This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer (raw, json) Hash identifier: PLwPoucv6CNf2LrE1+6Up8h14Tv6MGGqLvulL8AmLC4= Subject key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758F59062A7CE47AA3E7212E285B14A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.240.172.0/22 IP: 2a00:5640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f5:90:62:a7:ce:47:aa:3e:72:12:e2:85:b1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:ca:f2:78:71:4b:87:0b:73:0e:0b:87:96: 84:25:50:0c:65:4d:7c:06:b3:62:2a:bd:78:dc:6a: 41:73:c5:97:6a:fb:97:ab:58:3f:ad:15:48:00:40: bf:ac:2d:b3:64:e4:48:74:1c:38:16:2c:49:63:a9: b0:cc:98:90:21:2e:24:b0:54:b5:ec:38:35:2b:2f: 4c:f2:2d:6b:f9:55:fd:94:95:34:95:e0:93:6c:41: 0b:ca:71:f6:66:b2:3b:d2:fe:6c:fc:95:cf:16:e7: b5:c8:63:8a:ad:c4:79:cb:d7:24:4e:43:6d:41:6a: b7:56:e1:6b:56:0c:db:7b:0e:87:a0:e5:ba:5e:48: 61:20:2f:8f:ff:c3:a4:b0:67:19:2e:2e:41:1a:b1: aa:0b:a8:5d:b4:7a:31:9e:d3:c1:46:91:e7:65:f4: f1:64:71:54:f9:36:29:64:7a:12:91:a6:87:66:86: 82:5b:e3:f2:d6:43:bb:9f:8e:03:d4:12:9e:ea:25: 66:98:34:32:b3:58:d9:a7:9a:40:86:39:e4:af:c0: 05:69:66:f3:7a:05:5d:1b:ff:d0:bc:38:34:61:86: 5a:c4:cb:f4:6c:60:fa:d8:3e:96:b5:6e:dd:42:3f: 94:12:b4:dd:ec:05:89:3b:42:19:fb:06:a1:0f:22: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.172.0/22 IPv6: 2a00:5640::/29 Signature Algorithm: sha256WithRSAEncryption 8d:b2:8c:a9:59:15:5e:62:35:7b:b4:d7:f9:19:e2:94:20:ec: dd:95:3d:57:05:58:b1:90:20:09:cb:b1:43:28:94:60:33:e1: d4:cd:54:82:99:fb:0c:e1:4b:84:bc:93:0b:58:16:05:07:5f: 96:e0:c9:88:4d:21:70:38:8d:49:7f:d8:cf:ca:cd:69:b7:75: b3:b7:42:82:7b:c6:3d:6a:75:fe:1d:9d:07:71:40:33:36:94: 30:74:7e:85:22:4c:34:c4:bb:c4:0f:7a:7a:79:ba:5a:65:1e: 6a:65:a8:81:1a:58:4b:4b:54:5e:70:a9:d5:3b:d0:46:d0:bf: 93:c7:c2:d8:b5:19:dd:72:c9:53:ea:b8:dd:35:aa:11:77:c6: 5b:95:f2:82:49:57:d3:d7:eb:4f:99:3d:88:26:20:a0:27:de: f6:85:31:18:fe:bf:01:46:01:64:22:fc:32:51:ab:3b:d7:94: 40:d7:13:43:c5:07:f5:d9:ed:11:7f:e7:86:05:bd:ae:98:b5: 35:c2:78:2d:d3:05:4e:ed:8a:95:96:e6:ee:41:a2:96:a6:06: 70:0b:ee:cb:d7:e2:f8:06:c9:a6:15:1b:64:a1:12:12:62:b8: 56:3a:10:d1:1a:b4:74:c5:5a:90:1c:b0:49:79:97:09:18:05: 3d:a1:54:2f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WPWQYqfOR6o+chLihbFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGJkYjg5ZmI0MTE4ZmZhNTVmYWZkYmY0NWUxOTI4MmJlMGU3YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqLK8nhxS4cLcw4Lh5aEJVAMZU18 BrNiKr143GpBc8WXavuXq1g/rRVIAEC/rC2zZORIdBw4FixJY6mwzJiQIS4ksFS1 7Dg1Ky9M8i1r+VX9lJU0leCTbEELynH2ZrI70v5s/JXPFue1yGOKrcR5y9ckTkNt QWq3VuFrVgzbew6HoOW6XkhhIC+P/8OksGcZLi5BGrGqC6hdtHoxntPBRpHnZfTx ZHFU+TYpZHoSkaaHZoaCW+Py1kO7n44D1BKe6iVmmDQys1jZp5pAhjnkr8AFaWbz egVdG//QvDg0YYZaxMv0bGD62D6WtW7dQj+UErTd7AWJO0IZ+wahDyKuGQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFC29uJ+0EY/6Vfr9v0XhkoK+DnrPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2YwMGNj Yy1lYzNmLTQwZGYtYTlmYy03Y2M3OTkxNzMwMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvZjAwY2Nj LWVjM2YtNDBkZi1hOWZjLTdjYzc5OTE3MzAwYS8xL0xiMjRuN1FSal9wVi12Ml9S ZUdTZ3I0T2VzOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufCsMA0EAgACMAcDBQMqAFZAMA0GCSqGSIb3 DQEBCwUAA4IBAQCNsoypWRVeYjV7tNf5GeKUIOzdlT1XBVixkCAJy7FDKJRgM+HU zVSCmfsM4UuEvJMLWBYFB1+W4MmITSFwOI1Jf9jPys1pt3Wzt0KCe8Y9anX+HZ0H cUAzNpQwdH6FIkw0xLvED3p6ebpaZR5qZaiBGlhLS1RecKnVO9BG0L+Tx8LYtRnd cslT6rjdNaoRd8ZblfKCSVfT1+tPmT2IJiCgJ972hTEY/r8BRgFkIvwyUas715RA 1xNDxQf12e0Rf+eGBb2umLU1wngt0wVO7YqVlubuQaKWpgZwC+7L1+L4BsmmFRtk oRISYrhWOhDRGrR0xVqQHLBJeZcJGAU9oVQv -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:47 2026 by rpki-client