This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer (raw, json) Hash identifier: 2dtok2fPvVvy/cMjepa9nPQJagntwoUMssdIrbMyxiQ= Subject key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A0C7CC126D54E6AE3F832F1BC8F2D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44110 IP: 195.88.20.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:0c:7c:c1:26:d5:4e:6a:e3:f8:32:f1:bc:8f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:f0:93:95:91:49:ef:44:b3:4d:fa:1a:03: 17:8c:6d:8e:d8:39:71:b9:7b:42:08:63:12:62:6e: c2:9f:5c:b3:d1:0e:c7:25:ae:7a:b7:bd:3b:cc:c2: 3c:cb:c6:7a:3e:4d:e3:f0:57:18:b7:96:31:ba:54: 61:b1:04:82:7c:26:49:89:d6:f0:b1:88:ab:33:59: f0:e7:d2:50:8c:6a:8d:5c:ae:dd:92:ea:d7:6c:44: 1f:c3:5f:39:ca:45:65:c3:9b:87:41:c9:cb:94:92: cd:a2:33:c8:57:df:ab:eb:15:12:bb:42:ed:d2:61: b4:89:9e:0d:84:e9:46:d0:23:b4:aa:ac:dc:6a:7c: 19:ca:72:e7:c9:2e:17:ac:41:23:51:83:79:77:99: bc:ec:68:da:c9:40:ef:0c:3f:0f:f8:8e:2d:ff:5c: 4e:8a:38:11:76:1a:a5:64:8c:f1:b9:65:ff:92:ab: 24:1d:fd:f8:13:5e:1a:92:93:c9:94:16:b3:3c:f3: 61:29:56:8d:2f:ae:fe:d8:52:4e:18:1f:1e:07:83: 78:cd:b7:9c:ca:65:8b:f3:f1:f0:82:a4:7f:66:8d: 18:25:b3:6f:06:ba:44:fa:bb:a2:e1:dc:24:0d:3b: 1e:df:67:3f:96:23:51:1e:43:45:68:39:cf:76:0c: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.20.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44110 Signature Algorithm: sha256WithRSAEncryption a8:fc:84:0c:74:58:6f:06:46:23:76:cb:2b:1c:9f:d6:9d:0f: 71:ed:05:03:e0:08:fa:b5:74:64:a2:17:21:33:2b:80:c9:be: 30:80:d8:47:96:56:0e:f1:e2:6a:23:c8:86:a1:26:5a:0a:9a: 5a:d6:71:54:b5:dc:92:82:1a:ca:6c:2b:a8:f0:88:bd:30:78: 09:8a:a1:c1:cf:75:b5:6c:cc:b0:6e:bb:78:63:9a:03:90:ac: 1c:fc:38:78:31:99:d5:b4:ae:b2:c6:9a:ed:84:3d:49:13:b0: cf:1e:3f:3f:7c:06:f4:b8:80:ae:73:e1:cf:c4:2a:1b:a0:d1: 37:32:bf:13:c9:e5:2a:07:c2:f5:1b:0a:4a:55:10:b0:0e:81: f4:58:8f:09:f7:9b:87:91:a3:ad:48:85:2c:31:f1:57:fc:36: b5:11:c6:e7:6c:bc:da:bc:24:08:45:c9:94:5e:0c:25:66:1f: 4f:44:1e:c1:d8:01:cb:69:ee:66:2a:4d:6a:83:e7:ac:4d:9b: 50:e7:bf:2c:94:02:ad:50:10:0b:9e:fc:39:43:6e:82:8e:46: a7:ce:91:3b:b8:6f:6c:4e:61:e0:32:ff:ad:fc:b8:75:73:c6: 78:5b:a9:c0:47:26:d1:54:12:30:4c:30:cd:d5:8d:e5:83:64: c0:aa:c1:41 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6Wgx8wSbVTmrj+DLxvI8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDJhMDhhNzQzOGE0OTU4OWQ2MzRmODhhMDllOTM5NDFmODEwN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+zwk5WRSe9Es036GgMXjG2O2Dlx uXtCCGMSYm7Cn1yz0Q7HJa56t707zMI8y8Z6Pk3j8FcYt5YxulRhsQSCfCZJidbw sYirM1nw59JQjGqNXK7dkurXbEQfw185ykVlw5uHQcnLlJLNojPIV9+r6xUSu0Lt 0mG0iZ4NhOlG0CO0qqzcanwZynLnyS4XrEEjUYN5d5m87GjayUDvDD8P+I4t/1xO ijgRdhqlZIzxuWX/kqskHf34E14akpPJlBazPPNhKVaNL67+2FJOGB8eB4N4zbec ymWL8/HwgqR/Zo0YJbNvBrpE+rui4dwkDTse32c/liNRHkNFaDnPdgxTUwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFC0qCKdDiklYnWNPiKCek5QfgQf2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzJkY2Qx OC1jNWI2LTRmZjUtYjIzNS0yNmM2N2NkMDEyOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvMmRjZDE4 LWM1YjYtNGZmNS1iMjM1LTI2YzY3Y2QwMTI4Yy8xL0xTb0lwME9LU1ZpZFkwLUlv SjZUbEItQkJfWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw1gUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCsTjANBgkqhkiG9w0BAQsFAAOCAQEAqPyEDHRYbwZGI3bLKxyf1p0Pce0FA+AI +rV0ZKIXITMrgMm+MIDYR5ZWDvHiaiPIhqEmWgqaWtZxVLXckoIaymwrqPCIvTB4 CYqhwc91tWzMsG67eGOaA5CsHPw4eDGZ1bSussaa7YQ9SROwzx4/P3wG9LiArnPh z8QqG6DRNzK/E8nlKgfC9RsKSlUQsA6B9FiPCfebh5GjrUiFLDHxV/w2tRHG52y8 2rwkCEXJlF4MJWYfT0QewdgBy2nuZipNaoPnrE2bUOe/LJQCrVAQC578OUNugo5G p86RO7hvbE5h4DL/rfy4dXPGeFupwEcm0VQSMEwwzdWN5YNkwKrBQQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:24 2026 by rpki-client