This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer File: lDkZOu8f5NVwPLg033qrr4pL5Cw.cer (raw, json) Hash identifier: jHsNNLEjjNeScvPx9F/Z0wPD3aU0kCS2VXzWDD7txPM= Subject key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80DB6F23AED00FB6DEDF444F85B14A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200370 IP: 45.8.160.0/22 IP: 193.56.59.0/24 IP: 193.56.61.0/24 IP: 193.56.107.0/24 IP: 193.56.118.0/24 IP: 194.60.208.0/22 IP: 2a05:cac0::/29 IP: 2a0f:51c0::/29 IP: 2a12:93c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:db:6f:23:ae:d0:0f:b6:de:df:44:4f:85:b1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:b8:13:d8:b8:0b:a7:38:a0:c9:fb:34:f7: 50:4b:da:2c:c3:fd:c1:53:59:9b:7d:5c:b7:c1:ef: 7f:ee:ba:5b:56:50:0c:a2:cb:16:8d:44:8a:42:da: fe:f2:c5:58:f7:e0:d6:d4:c1:c3:53:7e:6a:3d:8a: 6e:71:6a:65:32:45:88:e6:e4:e2:55:ac:a5:b3:c9: 2d:4c:da:2a:47:29:ea:f8:37:34:08:ca:1f:8a:79: a3:d3:a7:da:b7:5a:72:72:0d:31:33:88:0e:02:14: 38:6c:85:be:16:bd:29:f4:2c:88:59:9b:72:b5:be: b7:96:8b:67:cc:a9:ac:68:2e:55:52:0b:c6:8d:52: 7b:4f:3c:2f:de:26:97:f9:c7:ee:83:ea:43:c5:80: 40:a9:a3:3f:e7:33:89:07:10:06:07:c8:6c:f9:96: e1:7f:5a:01:eb:5a:e1:5d:23:59:81:8b:fa:d1:35: 04:53:0d:3f:e7:71:9c:22:55:b5:3a:01:86:f2:9f: d1:aa:ef:be:4a:77:11:b6:8d:bb:cc:03:26:d3:47: 61:91:bf:b7:ed:37:dc:1d:b1:5a:61:b8:0c:8e:68: c1:75:83:9d:f7:cf:3b:63:d6:da:3b:4a:45:90:50: e5:6e:63:e3:26:71:12:d7:42:e1:a7:c7:94:0f:20: 29:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.160.0/22 193.56.59.0/24 193.56.61.0/24 193.56.107.0/24 193.56.118.0/24 194.60.208.0/22 IPv6: 2a05:cac0::/29 2a0f:51c0::/29 2a12:93c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200370 Signature Algorithm: sha256WithRSAEncryption 83:5a:1e:85:81:63:63:89:56:8c:3f:4a:69:66:86:12:45:d3: 74:4c:25:e9:36:b3:71:eb:28:27:be:02:73:d2:ca:b9:04:d2: 5d:54:4e:81:af:ee:72:29:31:e9:a6:43:79:ca:81:0d:22:4d: e8:d4:b6:1a:54:e9:f2:98:25:2c:f8:79:a8:3d:78:a2:bf:a8: c7:c2:65:21:72:b8:77:b1:66:4d:16:ae:8e:84:9f:ce:07:73: b7:16:d6:4a:13:09:c8:16:b0:43:a9:94:3f:1f:cc:ba:85:02: 2a:28:d1:64:85:02:94:08:03:a4:10:cb:b3:1a:79:55:c8:d3: 98:1a:6c:66:7e:e7:54:b2:b7:f1:bd:d2:18:28:bf:68:bc:0a: ac:16:96:1c:9c:66:bd:41:c7:fc:4f:d5:c8:34:54:85:60:6f: e3:02:74:2d:c3:1a:61:3d:f6:28:1e:4f:0c:3b:31:ed:ee:bc: 27:dc:ed:4b:c2:99:45:1b:2d:e1:49:6b:72:b7:ad:72:ab:80: c3:3c:12:89:8a:b2:0c:71:dd:da:07:ed:96:77:50:49:a6:83: ee:2b:c5:17:cd:35:11:d1:f4:1b:9d:15:ab:f3:3b:2c:a4:43: 2c:c3:ec:bf:5d:92:38:cf:4a:17:7d:25:26:61:16:e4:00:36: 8f:6c:d2:b5 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt8gNtvI67QD7be30RPhbFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDM5MTkzYWVmMWZlNGQ1NzAzY2I4MzRkZjdhYWJhZjhhNGJlNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+y4E9i4C6c4oMn7NPdQS9osw/3B U1mbfVy3we9/7rpbVlAMossWjUSKQtr+8sVY9+DW1MHDU35qPYpucWplMkWI5uTi Vayls8ktTNoqRynq+Dc0CMofinmj06fat1pycg0xM4gOAhQ4bIW+Fr0p9CyIWZty tb63lotnzKmsaC5VUgvGjVJ7Tzwv3iaX+cfug+pDxYBAqaM/5zOJBxAGB8hs+Zbh f1oB61rhXSNZgYv60TUEUw0/53GcIlW1OgGG8p/Rqu++SncRto27zAMm00dhkb+3 7TfcHbFaYbgMjmjBdYOd9887Y9baO0pFkFDlbmPjJnES10Lhp8eUDyAp0wIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFJQ5GTrvH+TVcDy4NN96q6+KS+QsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2ZmY2Uw ZS1jM2FkLTRjOGEtOTkxNC03NDVjZGU3NGQwMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvZmZjZTBl LWMzYWQtNGM4YS05OTE0LTc0NWNkZTc0ZDAxYi8xL2xEa1pPdThmNU5Wd1BMZzAz M3FycjRwTDVDdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTAqBAIAATAkAwQCLQigAwQAwTg7AwQAwTg9AwQAwThrAwQAwTh2 AwQCwjzQMBsEAgACMBUDBQMqBcrAAwUDKg9RwAMFAyoSk8AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAw6yMA0GCSqGSIb3DQEBCwUAA4IBAQCDWh6FgWNjiVaMP0pp ZoYSRdN0TCXpNrNx6ygnvgJz0sq5BNJdVE6Br+5yKTHppkN5yoENIk3o1LYaVOny mCUs+HmoPXiiv6jHwmUhcrh3sWZNFq6OhJ/OB3O3FtZKEwnIFrBDqZQ/H8y6hQIq KNFkhQKUCAOkEMuzGnlVyNOYGmxmfudUsrfxvdIYKL9ovAqsFpYcnGa9Qcf8T9XI NFSFYG/jAnQtwxphPfYoHk8MOzHt7rwn3O1LwplFGy3hSWtyt61yq4DDPBKJirIM cd3aB+2Wd1BJpoPuK8UXzTUR0fQbnRWr8zsspEMsw+y/XZI4z0oXfSUmYRbkADaP bNK1 -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:14 2026 by rpki-client