This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer (raw, json) Hash identifier: aJ72ItwMX1CW/9tTzvrYD6xfmK4uXSjGDui7QvMduss= Subject key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB40AFFABB8A8B748F058D14625D4C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.235.236.0/22 IP: 2a0d:8100::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:40:af:fa:bb:8a:8b:74:8f:05:8d:14:62:5d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:59:8d:42:05:12:97:55:e5:de:cf:38:32: e6:f1:f1:61:29:0c:4e:71:5f:9b:aa:4d:9e:50:3a: af:ff:e6:42:c6:aa:f6:b6:16:f4:cd:6f:6d:09:51: 75:86:f7:5f:11:87:6b:bb:4d:f0:95:4a:4c:8e:ef: 4c:64:cd:07:70:6c:aa:5b:cf:51:3a:9b:6a:76:74: f4:c2:c1:ce:d5:af:43:5e:95:90:42:a8:12:d6:55: 36:0b:69:c3:3d:48:06:7f:cf:ec:9b:f8:49:d0:f9: 66:82:fb:4c:44:ff:10:14:7d:85:0b:8d:c0:59:3e: a0:1b:57:5d:ae:b4:be:c3:ac:2f:ff:02:a2:94:03: 05:f6:7e:4f:3d:56:32:d0:f1:de:80:59:cf:30:c0: 58:4a:64:c7:8a:8a:a5:93:95:e5:44:2a:7e:04:5b: 3a:e2:aa:b1:73:05:e5:ac:e6:d2:9c:99:3b:61:f1: ec:85:38:0a:25:3f:1a:4b:5f:c7:be:fa:6d:ad:ed: 21:57:20:32:bb:47:d1:de:bc:cd:f5:09:c8:9f:00: 5b:44:a1:2e:81:eb:02:de:5f:c1:65:74:60:2b:f7: 47:93:73:be:bb:6b:f7:96:f8:74:f9:6a:be:2b:34: 20:d3:eb:dc:54:ae:9b:77:b6:9b:97:4e:0a:5f:45: 1b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.236.0/22 IPv6: 2a0d:8100::/32 Signature Algorithm: sha256WithRSAEncryption 64:42:06:01:36:36:0d:7b:7e:e1:03:88:15:23:3d:fc:d9:36: 6f:97:5d:84:8e:01:48:f8:43:30:61:48:30:cf:b6:a5:f7:38: 5b:ee:7f:60:1c:5f:20:f9:47:b5:75:ef:56:84:ff:72:0e:f4: b2:32:c3:32:b5:a8:25:08:e5:63:ae:ba:0c:89:32:b7:fe:ba: 51:79:34:ec:74:37:f9:2c:57:99:98:3f:f8:3d:5f:2a:2e:9f: 48:95:0a:ca:00:b1:0a:79:bd:ac:46:e2:ee:0e:42:74:50:f0: 1e:94:7e:f6:90:1c:31:c4:e5:ca:58:ff:c4:6e:21:c3:9e:a8: 7f:04:0a:4d:d3:88:a6:7a:75:25:f5:ea:0a:f5:75:65:61:37: aa:31:f0:ab:0e:3f:ce:05:6e:8d:3e:0d:74:3b:c5:5f:08:1a: f1:25:45:53:b0:4f:de:4b:73:e4:61:51:1e:58:f2:7f:28:4e: 56:c7:5c:fc:42:08:06:87:d0:22:17:56:9d:7a:9b:08:4a:5c: c5:2d:36:42:10:4c:46:1a:a8:ca:7f:72:bd:e4:46:3f:36:c9: 18:67:b6:af:aa:e5:33:09:7b:a0:81:b6:88:57:4a:6b:d6:81: 7e:bc:77:24:c9:1a:9f:0b:66:4e:27:55:ed:1e:83:93:78:2b: 89:b0:b2:2a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt260Cv+ruKi3SPBY0UYl1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDY3NmE2MWRjZjRkMjIyYmE2NmNkYTE5NDMwZjYxZTYxMWQ4YWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr79ZjUIFEpdV5d7PODLm8fFhKQxO cV+bqk2eUDqv/+ZCxqr2thb0zW9tCVF1hvdfEYdru03wlUpMju9MZM0HcGyqW89R OptqdnT0wsHO1a9DXpWQQqgS1lU2C2nDPUgGf8/sm/hJ0PlmgvtMRP8QFH2FC43A WT6gG1ddrrS+w6wv/wKilAMF9n5PPVYy0PHegFnPMMBYSmTHioqlk5XlRCp+BFs6 4qqxcwXlrObSnJk7YfHshTgKJT8aS1/Hvvptre0hVyAyu0fR3rzN9QnInwBbRKEu gesC3l/BZXRgK/dHk3O+u2v3lvh0+Wq+KzQg0+vcVK6bd7abl04KX0UbfQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFC1namHc9NIiumbNoZQw9h5hHYquMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2IyYzY4 ZS1lYjNiLTRlMDEtYjUwYS1hODZhMjQ2NTU4NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYjJjNjhl LWViM2ItNGUwMS1iNTBhLWE4NmEyNDY1NTg3MC8xL0xXZHFZZHowMGlLNlpzMmhs REQySG1FZGlxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuevsMA0EAgACMAcDBQAqDYEAMA0GCSqGSIb3 DQEBCwUAA4IBAQBkQgYBNjYNe37hA4gVIz382TZvl12EjgFI+EMwYUgwz7al9zhb 7n9gHF8g+Ue1de9WhP9yDvSyMsMytaglCOVjrroMiTK3/rpReTTsdDf5LFeZmD/4 PV8qLp9IlQrKALEKeb2sRuLuDkJ0UPAelH72kBwxxOXKWP/EbiHDnqh/BApN04im enUl9eoK9XVlYTeqMfCrDj/OBW6NPg10O8VfCBrxJUVTsE/eS3PkYVEeWPJ/KE5W x1z8QggGh9AiF1adepsISlzFLTZCEExGGqjKf3K95EY/NskYZ7avquUzCXuggbaI V0pr1oF+vHckyRqfC2ZOJ1XtHoOTeCuJsLIq -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:27 2026 by rpki-client