This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer File: LRyqaTWPjJj3pxnyWX1drdvQAYw.cer (raw, json) Hash identifier: 80uB2nmnfP1e/w0Vh1iasBMcLtKmI3g7nFp2LUnSzGI= Subject key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1430C8F1FEE314E94BAA97A1CC333B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25211 IP: 45.141.232.0/22 IP: 78.159.128.0/22 IP: 78.159.136.0/22 IP: 78.159.149.0 -- 78.159.150.255 IP: 78.159.152.0/21 IP: 91.92.33.0 -- 91.92.35.255 IP: 91.92.40.0 -- 91.92.54.255 IP: 93.152.205.0 -- 93.152.227.255 IP: 93.152.230.0/24 IP: 93.152.233.0/24 IP: 94.26.28.0/23 IP: 94.26.76.0/22 IP: 94.26.89.0 -- 94.26.90.255 IP: 94.190.195.0/24 IP: 185.96.252.0/22 IP: 212.102.105.0/24 IP: 212.102.107.0/24 IP: 2a06:9f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:30:c8:f1:fe:e3:14:e9:4b:aa:97:a1:cc:33:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:1f:17:f1:74:76:2a:5d:34:89:32:b6:77: d3:7e:99:ea:32:52:ba:2e:5b:fd:66:53:bd:46:a6: db:cf:1d:cd:24:89:17:25:8d:50:64:6b:33:dd:d8: f4:18:51:5d:8f:46:57:a8:ed:d9:98:b4:15:96:61: b6:bd:ee:f2:c1:cb:f7:97:1d:c5:da:63:a2:fa:f7: ff:7d:ee:bb:50:f0:b5:33:cc:d8:a2:9b:7d:9e:82: 6c:59:e6:0d:45:07:71:a7:c5:3f:f1:01:a9:6a:0f: 7b:5f:e0:f8:a2:30:46:1d:4a:f7:f3:e9:69:77:26: 6d:ae:3c:11:3d:0b:af:0f:f8:e1:14:2f:f9:89:73: 2f:0e:83:8f:66:8b:2e:d8:cb:e4:15:ba:38:9e:25: ef:fd:a1:e6:ed:07:d2:11:4c:fd:b9:83:04:ce:9c: d4:31:02:a2:a8:ae:83:8c:06:a3:ee:e6:d5:5e:0f: aa:86:28:f6:2d:cf:77:46:5d:cc:9d:4c:ca:9e:74: c4:ea:e2:31:b0:e1:4e:c5:b0:ec:98:80:57:8c:d4: 25:13:0b:ed:99:72:47:11:8d:23:d6:43:da:5a:5a: 85:07:ce:ab:63:2d:bb:ff:02:9b:7d:96:db:d4:60: c5:9a:86:78:d2:26:88:74:79:1c:c5:f6:2a:27:75: 13:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.232.0/22 78.159.128.0/22 78.159.136.0/22 78.159.149.0-78.159.150.255 78.159.152.0/21 91.92.33.0-91.92.35.255 91.92.40.0-91.92.54.255 93.152.205.0-93.152.227.255 93.152.230.0/24 93.152.233.0/24 94.26.28.0/23 94.26.76.0/22 94.26.89.0-94.26.90.255 94.190.195.0/24 185.96.252.0/22 212.102.105.0/24 212.102.107.0/24 IPv6: 2a06:9f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25211 Signature Algorithm: sha256WithRSAEncryption 0c:5c:12:03:11:1e:45:71:56:26:7f:10:ab:9f:0c:f4:63:c5: c0:7e:96:3a:ea:85:ab:7d:94:e5:c9:dc:77:64:50:fb:01:bd: d4:65:bc:f0:8f:bc:e3:a8:ff:b0:85:c0:73:2c:79:4c:57:ff: 4a:e5:27:9e:ca:9d:0a:67:80:b6:30:a2:cd:06:b8:e7:3f:de: 27:ac:d3:82:69:17:27:8a:a5:08:9c:5d:20:1b:b0:df:51:46: f6:29:11:9a:f0:d5:98:6f:d9:c8:dd:6f:2d:f7:50:eb:9c:98: 93:75:5b:98:7a:16:f9:35:07:f0:0a:69:35:c3:10:6a:d8:e6: f8:97:a5:90:9b:ed:91:53:62:35:34:50:fe:04:3a:35:17:1d: 77:ab:89:fa:b0:ce:59:e9:84:9a:95:33:f0:ab:11:ab:fa:00: da:14:46:b4:41:36:78:76:90:0b:e8:df:3d:e4:5d:85:a5:6a: d5:5f:62:96:80:66:02:d4:57:fc:f7:56:eb:98:c3:9a:8f:7c: a1:8a:3c:70:9a:3c:e6:ba:01:a1:14:4c:73:08:47:65:aa:d3: c0:3e:94:fe:6e:6c:0f:a7:44:cc:28:38:43:7b:bb:5a:2e:20: ab:8b:89:43:fd:d5:b2:5e:79:fa:ff:a4:c5:63:d3:73:e7:46: a7:5b:c6:0a -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgISAZt/FDDI8f7jFOlLqpehzDM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDFjYWE2OTM1OGY4Yzk4ZjdhNzE5ZjI1OTdkNWRhZGRiZDAwMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuIfF/F0dipdNIkytnfTfpnqMlK6 Llv9ZlO9Rqbbzx3NJIkXJY1QZGsz3dj0GFFdj0ZXqO3ZmLQVlmG2ve7ywcv3lx3F 2mOi+vf/fe67UPC1M8zYopt9noJsWeYNRQdxp8U/8QGpag97X+D4ojBGHUr38+lp dyZtrjwRPQuvD/jhFC/5iXMvDoOPZosu2MvkFbo4niXv/aHm7QfSEUz9uYMEzpzU MQKiqK6DjAaj7ubVXg+qhij2Lc93Rl3MnUzKnnTE6uIxsOFOxbDsmIBXjNQlEwvt mXJHEY0j1kPaWlqFB86rYy27/wKbfZbb1GDFmoZ40iaIdHkcxfYqJ3UT3wIDAQAB o4IDOzCCAzcwHQYDVR0OBBYEFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2E5MzY5 OS0xODhiLTQ3MGEtOTZiNy0yOWIwODVkZDIzYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYTkzNjk5 LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8xL0xSeXFhVFdQakpqM3B4bnlX WDFkcmR2UUFZdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG6BggrBgEF BQcBBwEB/wSBqjCBpzCBlQQCAAEwgY4DBAItjegDBAJOn4ADBAJOn4gwDAMEAE6f lQMEAE6flgMEA06fmDAMAwQAW1whAwQCW1wgMAwDBANbXCgDBABbXDYwDAMEAF2Y zQMEAl2Y4AMEAF2Y5gMEAF2Y6QMEAV4aHAMEAl4aTDAMAwQAXhpZAwQAXhpaAwQA Xr7DAwQCuWD8AwQA1GZpAwQA1GZrMA0EAgACMAcDBQMqBp8AMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAmJ7MA0GCSqGSIb3DQEBCwUAA4IBAQAMXBIDER5FcVYmfxCr nwz0Y8XAfpY66oWrfZTlydx3ZFD7Ab3UZbzwj7zjqP+whcBzLHlMV/9K5Seeyp0K Z4C2MKLNBrjnP94nrNOCaRcniqUInF0gG7DfUUb2KRGa8NWYb9nI3W8t91DrnJiT dVuYehb5NQfwCmk1wxBq2Ob4l6WQm+2RU2I1NFD+BDo1Fx13q4n6sM5Z6YSalTPw qxGr+gDaFEa0QTZ4dpAL6N895F2FpWrVX2KWgGYC1Ff891brmMOaj3yhijxwmjzm ugGhFExzCEdlqtPAPpT+bmwPp0TMKDhDe7taLiCri4lD/dWyXnn6/6TFY9Nz50an W8YK -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:02 2026 by rpki-client