This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer File: LIjbgf377M7nX0qfaYo8GzqEYm4.cer (raw, json) Hash identifier: fw3YwKbKMkahzUl6WSUb4TaHXQx1lUAbMx1WT7CNF1Q= Subject key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A30A19F0F15218D00BD3A821801311898 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 29 Oct 2025 15:41:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 58096 IP: 45.93.4.0/22 IP: 91.213.168.0/24 IP: 91.220.69.0/24 IP: 94.141.124.0/22 IP: 185.33.228.0/22 IP: 185.154.72.0/22 IP: 185.216.192.0/23 IP: 193.105.114.0/24 IP: 193.160.204.0/23 IP: 195.170.204.0/22 IP: 2a00:bcc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:30:a1:9f:0f:15:21:8d:00:bd:3a:82:18:01:31:18:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 29 15:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:6d:a7:4e:53:c8:c5:a0:a8:fe:1c:6c:5b: 3c:ec:e5:f9:d1:de:ea:71:b3:1c:c2:9a:b6:16:bf: 79:f2:61:11:04:24:56:22:97:c8:20:bf:c2:c0:34: 6b:25:fe:f8:30:fe:02:44:4e:20:c2:cd:30:11:b0: 31:1d:34:d7:94:36:8a:3b:c5:4d:7c:e9:fd:dd:bd: b4:ab:49:43:20:1e:40:97:b3:0f:da:3e:16:5d:68: a7:d4:bd:55:3b:f6:b9:64:be:b2:7c:6b:8d:03:1f: 2f:8a:6b:e1:c6:33:7e:e4:18:1f:22:7a:79:fb:ed: 0f:df:8f:c3:bc:1e:d9:18:8d:22:3b:d6:db:46:11: aa:ab:c0:23:e8:ab:2d:df:f9:f3:91:87:b4:28:1a: 3c:f6:36:ed:7c:0e:92:f9:65:dc:99:66:d4:14:f1: 60:0d:f8:41:a4:3e:ee:93:74:3e:73:8c:9e:ff:a1: 7b:d9:cf:85:c6:97:a6:86:48:8d:47:7d:c2:f2:a3: 94:4a:97:98:92:74:ad:38:7b:80:b1:43:d1:28:b9: 24:8e:79:1f:fc:51:ee:06:c6:98:a2:bb:c9:38:25: bd:ab:56:5e:61:fe:82:c9:3e:36:3b:f1:c2:78:b0: 9a:83:2d:0b:59:26:ea:69:a7:c2:d8:38:a7:8c:12: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.4.0/22 91.213.168.0/24 91.220.69.0/24 94.141.124.0/22 185.33.228.0/22 185.154.72.0/22 185.216.192.0/23 193.105.114.0/24 193.160.204.0/23 195.170.204.0/22 IPv6: 2a00:bcc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58096 Signature Algorithm: sha256WithRSAEncryption 2e:4f:a5:bc:0b:08:81:99:83:fd:47:9f:5a:6c:ce:7c:0b:c8: f4:fb:e1:08:5b:7a:c9:e6:70:e4:01:10:81:5f:f4:7c:56:00: 86:0d:b7:11:22:c0:8d:48:6c:db:e1:1e:20:8a:84:b5:f0:d4: 7c:cd:0b:5e:86:54:6e:3a:a0:3a:d5:00:0d:41:e3:76:35:06: 2f:d8:0c:e0:e9:55:07:02:b0:0e:ae:ab:c5:13:a1:e2:2d:a7: 0f:92:fd:43:ae:80:b0:5a:47:a0:d4:b8:03:67:9f:e1:7a:08: a6:2b:ec:3c:c7:ee:6b:ae:76:1c:e9:9c:8e:22:e3:66:a9:4b: 5c:bd:df:05:d4:00:eb:20:4d:30:9a:bc:df:a1:18:45:60:de: 89:53:b3:f9:e1:04:fe:39:45:d7:46:2d:2e:be:6e:9b:6e:0a: 6f:85:b6:5e:ad:65:cd:02:c1:f0:f6:1d:49:3a:1d:75:73:94: 0d:6c:fa:2d:de:02:96:ee:96:5c:b3:f0:b1:f2:d0:f9:6e:ff: 9d:7b:d3:87:54:85:86:54:45:a6:14:d9:7c:98:ca:94:c1:88: 40:06:c6:34:92:3c:32:ec:6b:82:70:5d:32:e9:a8:41:72:44: 3e:9e:1f:ba:44:31:09:96:bd:fb:61:81:06:d1:92:f7:f3:8e: 6d:99:86:5d -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZowoZ8PFSGNAL06ghgBMRiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDI5MTU0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzg4ZGI4MWZkZmJlY2NlZTc1ZjRhOWY2OThhM2MxYjNhODQ2MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdptp05TyMWgqP4cbFs87OX50d7q cbMcwpq2Fr958mERBCRWIpfIIL/CwDRrJf74MP4CRE4gws0wEbAxHTTXlDaKO8VN fOn93b20q0lDIB5Al7MP2j4WXWin1L1VO/a5ZL6yfGuNAx8vimvhxjN+5BgfInp5 ++0P34/DvB7ZGI0iO9bbRhGqq8Aj6Kst3/nzkYe0KBo89jbtfA6S+WXcmWbUFPFg DfhBpD7uk3Q+c4ye/6F72c+FxpemhkiNR33C8qOUSpeYknStOHuAsUPRKLkkjnkf /FHuBsaYorvJOCW9q1ZeYf6CyT42O/HCeLCagy0LWSbqaafC2DinjBInsQIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFCyI24H9++zO519Kn2mKPBs6hGJuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2E4ZTA0 Yi0wZGJhLTQwZWMtYjEyNi1mNDU3ZDQwNGFlMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvYThlMDRi LTBkYmEtNDBlYy1iMTI2LWY0NTdkNDA0YWUyZi8xL0xJamJnZjM3N003blgwcWZh WW84R3pxRVltNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQCLV0EAwQAW9WoAwQAW9xFAwQCXo18AwQCuSHk AwQCuZpIAwQBudjAAwQAwWlyAwQBwaDMAwQCw6rMMA0EAgACMAcDBQAqALzAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDi8DANBgkqhkiG9w0BAQsFAAOCAQEALk+l vAsIgZmD/UefWmzOfAvI9PvhCFt6yeZw5AEQgV/0fFYAhg23ESLAjUhs2+EeIIqE tfDUfM0LXoZUbjqgOtUADUHjdjUGL9gM4OlVBwKwDq6rxROh4i2nD5L9Q66AsFpH oNS4A2ef4XoIpivsPMfua652HOmcjiLjZqlLXL3fBdQA6yBNMJq836EYRWDeiVOz +eEE/jlF10YtLr5um24Kb4W2Xq1lzQLB8PYdSToddXOUDWz6Ld4Clu6WXLPwsfLQ +W7/nXvTh1SFhlRFphTZfJjKlMGIQAbGNJI8MuxrgnBdMumoQXJEPp4fukQxCZa9 +2GBBtGS9/OObZmGXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:59:47 2025 by rpki-client