This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer File: LWmLr5_z7uvmYoSIn79onU5oPIE.cer (raw, json) Hash identifier: cZ/90hPvGL7uph8KHJzcLo2KBMhW4x3t2OdiQlCOM9c= Subject key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8274A24122C1FBB1D1501ADCC6EAEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15709 IP: 2.200.0.0/13 IP: 80.226.0.0/16 IP: 90.186.0.0/16 IP: 109.40.0.0 -- 109.46.255.255 IP: 2001:928::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:74:a2:41:22:c1:fb:b1:d1:50:1a:dc:c6:ea:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:f4:e1:b8:6f:d0:2c:cf:8d:35:ac:78:34: 81:45:ba:e1:49:e7:c9:ae:c5:0c:d9:8f:d1:85:e0: 91:54:1d:1b:02:48:b5:c9:8d:eb:95:5b:8e:3f:c4: 03:7e:89:62:2c:ff:8c:6e:c1:fd:e4:c9:6f:f6:cd: 17:5f:b8:36:2f:63:c6:c1:fe:22:fb:c7:d0:f3:29: a7:79:18:34:f7:6d:d0:d2:93:79:42:cd:fa:ba:c1: 6e:49:0a:56:0c:2f:fb:d8:53:ed:70:fb:1a:d3:7f: f5:79:4a:63:52:0c:dd:0d:7a:50:73:3c:10:3f:9c: 6a:56:eb:34:57:41:43:04:ec:3a:6b:8b:c8:51:9b: 93:df:d2:89:39:0a:c1:f1:59:ca:b5:26:c1:ba:90: 80:4e:da:fb:a9:7d:c6:f2:be:0a:fe:72:8e:cd:73: b3:a4:81:39:ea:28:63:aa:a6:09:20:7a:71:de:e8: 0c:34:a6:2e:4d:27:8c:eb:6a:89:c9:d8:45:7c:b8: 93:19:0b:51:eb:f8:20:c5:30:e0:90:f8:e2:da:82: 35:40:cc:19:65:6f:86:09:95:8f:b1:33:05:98:52: 68:c4:27:9a:e2:51:47:31:2a:29:84:b8:17:d2:bd: 4f:c6:23:58:bf:46:3b:d9:80:59:01:ef:59:32:0c: 57:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.200.0.0/13 80.226.0.0/16 90.186.0.0/16 109.40.0.0-109.46.255.255 IPv6: 2001:928::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15709 Signature Algorithm: sha256WithRSAEncryption a4:31:99:1d:bf:21:51:b5:cd:61:50:79:b9:90:bf:42:c3:64: 50:5f:bd:02:0c:35:cf:46:40:d2:c9:ee:53:ce:23:48:96:b2: 93:fc:6c:00:d6:03:ca:7e:62:48:28:00:91:f8:fa:0b:2f:e7: 56:61:5b:db:3d:6d:e3:9a:c5:44:54:6d:7e:f0:ea:2c:bb:78: 72:dd:99:e7:ef:a3:6e:a5:e1:a9:b3:31:e7:0e:b0:32:82:ab: fc:80:aa:6b:00:0b:c9:dc:53:ed:bd:7c:94:b8:f8:f6:ef:52: 9a:80:0c:20:51:76:63:da:54:42:07:87:86:f5:3a:aa:38:95: b1:50:3b:c7:0a:75:f5:29:9b:72:27:eb:be:e0:3f:38:c8:af: c1:f3:d8:00:3f:ac:d1:84:2e:a0:83:bc:88:12:a4:e4:5d:67: dc:27:b4:56:14:31:00:52:d6:27:ea:d3:71:43:f2:bf:bf:43: 81:53:52:14:2f:0f:50:04:b4:70:8f:71:ca:b6:a9:27:c0:66: a4:71:73:eb:b6:31:68:50:a4:46:39:4b:cf:ec:7c:2c:89:56: b2:76:22:e6:9d:a2:43:41:7e:35:40:12:28:12:a4:d1:ca:85: 93:df:1b:e6:2d:24:fe:c2:25:2e:f4:6b:c9:20:56:7d:fc:e1: 68:5b:02:b3 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt/gnSiQSLB+7HRUBrcxurvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDY5OGJhZjlmZjNlZWViZTY2Mjg0ODg5ZmJmNjg5ZDRlNjgzYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9X04bhv0CzPjTWseDSBRbrhSefJ rsUM2Y/RheCRVB0bAki1yY3rlVuOP8QDfoliLP+MbsH95Mlv9s0XX7g2L2PGwf4i +8fQ8ymneRg0923Q0pN5Qs36usFuSQpWDC/72FPtcPsa03/1eUpjUgzdDXpQczwQ P5xqVus0V0FDBOw6a4vIUZuT39KJOQrB8VnKtSbBupCATtr7qX3G8r4K/nKOzXOz pIE56ihjqqYJIHpx3ugMNKYuTSeM62qJydhFfLiTGQtR6/ggxTDgkPji2oI1QMwZ ZW+GCZWPsTMFmFJoxCea4lFHMSophLgX0r1PxiNYv0Y72YBZAe9ZMgxXbQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzU3MmE5 OC0zYmI3LTQyNzYtOWQzOS1kZmY1YTA5YTgyY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvNTcyYTk4 LTNiYjctNDI3Ni05ZDM5LWRmZjVhMDlhODJjYi8xL0xXbUxyNV96N3V2bVlvU0lu NzlvblU1b1BJRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAhBAIAATAbAwMDAsgDAwBQ4gMDAFq6MAoDAwNtKAMDAG0uMA0E AgACMAcDBQAgAQkoMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj1dMA0GCSqGSIb3 DQEBCwUAA4IBAQCkMZkdvyFRtc1hUHm5kL9Cw2RQX70CDDXPRkDSye5TziNIlrKT /GwA1gPKfmJIKACR+PoLL+dWYVvbPW3jmsVEVG1+8Oosu3hy3Znn76NupeGpszHn DrAygqv8gKprAAvJ3FPtvXyUuPj271KagAwgUXZj2lRCB4eG9TqqOJWxUDvHCnX1 KZtyJ+u+4D84yK/B89gAP6zRhC6gg7yIEqTkXWfcJ7RWFDEAUtYn6tNxQ/K/v0OB U1IULw9QBLRwj3HKtqknwGakcXPrtjFoUKRGOUvP7HwsiVaydiLmnaJDQX41QBIo EqTRyoWT3xvmLST+wiUu9GvJIFZ9/OFoWwKz -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:50 2026 by rpki-client