This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer File: LuliCJJdg2-NA30XmYCoOhsME0I.cer (raw, json) Hash identifier: GmQWeutUci/MW262HzcIrVgMBXe6ecuSSDVwQIH2LhE= Subject key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F85352C236F96CCFF114BD1124D2B7D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201107 IP: 193.30.96.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:35:2c:23:6f:96:cc:ff:11:4b:d1:12:4d:2b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ee96208925d836f8d037d179980a83a1b0c1342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:be:ce:67:c9:86:8d:53:78:9d:6f:3b:93: 88:e2:0b:32:36:7e:7a:7e:53:bc:e3:fa:e7:5b:8b: fd:53:11:5a:4c:9d:be:17:4b:81:f3:fe:41:69:b7: 80:dc:b8:4d:98:01:07:98:40:b1:86:14:5f:36:b5: df:0d:04:6a:fa:b2:b6:1c:11:86:14:6d:0c:ec:0c: 29:64:d5:62:64:cd:9b:04:b9:27:3e:21:6a:79:44: d6:24:fe:aa:36:bc:22:d0:40:d0:46:13:05:79:40: 11:65:d1:e0:96:15:da:9b:61:5c:2e:6d:d8:2f:b3: 43:82:46:a1:af:e6:ad:7d:30:ff:9a:63:91:c9:4f: d2:74:42:b5:85:7c:e8:dc:dc:a5:5c:f9:58:cf:48: 21:f3:c8:64:bd:e1:02:51:f2:0c:2f:25:21:ca:c4: 7a:98:03:1b:5b:8e:7e:e0:04:9b:f0:11:24:a8:4a: 02:ca:06:61:f4:a8:ed:82:f8:97:cb:3b:7c:ee:29: dd:c7:32:0b:c5:39:d7:40:5b:5f:d1:4b:fc:90:82: 00:48:e1:c1:1f:68:8c:34:f6:05:e8:a4:ab:b6:cb: f8:ca:af:2b:ff:5d:03:8d:50:51:fb:10:60:c0:a6: d1:21:b8:a7:7a:c3:bb:8a:af:de:50:7e:db:d9:08: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201107 Signature Algorithm: sha256WithRSAEncryption ad:63:18:d0:db:53:f6:68:55:43:18:51:0f:5b:fa:47:6e:bd: dd:27:64:06:ec:a3:39:09:2d:6f:a2:e3:f0:6a:0b:fd:b4:11: e7:11:ea:6a:ce:94:bb:9a:79:6d:d2:b5:ca:db:5b:99:76:a9: 62:40:00:d4:27:5c:44:a9:36:22:7d:2b:27:63:23:32:81:c8: 4c:84:c9:26:cd:cb:56:5d:9f:d7:0d:b0:ed:71:40:76:7d:64: 43:60:2c:7c:70:06:74:f1:83:b8:d9:f4:4c:9e:24:8a:d9:67: 0c:52:94:19:08:42:03:c6:67:3b:e6:31:1c:cc:e4:ae:0b:f7: 1e:40:6f:0c:d3:1f:f2:83:05:1c:85:18:7a:30:a0:03:62:e4: bf:90:f9:47:ed:b4:8b:9a:a8:27:38:9c:79:97:08:3a:e2:c3: 03:ba:ac:ec:08:d2:00:d9:fa:19:cf:ef:16:dd:c2:ba:db:89: af:2a:b2:af:c2:74:b3:72:5e:44:6f:61:77:47:e4:fd:b1:da: ef:e2:25:fa:32:3f:ed:38:3a:19:d3:d5:9f:b1:2d:19:2d:a7: 84:3e:c4:57:f6:aa:2f:b1:29:bf:b1:86:ee:be:bc:7d:79:09: 9a:de:97:c3:23:cb:f4:28:fd:14:85:95:aa:24:33:dc:97:72: ba:54:98:8e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hTUsI2+WzP8RS9ESTSt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWU5NjIwODkyNWQ4MzZmOGQwMzdkMTc5OTgwYTgzYTFiMGMxMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGi+zmfJho1TeJ1vO5OI4gsyNn56 flO84/rnW4v9UxFaTJ2+F0uB8/5BabeA3LhNmAEHmECxhhRfNrXfDQRq+rK2HBGG FG0M7AwpZNViZM2bBLknPiFqeUTWJP6qNrwi0EDQRhMFeUARZdHglhXam2FcLm3Y L7NDgkahr+atfTD/mmORyU/SdEK1hXzo3NylXPlYz0gh88hkveECUfIMLyUhysR6 mAMbW45+4ASb8BEkqEoCygZh9KjtgviXyzt87indxzILxTnXQFtf0Uv8kIIASOHB H2iMNPYF6KSrtsv4yq8r/10DjVBR+xBgwKbRIbinesO7iq/eUH7b2Qh+cQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFC7pYgiSXYNvjQN9F5mAqDobDBNCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzcxYzYw OC0xY2MyLTQ4OTktYTVmYS04NDZhYWYwZWIxYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvNzFjNjA4 LTFjYzItNDg5OS1hNWZhLTg0NmFhZjBlYjFhZC8xL0x1bGlDSkpkZzItTkEzMFht WUNvT2hzTUUwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwR5gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMRkzANBgkqhkiG9w0BAQsFAAOCAQEArWMY0NtT9mhVQxhRD1v6R2693SdkBuyj OQktb6Lj8GoL/bQR5xHqas6Uu5p5bdK1yttbmXapYkAA1CdcRKk2In0rJ2MjMoHI TITJJs3LVl2f1w2w7XFAdn1kQ2AsfHAGdPGDuNn0TJ4kitlnDFKUGQhCA8ZnO+Yx HMzkrgv3HkBvDNMf8oMFHIUYejCgA2Lkv5D5R+20i5qoJziceZcIOuLDA7qs7AjS ANn6Gc/vFt3CutuJryqyr8J0s3JeRG9hd0fk/bHa7+Il+jI/7Tg6GdPVn7EtGS2n hD7EV/aqL7Epv7GG7r68fXkJmt6XwyPL9Cj9FIWVqiQz3JdyulSYjg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:40 2026 by rpki-client