This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer (raw, json) Hash identifier: e26wpL2NCMPAjp1mGrlIQLsvOvvW2fYHr7FcNB11oGU= Subject key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12A50FDD1A19001430FC0C7C06F7B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12788 IP: 80.78.32.0/19 IP: 195.14.21.0/24 IP: 2a00:bb60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a5:0f:dd:1a:19:00:14:30:fc:0c:7c:06:f7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:0b:6d:b2:3f:c5:a3:66:37:28:9d:b8:67: d3:04:4b:91:f5:a9:92:ad:15:12:0d:c6:42:eb:0f: 4e:fc:cc:2a:f1:d0:d5:9d:9a:52:a3:97:c5:6e:48: f2:f6:71:44:c3:6c:40:a5:b3:0e:89:0c:50:c0:70: f1:56:f5:6d:0e:fa:f5:be:0b:4d:e1:60:9c:ab:58: b4:37:64:82:50:3f:e4:85:c3:92:d2:e9:4b:3f:d9: 3c:32:a8:cb:ac:83:8f:61:4b:d6:c3:b9:eb:37:18: 5b:7f:99:15:10:7d:57:d7:6f:6a:c7:f0:77:2b:7b: e8:e8:79:1d:08:d7:74:e9:9d:45:fa:eb:91:4c:7f: 5e:72:86:46:f5:10:c3:50:a3:65:56:52:9b:7a:ab: 30:92:ef:14:d5:37:3e:32:d1:7d:81:4e:d1:f1:81: 4c:ea:19:ac:c0:18:ca:23:42:08:13:f6:5b:5d:52: 11:5e:e3:06:78:83:1e:68:1a:28:20:5e:a6:d9:84: 6e:0e:c6:c5:84:2a:56:e8:f0:d5:26:ac:65:2a:62: 2a:e7:8c:d0:0c:93:d3:64:ac:ee:b1:9f:c4:82:21: 1e:02:4e:c6:64:8d:4b:ab:08:94:16:31:da:50:73: 4d:86:0c:cf:9f:5c:73:e3:5d:8f:a5:69:2c:f1:16: 53:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.78.32.0/19 195.14.21.0/24 IPv6: 2a00:bb60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12788 Signature Algorithm: sha256WithRSAEncryption 0e:20:24:ef:3f:bf:b0:c9:03:9e:04:8d:c3:91:3f:1c:e4:f7: e3:79:d6:2a:28:65:85:8e:74:d8:ee:da:50:00:d8:64:43:9c: a9:b0:be:2f:16:64:16:9e:f3:a0:6a:81:47:83:b1:ce:0d:4a: b1:aa:5d:d4:be:e6:96:1f:a6:c6:a0:36:94:ab:90:7f:31:bb: 80:c1:04:bd:f2:46:f5:c7:20:a0:ee:aa:8d:a7:78:d1:85:b5: 96:69:89:c0:66:ed:a7:47:59:1f:41:57:8c:87:0e:57:b6:98: c6:f2:8b:ae:7f:12:1b:7d:7a:42:58:7b:c9:06:49:fc:6c:d5: 4b:8a:c8:da:a5:5b:74:46:5f:a7:c9:41:b2:d0:af:8f:02:e4: 47:9c:01:72:51:4d:c0:33:01:5a:af:0c:3b:70:cd:66:18:9e: 8b:ac:8d:77:32:b1:4a:ff:42:e3:45:7e:e6:43:bc:42:71:d0: 04:c5:8d:01:b1:81:51:4c:bd:cb:46:dd:28:10:69:b8:bc:07: f2:fd:28:97:a8:0d:0a:4a:70:83:d8:6f:45:3d:6d:25:9d:31: af:08:ec:76:e7:cb:b3:ea:fe:7a:c4:3e:ab:6c:bd:07:4f:16: b0:7d:5b:52:7e:8e:30:3a:b1:72:78:cc:4e:bd:7e:95:08:6d: e0:12:47:8e -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt8EqUP3RoZABQw/Ax8Bve4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTNkNWFkYjFkMDY0MzY5YjdlNDFiYWViZGIwZThlMTM1ZDY1NzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E4LbbI/xaNmNyiduGfTBEuR9amS rRUSDcZC6w9O/Mwq8dDVnZpSo5fFbkjy9nFEw2xApbMOiQxQwHDxVvVtDvr1vgtN 4WCcq1i0N2SCUD/khcOS0ulLP9k8MqjLrIOPYUvWw7nrNxhbf5kVEH1X129qx/B3 K3vo6HkdCNd06Z1F+uuRTH9ecoZG9RDDUKNlVlKbeqswku8U1Tc+MtF9gU7R8YFM 6hmswBjKI0IIE/ZbXVIRXuMGeIMeaBooIF6m2YRuDsbFhCpW6PDVJqxlKmIq54zQ DJPTZKzusZ/EgiEeAk7GZI1LqwiUFjHaUHNNhgzPn1xz412PpWks8RZTMQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFC49WtsdBkNpt+Qbrr2w6OE11ldjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4Lzg3NjE1 YS0zY2EzLTRiNWItODEwYy1iZWJmNDJmYmU4NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvODc2MTVh LTNjYTMtNGI1Yi04MTBjLWJlYmY0MmZiZTg0Ni8xL0xqMWEyeDBHUTJtMzVCdXV2 YkRvNFRYV1YyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFUE4gAwQAww4VMA0EAgACMAcDBQAqALtgMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjH0MA0GCSqGSIb3DQEBCwUAA4IBAQAOICTv P7+wyQOeBI3DkT8c5PfjedYqKGWFjnTY7tpQANhkQ5ypsL4vFmQWnvOgaoFHg7HO DUqxql3UvuaWH6bGoDaUq5B/MbuAwQS98kb1xyCg7qqNp3jRhbWWaYnAZu2nR1kf QVeMhw5XtpjG8ouufxIbfXpCWHvJBkn8bNVLisjapVt0Rl+nyUGy0K+PAuRHnAFy UU3AMwFarww7cM1mGJ6LrI13MrFK/0LjRX7mQ7xCcdAExY0BsYFRTL3LRt0oEGm4 vAfy/SiXqA0KSnCD2G9FPW0lnTGvCOx258uz6v56xD6rbL0HTxawfVtSfo4wOrFy eMxOvX6VCG3gEkeO -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:05 2026 by rpki-client