This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer File: LudClvzo0gvvoYeZ2ubseDHWHFo.cer (raw, json) Hash identifier: mRa7K6VBAp5UD/GxxCsbtMxeH+p/IVUcWCo8Zc5x1BI= Subject key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A32C8E402ECD95FAE7B0E9A2BEF1D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25164 IP: 45.142.224.0/22 IP: 193.16.44.0/24 IP: 194.146.212.0/22 IP: 195.177.234.0/23 IP: 2a01:200::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:8e:40:2e:cd:95:fa:e7:b0:e9:a2:be:f1:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:ba:87:8e:f1:a7:ed:da:b8:b4:cf:41:97: 72:0c:ff:84:2a:1b:ce:28:36:66:02:b5:35:bf:7c: 7d:50:46:c9:d5:9d:7b:16:98:4e:80:7a:00:08:21: 88:d7:4c:e3:4c:59:f1:a0:22:68:10:9f:af:fb:1f: d1:b2:2c:9d:a9:6b:65:59:fa:68:8e:7f:ee:47:02: 96:60:f6:2e:04:b8:8d:8a:eb:72:af:3e:b5:8c:d7: 0c:34:57:6e:9d:3f:01:3a:81:db:c3:09:94:f5:02: b6:4e:9f:33:45:74:03:31:a8:2f:60:4b:a0:3b:9c: a7:7b:b1:7f:db:bf:1f:70:92:fb:92:eb:52:82:2a: dd:de:a5:4f:fd:50:d3:8e:33:33:f0:5e:92:9a:8a: c0:86:99:39:cc:e1:44:32:0f:69:96:9d:a6:c9:8e: ae:34:fc:f6:eb:c1:9f:66:ba:f6:db:00:bc:73:c5: 20:61:63:38:9d:12:8e:eb:4b:62:be:96:9a:45:a4: 4c:91:66:d4:08:5e:cb:4e:35:50:45:62:37:5b:ae: a1:30:d5:5b:9a:29:f7:d1:bc:d6:bf:8e:23:42:56: 09:42:27:16:9f:65:58:40:21:b8:70:cd:49:e9:42: 1c:3e:65:3e:43:15:8a:d8:31:3b:5f:09:1c:20:e7: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.224.0/22 193.16.44.0/24 194.146.212.0/22 195.177.234.0/23 IPv6: 2a01:200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25164 Signature Algorithm: sha256WithRSAEncryption a2:89:b1:5c:c1:4d:24:fa:08:f1:18:52:34:74:d8:19:5c:5b: d8:fd:45:b7:18:02:ed:41:f2:18:0a:78:dd:a2:99:1d:96:18: 7c:cd:eb:1f:4d:ae:8f:7a:f1:90:c0:80:13:2e:ca:24:db:d3: 0d:b0:5e:e1:9c:58:06:4f:aa:8b:64:5f:65:7d:91:47:69:24: 27:f6:46:37:cc:1e:b5:34:b3:1c:88:88:a5:30:b0:96:7c:62: 84:dd:0a:2e:1d:77:bf:e0:77:ae:c8:2f:9f:5b:2e:85:38:59: fc:69:9c:1e:ca:10:92:1d:17:c6:4e:bd:f1:b7:28:f7:c8:e6: 9f:a6:63:5c:f5:57:64:d1:0a:a8:89:8d:fa:12:29:d8:53:f0: 5f:27:5e:2d:3f:be:e3:1f:9d:ea:38:58:5b:2d:46:2b:3c:e1: 03:60:c5:3e:41:c2:13:b6:44:1a:7f:26:37:ab:d3:6d:b3:96: b2:79:84:be:5e:2c:1f:02:ec:66:96:18:a3:5c:96:f7:6d:29: 20:39:cf:bc:e6:af:d5:55:58:8e:0f:fa:1d:c4:80:4f:e9:49: a6:f7:c5:81:d7:4a:0a:b8:75:34:41:4f:6d:fe:5e:af:be:f5: 2c:42:69:41:c0:3b:06:d8:d0:f3:ab:df:f1:5e:c1:27:d5:7b: 62:74:8f:30 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt4oyyOQC7NlfrnsOmivvHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWU3NDI5NmZjZThkMjBiZWZhMTg3OTlkYWU2ZWM3ODMxZDYxYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw26h47xp+3auLTPQZdyDP+EKhvO KDZmArU1v3x9UEbJ1Z17FphOgHoACCGI10zjTFnxoCJoEJ+v+x/RsiydqWtlWfpo jn/uRwKWYPYuBLiNiutyrz61jNcMNFdunT8BOoHbwwmU9QK2Tp8zRXQDMagvYEug O5yne7F/278fcJL7kutSgird3qVP/VDTjjMz8F6SmorAhpk5zOFEMg9plp2myY6u NPz268GfZrr22wC8c8UgYWM4nRKO60tivpaaRaRMkWbUCF7LTjVQRWI3W66hMNVb min30bzWv44jQlYJQicWn2VYQCG4cM1J6UIcPmU+QxWK2DE7XwkcIOcWBQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFC7nQpb86NIL76GHmdrm7Hgx1hxaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2M3M2Iz Yi01YjVjLTRhNzctOGI4MC1kMmI2OTdhZWZhMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYzczYjNi LTViNWMtNGE3Ny04YjgwLWQyYjY5N2FlZmEwMi8xL0x1ZENsdnpvMGd2dm9ZZVoy dWJzZURIV0hGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLY7gAwQAwRAsAwQCwpLUAwQBw7HqMA0EAgAC MAcDBQAqAQIAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmJMMA0GCSqGSIb3DQEB CwUAA4IBAQCiibFcwU0k+gjxGFI0dNgZXFvY/UW3GALtQfIYCnjdopkdlhh8zesf Ta6PevGQwIATLsok29MNsF7hnFgGT6qLZF9lfZFHaSQn9kY3zB61NLMciIilMLCW fGKE3QouHXe/4HeuyC+fWy6FOFn8aZweyhCSHRfGTr3xtyj3yOafpmNc9Vdk0Qqo iY36EinYU/BfJ14tP77jH53qOFhbLUYrPOEDYMU+QcITtkQafyY3q9Nts5ayeYS+ XiwfAuxmlhijXJb3bSkgOc+85q/VVViOD/odxIBP6Umm98WB10oKuHU0QU9t/l6v vvUsQmlBwDsG2NDzq9/xXsEn1XtidI8w -----END CERTIFICATE-----Generated at Mon Jan 26 09:56:15 2026 by rpki-client