This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer (raw, json) Hash identifier: hMCF7Phpe44PoZtgZW3SoD457eh/XopZePJlw2adyrc= Subject key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C5344E662B3ADE6244211222D2D15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.111.48.0/20 IP: 185.81.80.0/22 IP: 2a03:7740::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:53:44:e6:62:b3:ad:e6:24:42:11:22:2d:2d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:24:3e:d9:9c:07:b4:78:98:9a:91:6c:c0: 90:25:d6:44:5a:99:67:8f:63:c5:5c:64:58:c4:d2: 99:1a:22:b8:83:cc:c9:07:62:67:59:f4:a1:d3:07: 2c:d4:82:8f:e2:47:58:69:8f:e8:45:3a:29:53:39: bc:68:fd:18:e3:11:24:83:65:d8:d4:d9:d2:70:5f: 79:a3:5d:1d:57:cd:7a:85:e6:3f:28:06:4a:0b:2d: 1c:59:8d:2d:fb:ff:6d:b1:f4:8e:c9:7c:2e:99:d9: 4d:56:6d:d6:32:14:46:a0:f9:93:9b:50:6f:43:a8: c1:98:dd:ec:aa:ed:fd:bf:ab:5d:58:0d:4f:16:6f: 26:21:67:5a:15:97:76:0e:36:89:b4:34:b7:63:85: 82:f8:bd:c6:13:ca:31:2e:7c:23:a9:2c:fd:3a:3c: 6d:df:55:27:c6:63:72:9c:2f:42:9f:34:99:76:64: d5:9b:44:83:8e:a5:69:7d:25:dd:cd:5b:02:fe:b7: 38:15:23:c1:73:18:3d:6a:0f:0d:56:b7:97:cd:a5: c9:f9:d3:a4:48:50:57:69:86:fc:53:82:00:90:98: 13:3b:fe:69:35:3f:82:8a:b3:3a:9b:a4:b9:ed:95: a7:ed:0f:bd:37:39:46:dc:ce:dd:e5:1f:ca:ec:47: 12:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.48.0/20 185.81.80.0/22 IPv6: 2a03:7740::/32 Signature Algorithm: sha256WithRSAEncryption 56:e5:41:e5:ba:7f:55:90:92:97:23:37:fe:d8:27:e0:67:0e: ff:95:fb:ca:e3:69:67:59:0c:36:8c:0e:4e:26:2c:02:49:7d: d5:12:a6:b1:60:72:3d:62:02:02:8f:e1:31:8d:82:c2:1d:b9: ef:bb:5a:e3:f2:2a:7e:75:26:8b:aa:b9:38:8e:1f:af:34:fe: 71:41:51:d8:22:f1:40:f1:25:da:f5:cd:10:e3:d1:e3:4f:53: 71:02:20:7e:b8:2f:00:72:e6:ea:cf:fb:2d:04:3c:e2:ee:21: 16:dc:61:95:1a:86:5d:c7:71:ff:5c:32:b9:58:91:f2:5a:58: 51:33:49:03:ce:fb:3e:6a:e4:4f:76:07:c4:6b:3b:b0:50:b1: 16:10:78:fd:0c:b6:09:8a:73:a6:c8:83:99:80:4f:d8:77:e5: 9f:e5:c3:78:70:d2:b3:21:40:f4:44:2d:53:9e:24:ac:73:dd: 15:51:5b:61:9c:93:ca:8b:f0:71:98:84:56:ba:a7:82:6c:59: 5e:48:b4:2d:90:24:69:8a:67:b4:8f:af:a3:6f:c5:b8:c7:c9: 8c:ec:cc:ea:b8:7e:89:32:f2:8e:02:ff:21:f2:49:c9:08:2c: ec:39:77:0a:a2:c2:c6:9f:6a:2f:9c:e0:15:93:82:95:09:66: 06:01:be:49 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9XFNE5mKzreYkQhEiLS0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTgyN2M4N2NiYmZjMjYxYTI3NGU5Y2IxYjA5NTAyNmE4MGM2MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdUkPtmcB7R4mJqRbMCQJdZEWpln j2PFXGRYxNKZGiK4g8zJB2JnWfSh0wcs1IKP4kdYaY/oRTopUzm8aP0Y4xEkg2XY 1NnScF95o10dV816heY/KAZKCy0cWY0t+/9tsfSOyXwumdlNVm3WMhRGoPmTm1Bv Q6jBmN3squ39v6tdWA1PFm8mIWdaFZd2DjaJtDS3Y4WC+L3GE8oxLnwjqSz9Ojxt 31UnxmNynC9CnzSZdmTVm0SDjqVpfSXdzVsC/rc4FSPBcxg9ag8NVreXzaXJ+dOk SFBXaYb8U4IAkJgTO/5pNT+CirM6m6S57ZWn7Q+9NzlG3M7d5R/K7EcS6wIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFC6CfIfLv8JhonTpyxsJUCaoDGE2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzdiMjBi ZC1mYzRlLTRjYmYtYWQxYi0yNGZhMTA5NjVlODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvN2IyMGJk LWZjNGUtNGNiZi1hZDFiLTI0ZmExMDk2NWU4NS8xL0xvSjhoOHVfd21HaWRPbkxH d2xRSnFnTVlUWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQETm8wAwQCuVFQMA0EAgACMAcDBQAqA3dAMA0G CSqGSIb3DQEBCwUAA4IBAQBW5UHlun9VkJKXIzf+2CfgZw7/lfvK42lnWQw2jA5O JiwCSX3VEqaxYHI9YgICj+ExjYLCHbnvu1rj8ip+dSaLqrk4jh+vNP5xQVHYIvFA 8SXa9c0Q49HjT1NxAiB+uC8Acubqz/stBDzi7iEW3GGVGoZdx3H/XDK5WJHyWlhR M0kDzvs+auRPdgfEazuwULEWEHj9DLYJinOmyIOZgE/Yd+Wf5cN4cNKzIUD0RC1T niSsc90VUVthnJPKi/BxmIRWuqeCbFleSLQtkCRpime0j6+jb8W4x8mM7MzquH6J MvKOAv8h8knJCCzsOXcKosLGn2ovnOAVk4KVCWYGAb5J -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:47 2026 by rpki-client