HYAwQDTUtgAwQDsvpwAwQCuTNoMA0EAgAC MAcDBQAqA18AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnPMMA0GCSqGSIb3DQEB CwUAA4IBAQAiI8Y64xdiAP3hcciW+htBjL6hqt+rINrqTTSYIgiJ/HlmabrpSu/o 5AY4HqySAZL+rhcgTU8udDs53XHncjiFuOd+vhT6tWk9k0qKirNpwoGfD1W3XvYb n44qNl0/AaTNG14fd9mayvCEE6M5BPorXN5vIy7Lwe5b+OtDtXPO1UF7gNS9QRmR s+1RmShZgeQnahwNlx9zaEvmw9axbWEPmzwcpIywP77RoRbpeYd+CCLbP77p+hq6 1VrvxYw+/rJdtXU6JL2T7Ou6/GCtX6nECAPISwUDEVcHEFUht9PHmF4NKHtUdJuA hczWjcPP4zeVqGGAV4LeLmoNrhtKiVzW -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:18 2026 by rpki-client