This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer File: LnPLOHXZEhkmGzrpAQgTEaWgcas.cer (raw, json) Hash identifier: w6hTdJi1RptksjyjSDmPMJOpgF5/7IYSmTT78RR/p7A= Subject key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD5CE97147A098BCB3F426854394D0241 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 10:30:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 213.177.189.0/24 IP: 2a14:6640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:ce:97:14:7a:09:8b:cb:3f:42:68:54:39:4d:02:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 10:30:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e73cb3875d91219261b3ae901081311a5a071ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:0c:55:6a:f1:fa:57:94:42:31:7c:f3:16: 87:a4:ed:6b:76:33:f0:eb:90:8d:eb:5d:fe:c7:4f: b5:c7:7b:74:18:2b:67:75:0b:85:e9:77:df:87:fb: 3a:ce:a1:30:89:fc:b3:12:b1:00:14:ff:31:85:7f: 25:00:4b:8b:30:41:b3:cd:ab:9f:ba:97:d1:ac:65: d3:72:13:cc:ef:30:9b:b7:e1:6d:70:ac:7c:2d:9c: fc:db:47:8f:0d:12:4a:08:f2:f1:02:e4:01:21:65: d3:cc:90:3f:b8:22:a3:00:9c:84:f0:c8:11:e6:94: ea:37:a4:fc:83:9e:5a:71:9e:bf:a0:60:68:b6:be: 28:29:f5:f4:bf:f5:46:5f:6a:b3:e4:be:e8:99:f5: c8:13:eb:22:fe:46:17:fb:5a:b6:d3:18:c8:47:3e: 61:38:36:2b:c1:a0:1b:45:72:e2:9d:1a:7d:9f:c5: 32:25:46:ae:29:98:9a:67:ae:e5:c5:e0:59:2e:85: 38:a7:85:47:32:10:31:9e:26:15:be:4d:4c:d1:6d: 0f:42:1e:12:ad:b1:77:26:51:5b:4a:3d:e5:bf:51: 67:0f:8b:7d:ab:97:dd:a5:bd:4f:21:09:ef:2b:0f: d6:d1:6f:c4:c0:93:45:ca:48:f2:e6:1f:ad:87:3f: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.189.0/24 IPv6: 2a14:6640::/29 Signature Algorithm: sha256WithRSAEncryption a4:71:71:82:e3:22:5f:60:d9:07:39:c1:8c:fe:d5:0e:52:cb: dc:6f:67:f1:ff:f0:ff:f0:60:3e:11:4d:b8:4a:6a:c1:92:db: b9:da:71:43:e5:e1:5f:75:0b:33:52:61:09:47:b2:23:95:09: a1:80:53:cc:80:11:47:a2:d9:64:58:44:e8:e6:19:57:bb:93: 42:d5:06:fa:96:ba:2d:73:de:b1:ab:b5:ad:02:f1:fd:dc:17: 1e:88:bb:09:7e:b3:b2:97:99:64:94:8d:31:07:77:f7:37:93: 35:65:20:a7:90:a5:35:92:2d:9c:20:0b:94:84:db:d7:19:7e: 8e:31:5a:e4:c7:7a:49:7f:40:f2:f8:6c:d3:e5:8b:aa:d0:b0: 6d:67:27:37:a0:4e:28:15:a6:d0:5d:80:68:15:26:a0:d0:50: 9e:66:75:ee:20:d1:5d:18:87:c1:10:b7:aa:86:e8:b5:cc:88: 72:b7:b5:c5:56:54:f0:85:e4:0e:14:a1:4b:f2:cc:94:b2:89: bf:b1:0f:2f:66:c4:87:f8:43:7b:62:ea:0a:e8:15:bc:8a:de: 85:95:ae:b2:23:1c:2c:b2:cc:f7:0d:21:31:6d:7a:e4:3c:55: 60:42:fa:fa:19:58:ee:85:8e:91:1b:4f:92:e6:d6:a1:84:c8: 46:9f:4e:de -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZvVzpcUegmLyz9CaFQ5TQJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTAzMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTczY2IzODc1ZDkxMjE5MjYxYjNhZTkwMTA4MTMxMWE1YTA3MWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhMMVWrx+leUQjF88xaHpO1rdjPw 65CN613+x0+1x3t0GCtndQuF6Xffh/s6zqEwifyzErEAFP8xhX8lAEuLMEGzzauf upfRrGXTchPM7zCbt+FtcKx8LZz820ePDRJKCPLxAuQBIWXTzJA/uCKjAJyE8MgR 5pTqN6T8g55acZ6/oGBotr4oKfX0v/VGX2qz5L7omfXIE+si/kYX+1q20xjIRz5h ODYrwaAbRXLinRp9n8UyJUauKZiaZ67lxeBZLoU4p4VHMhAxniYVvk1M0W0PQh4S rbF3JlFbSj3lv1FnD4t9q5fdpb1PIQnvKw/W0W/EwJNFykjy5h+thz8GKQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFC5zyzh12RIZJhs66QEIExGloHGrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2YzZjJk OS0yYThmLTRhZTYtYmE1NS1mNGFmZmM4MDI4ZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvZjNmMmQ5 LTJhOGYtNGFlNi1iYTU1LWY0YWZmYzgwMjhmMy8xL0xuUExPSFhaRWhrbUd6cnBB UWdURWFXZ2Nhcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1bG9MA0EAgACMAcDBQMqFGZAMA0GCSqGSIb3 DQEBCwUAA4IBAQCkcXGC4yJfYNkHOcGM/tUOUsvcb2fx//D/8GA+EU24SmrBktu5 2nFD5eFfdQszUmEJR7IjlQmhgFPMgBFHotlkWETo5hlXu5NC1Qb6lrotc96xq7Wt AvH93BceiLsJfrOyl5lklI0xB3f3N5M1ZSCnkKU1ki2cIAuUhNvXGX6OMVrkx3pJ f0Dy+GzT5Yuq0LBtZyc3oE4oFabQXYBoFSag0FCeZnXuINFdGIfBELeqhui1zIhy t7XFVlTwheQOFKFL8syUsom/sQ8vZsSH+EN7YuoK6BW8it6Fla6yIxwsssz3DSEx bXrkPFVgQvr6GVjuhY6RG0+S5tahhMhGn07e -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:19 2026 by rpki-client