This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer File: LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer (raw, json) Hash identifier: gn7vOcg1HolOeRQSwS56Kj8WM4zJAhfe1oYFrezC4N8= Subject key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759062682CC32D9520ED3B98FF4E2AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209273 IP: 217.145.228.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:06:26:82:cc:32:d9:52:0e:d3:b9:8f:f4:e2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d0:4e:fa:17:f0:0c:3f:e9:55:80:fe:43:02: 7b:90:b2:f8:4c:2c:59:85:71:6a:42:15:24:30:81: 5d:d6:07:f7:6a:3c:e5:5a:27:27:57:cd:45:77:94: 5f:06:24:58:3b:1d:26:fd:61:4c:3b:5b:7b:4e:6e: 49:73:c4:13:85:4c:ff:aa:f6:99:25:00:db:54:a6: 69:80:e5:e1:47:f1:75:b1:1b:85:b9:47:8c:b5:82: 50:4b:90:88:dc:4c:da:d9:24:bc:37:5c:5e:80:a1: 27:64:0b:14:34:1f:22:18:85:0e:15:bd:90:2c:b4: da:ba:85:fd:6c:e9:fc:f3:6c:75:bb:09:aa:2b:c1: fd:d7:79:5a:91:31:48:a6:a0:a8:e0:6c:6b:fb:eb: af:f8:8e:fd:7b:e9:5e:d4:f2:20:40:e2:35:f1:e7: 08:19:94:e6:d3:3c:15:c9:cd:9f:e1:1b:c0:60:57: e9:0c:c0:89:e7:8d:bf:77:08:eb:77:56:96:12:ba: 2a:6b:1e:69:a8:8b:19:09:85:29:ee:48:ec:cc:a6: d0:4b:c5:d8:be:cb:15:02:81:c6:ce:b9:ba:34:cd: 25:43:9b:b8:1b:1e:20:0a:a5:3c:09:89:d2:67:4b: e0:63:2a:3b:83:ce:18:95:32:2d:3c:0a:62:8d:07: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209273 Signature Algorithm: sha256WithRSAEncryption 01:16:08:91:c8:1f:34:aa:b3:c4:4f:1c:2e:b3:b1:a0:a6:29: 68:9d:8f:f7:71:1a:b4:f2:d1:e7:2e:e9:b7:1a:46:d8:e2:aa: 01:3b:27:e7:d0:fa:ec:19:7a:80:5b:60:fe:28:4e:f8:14:d0: 06:a0:4e:6d:85:bb:2b:5f:9a:20:31:b0:28:51:b5:fc:c0:7d: 6b:15:86:c7:19:a4:11:2c:3c:ea:d1:8f:fe:06:bd:40:6c:26: 4d:dc:b3:22:11:b7:3e:0c:ab:fe:a1:94:ce:2e:ca:a3:67:6f: eb:f0:3e:80:2d:35:4a:53:b4:90:24:aa:ba:f5:38:52:90:c6: 4b:fe:ec:89:d6:be:48:95:d8:14:dd:bb:c7:35:b2:8c:68:3a: 36:4f:7c:06:e4:37:60:cd:28:ab:19:59:d9:6e:cf:62:0f:27: 0a:2f:54:88:f7:11:09:b9:a2:0d:b0:47:b5:96:02:3b:e0:40: 44:26:e8:3f:a2:7e:fc:38:a0:e8:b4:ed:3d:8f:5c:62:1f:a8: 9c:41:77:a1:13:7b:64:0d:a8:dd:d7:7e:ac:42:d5:53:ac:9f: fe:a2:6e:04:d1:a3:cc:4a:3b:f5:80:a1:1a:a7:fc:c4:9e:7d: c7:0d:93:22:fa:15:21:2d:4f:c0:67:ca:d8:68:1c:ab:e2:c6: c3:8a:91:59 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WQYmgswy2VIO07mP9OKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDI4Y2ZhM2ZkMmRhOWNhYWE2NTkyODQ3NThkZWU2NzA5OTkzNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79BO+hfwDD/pVYD+QwJ7kLL4TCxZ hXFqQhUkMIFd1gf3ajzlWicnV81Fd5RfBiRYOx0m/WFMO1t7Tm5Jc8QThUz/qvaZ JQDbVKZpgOXhR/F1sRuFuUeMtYJQS5CI3Eza2SS8N1xegKEnZAsUNB8iGIUOFb2Q LLTauoX9bOn882x1uwmqK8H913lakTFIpqCo4Gxr++uv+I79e+le1PIgQOI18ecI GZTm0zwVyc2f4RvAYFfpDMCJ542/dwjrd1aWEroqax5pqIsZCYUp7kjszKbQS8XY vssVAoHGzrm6NM0lQ5u4Gx4gCqU8CYnSZ0vgYyo7g84YlTItPApijQcoiQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFC0oz6P9LanKqmWShHWN7mcJmTT4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2ZlYmFi MC1kOTNhLTQ3MDQtOWE3MS0zYWQ1MmU4Yjk2MjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvZmViYWIw LWQ5M2EtNDcwNC05YTcxLTNhZDUyZThiOTYyOC8xL0xTalBvXzB0cWNxcVpaS0Vk WTN1WndtWk5QZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQC2ZHkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMxeTANBgkqhkiG9w0BAQsFAAOCAQEAARYIkcgfNKqzxE8cLrOxoKYpaJ2P93Ea tPLR5y7ptxpG2OKqATsn59D67Bl6gFtg/ihO+BTQBqBObYW7K1+aIDGwKFG1/MB9 axWGxxmkESw86tGP/ga9QGwmTdyzIhG3Pgyr/qGUzi7Ko2dv6/A+gC01SlO0kCSq uvU4UpDGS/7sida+SJXYFN27xzWyjGg6Nk98BuQ3YM0oqxlZ2W7PYg8nCi9UiPcR CbmiDbBHtZYCO+BARCboP6J+/Dig6LTtPY9cYh+onEF3oRN7ZA2o3dd+rELVU6yf /qJuBNGjzEo79YChGqf8xJ59xw2TIvoVIS1PwGfK2Ggcq+LGw4qRWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:07 2026 by rpki-client