This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer (raw, json) Hash identifier: F/5aKMhyJAyGhBjn5CqSqrRxABNBJSrfQUb88N1QbZY= Subject key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB3A6F988D0EE8BF1C2726D002316F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197886 IP: 91.228.212.0/23 IP: 185.97.208.0/22 IP: 185.166.228.0/22 IP: 185.244.68.0/22 IP: 2a0b:1e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3a:6f:98:8d:0e:e8:bf:1c:27:26:d0:02:31:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:30:23:97:ca:95:64:50:81:e8:d7:10:4a: 71:ed:d8:dd:66:9e:4d:52:3e:a9:2e:7b:1a:e1:bd: 4c:f5:82:0c:66:ea:d4:85:d2:38:34:a4:f0:c7:e7: c4:67:f5:6a:ae:41:c8:6b:ea:96:b5:bc:72:8d:73: f8:0b:0d:ea:91:10:43:46:85:aa:b6:65:21:69:25: f7:f5:0a:7a:95:f4:a1:9b:b0:7e:77:41:13:c2:95: 12:ec:dc:64:76:99:ee:59:62:ab:c6:5b:f9:d5:55: 5e:1d:80:09:9c:60:69:79:1f:9e:bf:e0:8a:3d:39: 52:8a:30:71:88:bd:ed:0d:c0:3c:a6:dd:bd:13:8d: 33:7b:ad:ca:30:d7:2b:31:36:df:b0:4c:df:63:97: ac:ab:d6:6b:a7:0c:39:b3:9d:39:12:8d:61:67:d7: 19:4b:4d:33:e6:f5:7e:4e:38:dd:19:d0:39:11:44: 02:dd:ea:1f:9a:ba:bb:32:bc:07:04:fa:4c:59:89: 20:e2:e9:de:8a:99:b5:c5:b5:c1:ae:35:3f:cf:62: f6:ea:78:4e:6f:39:60:33:26:65:9b:be:96:ba:8e: 32:3a:2e:11:6f:24:1c:b2:96:ff:31:89:9f:40:3d: 42:51:55:fc:b2:93:a3:ae:05:da:c5:8b:97:bd:e8: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.212.0/23 185.97.208.0/22 185.166.228.0/22 185.244.68.0/22 IPv6: 2a0b:1e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197886 Signature Algorithm: sha256WithRSAEncryption 0f:7f:ce:1d:24:72:e3:46:a2:81:0f:78:ef:95:82:71:83:f0: 11:3c:b1:4d:d0:1e:a2:06:35:20:e4:60:7c:d6:ac:91:0f:57: b6:44:b3:70:1c:cd:42:63:2b:d6:dc:f0:88:7a:04:79:3d:22: 94:4a:f7:63:26:6b:d8:4d:6e:9d:db:64:87:d4:58:a8:44:a6: 5e:bd:ed:63:a4:b4:75:e0:c5:bc:39:85:ac:bf:1c:dd:05:67: 00:54:6e:dc:f9:c9:bb:b1:c6:fc:36:38:37:9f:35:45:87:95: df:08:3b:f9:f5:f9:16:3e:e4:81:6b:53:bf:8c:a9:6e:fd:34: a8:ed:c6:29:1a:22:93:1f:b0:dc:79:15:ab:c6:ae:9e:0a:1a: fb:3d:43:bd:b0:32:30:d4:1a:da:91:01:b2:43:43:eb:b2:e4: dd:6a:70:7a:ce:fd:68:cf:b3:0e:97:e7:6b:de:2b:bd:69:a2: 8c:ea:c7:88:f1:24:55:08:d3:83:e7:b7:3b:f1:f9:cb:bd:34: 88:50:7e:d3:21:97:02:3b:76:db:21:21:5a:f8:4d:af:44:68: 95:48:69:51:39:42:7b:67:2d:a7:32:ea:7e:61:7c:48:9c:75: 2a:97:e6:fc:10:3f:07:40:f4:82:9f:39:e0:58:0c:27:7c:2d: 45:36:b5:55 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt26zpvmI0O6L8cJybQAjFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2Q0MWJjYzNjZDczZTBkYzdmN2U5NWI1ZDBkY2E2ZDY4NTdiZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aowI5fKlWRQgejXEEpx7djdZp5N Uj6pLnsa4b1M9YIMZurUhdI4NKTwx+fEZ/VqrkHIa+qWtbxyjXP4Cw3qkRBDRoWq tmUhaSX39Qp6lfShm7B+d0ETwpUS7NxkdpnuWWKrxlv51VVeHYAJnGBpeR+ev+CK PTlSijBxiL3tDcA8pt29E40ze63KMNcrMTbfsEzfY5esq9Zrpww5s505Eo1hZ9cZ S00z5vV+TjjdGdA5EUQC3eofmrq7MrwHBPpMWYkg4uneipm1xbXBrjU/z2L26nhO bzlgMyZlm76Wuo4yOi4RbyQcspb/MYmfQD1CUVX8spOjrgXaxYuXvejIkwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFCzUG8w81z4Nx/fpW10Nym1oV77cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzFhZDli Zi0wMzIyLTQ1MzQtYjAwOS1lNmU5MWJmMDUyZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMWFkOWJm LTAzMjItNDUzNC1iMDA5LWU2ZTkxYmYwNTJmZS8xL0xOUWJ6RHpYUGczSDktbGJY UTNLYldoWHZ0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBW+TUAwQCuWHQAwQCuabkAwQCufREMA0EAgAC MAcDBQMqCx4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwME/jANBgkqhkiG9w0B AQsFAAOCAQEAD3/OHSRy40aigQ9475WCcYPwETyxTdAeogY1IORgfNaskQ9XtkSz cBzNQmMr1tzwiHoEeT0ilEr3YyZr2E1undtkh9RYqESmXr3tY6S0deDFvDmFrL8c 3QVnAFRu3PnJu7HG/DY4N581RYeV3wg7+fX5Fj7kgWtTv4ypbv00qO3GKRoikx+w 3HkVq8aungoa+z1DvbAyMNQa2pEBskND67Lk3Wpwes79aM+zDpfna94rvWmijOrH iPEkVQjTg+e3O/H5y700iFB+0yGXAjt22yEhWvhNr0RolUhpUTlCe2ctpzLqfmF8 SJx1Kpfm/BA/B0D0gp854FgMJ3wtRTa1VQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:15 2026 by rpki-client