This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer File: LOre5Y-GT0cutCKwuVSXuFB1oSs.cer (raw, json) Hash identifier: Ptg9/lNMeqJoTSSw0yTRC+42sYAXlgTzCR/iBVqJ77Y= Subject key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C129E15FE05B25A5340F30CFF053E9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200675 IP: 91.194.200.0/24 IP: 138.124.188.0/22 IP: 185.71.176.0/22 IP: 185.232.76.0/22 IP: 2a05:3400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9e:15:fe:05:b2:5a:53:40:f3:0c:ff:05:3e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ceadee58f864f472eb422b0b95497b85075a12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:6a:f4:2f:fa:81:b2:90:90:7d:4c:47:9f: 80:f7:37:de:ac:77:cf:ab:b8:9d:d2:1b:81:fe:9a: 4a:ff:35:15:d8:6b:a0:bc:fc:05:41:83:ca:5f:32: 70:19:69:af:33:98:cd:3d:58:95:02:33:e4:5d:e5: 40:26:24:34:b1:2d:0a:4d:34:55:af:e7:e8:3d:e4: 76:8c:ef:74:2a:70:a7:0b:7f:3f:e6:95:25:07:04: 8f:ee:76:85:c0:30:25:fb:ba:38:85:aa:d3:f6:d5: b2:5f:a5:bc:a1:84:5a:d6:ac:5a:08:00:93:f6:a7: 6a:80:d3:c9:c4:45:fb:ee:23:d1:4d:0a:dd:6b:1b: 10:19:ff:d1:c0:44:3e:cf:63:5d:17:c8:53:41:0c: 79:eb:2d:f8:c0:bd:09:ed:92:d9:00:ba:7a:aa:c8: 2c:2d:fd:96:78:a5:c9:28:b4:28:0c:f7:d8:d9:13: 42:3a:51:15:ca:74:88:bf:b8:4e:be:1c:1d:06:47: fb:87:d8:a6:f5:71:1d:6f:0b:52:a6:99:3a:cd:34: dc:3a:61:7f:03:95:5e:4d:32:df:b4:77:9d:ff:4f: 3f:4a:bf:b8:ef:5b:42:06:34:1c:88:80:53:eb:53: 40:18:c6:46:c7:da:bb:a4:6e:ad:a8:51:c7:34:50: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.200.0/24 138.124.188.0/22 185.71.176.0/22 185.232.76.0/22 IPv6: 2a05:3400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200675 Signature Algorithm: sha256WithRSAEncryption 12:49:9d:15:ec:df:e8:db:fb:91:8a:86:88:a6:5e:30:45:00: 60:15:9c:99:31:6c:e5:20:56:f5:e4:54:ea:6f:40:24:3d:0f: aa:45:99:aa:4b:8b:71:bc:cf:f5:95:ee:61:fa:6b:5b:d0:0b: cf:67:32:e5:fa:09:5f:3a:b2:1b:77:97:b2:c4:96:ac:e9:c1: 7f:6c:8b:03:92:ad:66:6a:d5:94:bc:77:c0:e8:2a:e8:9f:78: 03:5c:de:c0:94:ff:33:ff:0e:81:14:43:e2:95:75:af:fc:cc: 12:5b:17:4f:db:a2:e5:d6:17:e7:7b:82:17:0e:b7:05:e8:00: 30:6b:69:b7:1e:8b:9f:2f:54:41:1f:c9:ec:d3:d1:10:9d:e4: 74:82:10:ce:fd:e0:74:1e:fb:6f:fb:d7:91:7b:6b:03:0a:cf: be:a9:a2:39:ed:af:03:4d:d1:ef:f9:68:88:5a:ff:f8:7f:4f: 44:80:c5:f7:37:e2:05:cd:a6:e5:f7:86:82:b7:fa:be:42:9f: a8:91:09:fc:d7:40:5d:3f:6c:1d:14:3a:5b:2e:c6:55:7f:2e: f4:d5:59:85:3c:ef:5d:fc:77:8c:78:dd:88:69:b9:3f:51:6a: de:f6:d3:1f:11:9d:6e:da:bd:8a:e3:36:94:04:92:bd:cf:e1: c7:6f:eb:cf -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt8Ep4V/gWyWlNA8wz/BT6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2VhZGVlNThmODY0ZjQ3MmViNDIyYjBiOTU0OTdiODUwNzVhMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjFq9C/6gbKQkH1MR5+A9zferHfP q7id0huB/ppK/zUV2GugvPwFQYPKXzJwGWmvM5jNPViVAjPkXeVAJiQ0sS0KTTRV r+foPeR2jO90KnCnC38/5pUlBwSP7naFwDAl+7o4harT9tWyX6W8oYRa1qxaCACT 9qdqgNPJxEX77iPRTQrdaxsQGf/RwEQ+z2NdF8hTQQx56y34wL0J7ZLZALp6qsgs Lf2WeKXJKLQoDPfY2RNCOlEVynSIv7hOvhwdBkf7h9im9XEdbwtSppk6zTTcOmF/ A5VeTTLftHed/08/Sr+471tCBjQciIBT61NAGMZGx9q7pG6tqFHHNFAeAwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFCzq3uWPhk9HLrQisLlUl7hQdaErMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzdjMmU4 NC1lNmNjLTQ3NTEtODg3Yi1iYzdhMjRjMmUyMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvN2MyZTg0 LWU2Y2MtNDc1MS04ODdiLWJjN2EyNGMyZTIxOS8xL0xPcmU1WS1HVDBjdXRDS3d1 VlNYdUZCMW9Tcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAW8LIAwQCiny8AwQCuUewAwQCuehMMA0EAgAC MAcDBQMqBTQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMP4zANBgkqhkiG9w0B AQsFAAOCAQEAEkmdFezf6Nv7kYqGiKZeMEUAYBWcmTFs5SBW9eRU6m9AJD0PqkWZ qkuLcbzP9ZXuYfprW9ALz2cy5foJXzqyG3eXssSWrOnBf2yLA5KtZmrVlLx3wOgq 6J94A1zewJT/M/8OgRRD4pV1r/zMElsXT9ui5dYX53uCFw63BegAMGtptx6Lny9U QR/J7NPREJ3kdIIQzv3gdB77b/vXkXtrAwrPvqmiOe2vA03R7/loiFr/+H9PRIDF 9zfiBc2m5feGgrf6vkKfqJEJ/NdAXT9sHRQ6Wy7GVX8u9NVZhTzvXfx3jHjdiGm5 P1Fq3vbTHxGdbtq9iuM2lASSvc/hx2/rzw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:25:37 2026 by rpki-client