This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer (raw, json) Hash identifier: CAFMMWmP27o2zSwgS5U6kUQrh/cmdi5tsftQPEXmTVI= Subject key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BE82998DFADA006756B2643AE89FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51646 AS: 57146 IP: 91.231.4.0 -- 91.231.6.255 IP: 185.127.12.0/22 IP: 194.88.2.0/24 IP: 2001:67c:2314::/48 IP: 2001:67c:2400::/48 IP: 2a02:6a60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e8:29:98:df:ad:a0:06:75:6b:26:43:ae:89:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:72:22:c0:ad:14:69:1e:b2:59:e8:bb:7a:24: ac:50:17:c5:b4:92:45:ca:b8:bd:93:b2:9b:86:31: ea:30:66:3e:1c:bd:92:0b:08:2f:a2:cc:86:21:f4: eb:6c:1b:8c:6c:4e:3b:41:55:3e:c7:fb:6e:19:2e: 11:54:af:d7:58:32:10:0d:27:b1:66:ab:74:14:83: 85:34:8d:46:29:b4:29:99:7f:99:58:45:40:de:b9: 5e:72:fa:ab:a1:23:68:92:29:59:80:2e:f2:9b:4c: 4f:01:aa:77:3e:6f:a3:88:36:fc:94:40:86:3e:d1: 0c:0e:eb:53:8f:2b:60:78:d4:0b:9a:52:21:5e:20: 41:8c:7b:6e:ce:43:7e:50:c5:7e:cf:44:7e:74:a5: 24:8b:ad:8a:9c:6a:65:99:5b:b7:07:2e:2f:51:d3: 34:31:a1:77:2a:e0:2d:72:c5:a2:8c:66:43:1c:8b: 5c:5c:d8:fe:4f:24:75:50:2f:85:84:c3:62:94:3c: 48:37:e1:05:c5:52:10:6e:2a:12:eb:1b:e4:d3:1d: 77:94:a9:d3:02:ea:b2:03:ad:6b:76:b3:c9:80:c9: 18:4e:0e:bc:5e:f3:c1:df:b2:29:2f:fb:65:45:3e: 47:67:cb:0c:dc:17:da:57:66:85:ac:4f:f7:cf:5b: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.4.0-91.231.6.255 185.127.12.0/22 194.88.2.0/24 IPv6: 2001:67c:2314::/48 2001:67c:2400::/48 2a02:6a60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51646 57146 Signature Algorithm: sha256WithRSAEncryption 69:74:c0:3e:49:76:99:2a:14:3e:08:4e:17:29:f3:b6:0b:42: e3:c1:6c:5f:3c:89:ea:7a:5b:88:4b:cd:6d:25:88:eb:1c:8d: 3c:4c:8f:07:ab:95:96:45:4e:3c:22:c0:d9:4a:b2:60:0c:6f: 6b:cf:0b:06:31:7b:ce:84:45:6a:d1:49:2c:97:f6:ea:3a:b7: 94:15:a9:1a:f8:50:2b:ef:13:db:03:e4:20:8a:be:12:bb:a0: 3d:ef:65:37:c9:d3:b8:89:98:0d:0c:72:92:70:cc:a8:da:79: 8c:7a:d4:dc:0b:92:9c:ae:ed:8b:a7:f7:ce:75:07:1a:82:8a: 28:ec:f0:68:b7:3b:cf:42:02:71:6c:36:6b:09:1b:e5:ae:3e: 42:dd:80:f0:f3:07:75:6f:3b:3a:e1:5d:6f:d5:0b:f2:18:21: 57:03:28:2c:59:9f:44:c6:1a:7d:e9:93:7d:0a:ab:8c:d2:58: 38:01:30:92:79:d7:8b:d0:b3:30:2d:c1:c7:cc:79:04:d2:92: 13:07:01:d8:c1:f0:61:da:71:58:16:2d:8e:aa:54:fe:f9:72: 4c:08:7b:1e:bf:02:89:40:e9:95:f8:cf:c5:96:f3:5b:5f:7a: 66:56:0d:18:dc:f2:09:10:ca:c8:9f:d5:5b:2a:d9:9b:73:0c: 7d:9a:8d:0a -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt9W+gpmN+toAZ1ayZDron6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWJiMzYyNGI4MmYwZTFlNTM4YjAwOTE5ZjQ0MmQyMDBjN2UzY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HIiwK0UaR6yWei7eiSsUBfFtJJF yri9k7KbhjHqMGY+HL2SCwgvosyGIfTrbBuMbE47QVU+x/tuGS4RVK/XWDIQDSex Zqt0FIOFNI1GKbQpmX+ZWEVA3rlecvqroSNokilZgC7ym0xPAap3Pm+jiDb8lECG PtEMDutTjytgeNQLmlIhXiBBjHtuzkN+UMV+z0R+dKUki62KnGplmVu3By4vUdM0 MaF3KuAtcsWijGZDHItcXNj+TyR1UC+FhMNilDxIN+EFxVIQbioS6xvk0x13lKnT AuqyA61rdrPJgMkYTg68XvPB37IpL/tlRT5HZ8sM3BfaV2aFrE/3z1sIMwIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzQ5YmVm MS00MDFhLTQ4ZDItODc0Ni0yNjcyNzVlOTI1NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNDliZWYx LTQwMWEtNDhkMi04NzQ2LTI2NzI3NWU5MjU3MC8xL0xyczJKTGd2RGg1VGl3Q1Ju MFF0SUF4LVBOSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAgBAIAATAaMAwDBAJb5wQDBABb5wYDBAK5fwwDBADCWAIwHwQC AAIwGQMHACABBnwjFAMHACABBnwkAAMFACoCamAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAMm+AgMA3zowDQYJKoZIhvcNAQELBQADggEBAGl0wD5JdpkqFD4IThcp 87YLQuPBbF88iep6W4hLzW0liOscjTxMjwerlZZFTjwiwNlKsmAMb2vPCwYxe86E RWrRSSyX9uo6t5QVqRr4UCvvE9sD5CCKvhK7oD3vZTfJ07iJmA0McpJwzKjaeYx6 1NwLkpyu7Yun9851BxqCiijs8Gi3O89CAnFsNmsJG+WuPkLdgPDzB3VvOzrhXW/V C/IYIVcDKCxZn0TGGn3pk30Kq4zSWDgBMJJ514vQszAtwcfMeQTSkhMHAdjB8GHa cVgWLY6qVP75ckwIex6/AolA6ZX4z8WW81tfemZWDRjc8gkQysif1Vsq2ZtzDH2a jQo= -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:18 2026 by rpki-client