This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer (raw, json) Hash identifier: sssUn6bE8mU+CviLf9bnZMhAIEx3nv0MhFfLdQsA2do= Subject key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC6D2B3AB321C4B18A3E56348F050B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.87.52.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6d:2b:3a:b3:21:c4:b1:8a:3e:56:34:8f:05:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:aa:92:a4:b8:f3:51:3a:00:5c:fa:e9:68: 26:68:46:68:98:76:71:eb:d5:4e:2d:10:08:60:78: dd:fa:92:62:21:91:60:63:be:81:7a:2d:53:4e:64: 72:39:3e:7e:54:31:e5:0b:fc:f9:fe:9b:db:5c:96: 24:03:0d:65:c1:2a:08:85:27:e4:5c:63:02:29:7a: b5:92:25:ee:d9:b2:0e:eb:b4:76:de:45:9e:5b:b0: db:74:8f:1a:a1:ad:c8:ce:f9:8f:af:f5:3e:da:fc: fc:4a:de:e0:15:18:60:95:23:9b:f5:c0:3b:4c:6d: d6:ec:18:6c:b6:59:88:0f:6a:85:22:29:0c:67:d2: 8c:8c:b4:ff:68:0b:6d:b4:32:77:85:65:69:05:eb: 4f:dd:67:41:cc:c7:f6:19:d8:13:97:4a:e7:21:2a: 4a:31:79:c1:f7:2e:4d:54:14:f9:52:e1:70:dd:59: 22:ee:3b:88:0f:fd:5b:ed:24:ae:46:ab:31:46:09: 58:0d:cf:e9:f1:9d:df:d8:68:35:b9:ba:0b:bd:db: 18:e7:64:5a:5a:06:98:c8:4b:33:db:fa:45:96:65: a3:f5:cb:01:15:b2:70:93:3c:05:5a:d5:63:2f:dd: c1:92:ed:cf:ba:8c:4b:4f:d0:73:78:06:58:87:e7: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.52.0/22 Signature Algorithm: sha256WithRSAEncryption 16:58:70:23:ef:2d:d7:fd:8b:58:2f:f7:4e:c6:80:0a:da:23: b9:8a:fa:c6:f7:23:6d:42:4e:5a:64:ea:6e:62:14:61:17:66: 1a:76:a8:6e:a9:12:a2:34:47:d9:43:e5:93:f8:26:64:50:c8: 9a:b3:73:73:7d:c2:2c:59:44:48:c9:50:ad:be:a1:60:1e:f1: d6:6a:a8:cc:1a:73:69:18:61:25:9d:d8:59:3e:53:68:1b:fb: fa:b2:9c:4b:35:f2:90:40:a8:18:15:5b:11:f8:1d:30:9f:bc: f5:8f:24:9a:ed:cb:c1:d5:53:34:c2:3d:63:eb:02:fe:0f:dc: d0:42:83:38:00:85:1d:e9:d4:c7:85:d7:b2:e5:50:ba:95:98: ea:2d:1a:74:a8:6b:5d:e9:e2:3d:14:cb:fe:a9:b6:13:c1:23: d2:3d:7b:d9:95:3f:54:44:d2:4f:0c:01:3e:20:53:b3:38:e2: c2:1c:5c:51:d1:8e:79:cb:7f:af:05:c7:f7:8d:01:2d:d8:0d: fc:90:03:87:c9:7c:23:68:7b:4d:0d:67:37:de:b2:05:b3:10: b9:a6:b5:4c:a3:36:38:57:f4:e3:00:c5:e6:34:61:9a:19:c9: 7d:68:cc:1c:da:13:21:32:2e:fb:58:7e:28:98:a6:5c:54:53: 2c:42:a6:92 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57G0rOrMhxLGKPlY0jwULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTJmYjQ0NDZiOTdmNGUwYzJhOTU1OGRkOTlkYWNjYmYyOWUzODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03eqkqS481E6AFz66WgmaEZomHZx 69VOLRAIYHjd+pJiIZFgY76Bei1TTmRyOT5+VDHlC/z5/pvbXJYkAw1lwSoIhSfk XGMCKXq1kiXu2bIO67R23kWeW7DbdI8aoa3IzvmPr/U+2vz8St7gFRhglSOb9cA7 TG3W7BhstlmID2qFIikMZ9KMjLT/aAtttDJ3hWVpBetP3WdBzMf2GdgTl0rnISpK MXnB9y5NVBT5UuFw3Vki7juID/1b7SSuRqsxRglYDc/p8Z3f2Gg1uboLvdsY52Ra WgaYyEsz2/pFlmWj9csBFbJwkzwFWtVjL93Bku3PuoxLT9BzeAZYh+ezlwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFC4vtERrl/TgwqlVjdmdrMvynjgGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzA1NWJi Yi1hNTBhLTQzOTYtYWYyOS1kM2Q1MjJlNTc5MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvMDU1YmJi LWE1MGEtNDM5Ni1hZjI5LWQzZDUyMmU1NzkyOS8xL0xpLTBSR3VYOU9EQ3FWV04y WjJzeV9LZU9BWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVc0MA0GCSqGSIb3DQEBCwUAA4IBAQAWWHAj 7y3X/YtYL/dOxoAK2iO5ivrG9yNtQk5aZOpuYhRhF2YadqhuqRKiNEfZQ+WT+CZk UMias3NzfcIsWURIyVCtvqFgHvHWaqjMGnNpGGElndhZPlNoG/v6spxLNfKQQKgY FVsR+B0wn7z1jySa7cvB1VM0wj1j6wL+D9zQQoM4AIUd6dTHhdey5VC6lZjqLRp0 qGtd6eI9FMv+qbYTwSPSPXvZlT9URNJPDAE+IFOzOOLCHFxR0Y55y3+vBcf3jQEt 2A38kAOHyXwjaHtNDWc33rIFsxC5prVMozY4V/TjAMXmNGGaGcl9aMwc2hMhMi77 WH4omKZcVFMsQqaS -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:34 2026 by rpki-client