This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer File: LS19l0PeLvovYzN4omj1jyqhYFA.cer (raw, json) Hash identifier: EwsMU9XNb+RCoHI+r8Q6gRlS6x//52S7itS5pj65H/0= Subject key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79106846EC476A5AE370B3852079983D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.218.82.0/23 IP: 193.218.118.0/23 IP: 2a0f:e580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:68:46:ec:47:6a:5a:e3:70:b3:85:20:79:98:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:1a:fb:e3:47:43:77:63:88:7a:bd:ad:29: 7e:a8:c0:8f:a2:ec:9f:81:e6:9f:aa:88:68:61:b1: 5c:9e:99:ad:c8:96:f3:0c:c7:50:15:5e:e8:07:4b: f4:20:ea:cc:b0:f2:c5:bc:7d:a3:00:15:50:23:85: 3b:d4:44:8c:f6:98:ad:35:7a:86:b9:56:cd:04:85: 1c:7c:e2:8b:8f:a7:a3:29:b1:59:2c:02:6f:2c:95: f9:ff:a7:fb:9c:b5:2f:ea:42:95:9d:37:b7:97:4a: 23:e2:74:7b:5b:aa:18:e7:0e:cc:90:5f:be:f7:9a: 7c:00:c6:32:8e:d1:9e:59:4c:1c:54:7a:21:b2:c9: 02:9d:aa:ea:28:2a:be:0a:d6:0c:19:3f:c0:0f:4a: c1:34:34:07:b9:5b:28:34:5e:75:23:5a:f4:d2:ff: d6:19:df:c7:51:cb:94:1a:90:89:c9:58:72:9b:3e: d4:b0:7a:94:dc:94:2d:c1:4b:51:fe:18:9a:93:8e: 1d:79:a9:ef:79:df:ce:f9:34:8d:84:39:8a:00:db: d3:e5:e2:13:05:eb:5b:60:e5:f0:57:dc:eb:19:d0: 47:18:75:bf:37:ce:22:6f:07:d8:d0:e5:94:0e:65: cb:5b:08:65:25:2e:76:ec:cf:f1:f4:40:0f:dc:91: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.82.0/23 193.218.118.0/23 IPv6: 2a0f:e580::/29 Signature Algorithm: sha256WithRSAEncryption 7a:55:5a:80:f5:0d:47:d9:45:b3:c8:43:29:fb:5e:bf:d4:2f: 82:8e:ec:79:1a:b3:8b:03:8f:93:46:49:9d:d4:c5:1b:e4:af: f5:b5:c9:f0:15:01:54:8e:80:cc:25:57:1f:c7:ed:3c:77:49: 61:75:9f:a5:d5:7b:67:8c:0c:51:29:9a:f7:1f:79:c9:3b:5d: f8:51:41:71:07:95:e4:d0:50:9e:25:36:7d:d5:8c:70:43:35: 6a:c4:d7:ca:bd:90:04:ee:e3:94:cf:d8:5c:6c:45:b3:8b:06: 5d:4b:6d:17:33:5d:e1:cb:e4:a5:53:7a:c5:0c:ef:c5:46:c3: ed:59:cd:f8:08:5e:70:87:e3:90:c0:c1:fd:6a:76:3a:3c:37: 48:a8:85:a7:a2:67:62:d7:0f:bd:08:ac:ef:73:7c:af:2a:6e: 51:c7:f8:e1:a8:ec:33:91:25:66:43:54:59:dc:f1:67:6a:6c: e5:17:be:cf:e4:dc:c5:39:7e:ae:5b:f9:51:76:e3:a5:58:8d: fc:60:a0:da:60:bc:5c:08:e3:af:53:52:c2:c7:1d:78:5b:4b: 16:2c:cf:58:03:70:7b:a5:eb:c3:5d:8a:41:54:20:ef:32:6d: d9:92:a7:c8:99:08:a6:5b:38:90:63:2a:96:45:75:af:8f:71: b9:fe:52:6f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt5EGhG7EdqWuNws4UgeZg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDJkN2Q5NzQzZGUyZWZhMmY2MzMzNzhhMjY4ZjU4ZjJhYTE2MDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11ka++NHQ3djiHq9rSl+qMCPouyf geafqohoYbFcnpmtyJbzDMdQFV7oB0v0IOrMsPLFvH2jABVQI4U71ESM9pitNXqG uVbNBIUcfOKLj6ejKbFZLAJvLJX5/6f7nLUv6kKVnTe3l0oj4nR7W6oY5w7MkF++ 95p8AMYyjtGeWUwcVHohsskCnarqKCq+CtYMGT/AD0rBNDQHuVsoNF51I1r00v/W Gd/HUcuUGpCJyVhymz7UsHqU3JQtwUtR/hiak44deanved/O+TSNhDmKANvT5eIT BetbYOXwV9zrGdBHGHW/N84ibwfY0OWUDmXLWwhlJS527M/x9EAP3JHknwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFC0tfZdD3i76L2MzeKJo9Y8qoWBQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2NmN2Mx OS0xYzdkLTRlYmUtYjRkZC1jYmNjZjkwNDU1ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvY2Y3YzE5 LTFjN2QtNGViZS1iNGRkLWNiY2NmOTA0NTVmZS8xL0xTMTlsMFBlTHZvdll6TjRv bWoxanlxaFlGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwdpSAwQBwdp2MA0EAgACMAcDBQMqD+WAMA0G CSqGSIb3DQEBCwUAA4IBAQB6VVqA9Q1H2UWzyEMp+16/1C+Cjux5GrOLA4+TRkmd 1MUb5K/1tcnwFQFUjoDMJVcfx+08d0lhdZ+l1XtnjAxRKZr3H3nJO134UUFxB5Xk 0FCeJTZ91YxwQzVqxNfKvZAE7uOUz9hcbEWziwZdS20XM13hy+SlU3rFDO/FRsPt Wc34CF5wh+OQwMH9anY6PDdIqIWnomdi1w+9CKzvc3yvKm5Rx/jhqOwzkSVmQ1RZ 3PFnamzlF77P5NzFOX6uW/lRduOlWI38YKDaYLxcCOOvU1LCxx14W0sWLM9YA3B7 pevDXYpBVCDvMm3ZkqfImQimWziQYyqWRXWvj3G5/lJv -----END CERTIFICATE-----Generated at Mon Jan 26 13:05:25 2026 by rpki-client