This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer (raw, json) Hash identifier: 0cmQ7igARUUbKzPW4eT+1+URIJ1VtZUjEGAhfvfIvL4= Subject key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECF8C23CC31E079F62B35110AE47D1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60117 IP: 185.45.192.0/24 IP: 185.45.194.0/23 IP: 185.82.200.0/24 IP: 185.82.202.0/24 IP: 185.106.120.0/24 IP: 185.106.122.0/23 IP: 185.117.72.0/23 IP: 185.141.24.0/23 IP: 185.141.27.0/24 IP: 185.183.97.0 -- 185.183.98.255 IP: 185.198.56.0/24 IP: 185.198.58.0/23 IP: 185.244.148.0/23 IP: 185.244.151.0/24 IP: 188.116.36.0/24 IP: 194.36.188.0/24 IP: 194.36.190.0/23 IP: 212.8.251.0/24 IP: 2a03:660::/32 IP: 2a04:dd00::/29 IP: 2a05:9340::/29 IP: 2a06:3d80::/29 IP: 2a0e:df40::/29 IP: 2a0f:5f00::/29 IP: 2a0f:b380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f8:c2:3c:c3:1e:07:9f:62:b3:51:10:ae:47:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94948e5f2fa04b222a6e96883b840f7124531556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:73:98:1b:f1:11:f2:6a:80:50:5f:1b:8d: bb:7c:21:51:cb:69:cc:a2:76:00:ce:8a:61:2a:4b: 9e:38:60:f5:46:de:e8:7f:f8:93:dc:2d:10:15:df: bd:c6:5e:3c:df:a4:8d:a8:12:d6:c4:a4:e0:7b:9e: af:8f:04:98:c0:9c:eb:aa:f5:25:65:76:d8:6d:6d: 6d:63:a7:39:af:89:98:85:18:bf:06:6f:a4:fa:8c: 37:b6:95:0d:96:cb:16:ef:8a:95:99:83:86:ce:2c: 51:f9:b5:fc:fa:c5:d7:09:17:50:86:76:f9:b1:c1: a5:ba:96:92:15:18:f5:ce:33:22:ed:0f:05:51:56: 12:4c:a5:d2:42:39:a2:4d:34:30:b8:1a:49:ec:64: 62:ef:78:c5:f0:21:d0:a4:a7:71:74:b0:1b:ca:d0: 03:0a:66:80:4f:b0:b0:99:68:e5:ab:d9:fb:ed:2f: d2:85:11:ff:39:ad:d5:66:33:8e:c0:f1:cb:1f:4b: 65:39:b4:db:c3:82:e1:9d:3a:5e:32:0b:ee:a6:b4: d0:df:9d:b6:95:20:84:ff:7a:fc:20:63:4a:31:32: e4:00:dc:0f:75:d2:25:7e:cc:e6:5e:48:e7:11:25: 7c:30:cd:cd:91:8e:cb:b4:0a:d1:e1:35:90:eb:00: 06:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.192.0/24 185.45.194.0/23 185.82.200.0/24 185.82.202.0/24 185.106.120.0/24 185.106.122.0/23 185.117.72.0/23 185.141.24.0/23 185.141.27.0/24 185.183.97.0-185.183.98.255 185.198.56.0/24 185.198.58.0/23 185.244.148.0/23 185.244.151.0/24 188.116.36.0/24 194.36.188.0/24 194.36.190.0/23 212.8.251.0/24 IPv6: 2a03:660::/32 2a04:dd00::/29 2a05:9340::/29 2a06:3d80::/29 2a0e:df40::/29 2a0f:5f00::/29 2a0f:b380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60117 Signature Algorithm: sha256WithRSAEncryption 2a:fd:c9:4e:89:f3:04:97:3e:58:9f:f3:c3:56:7c:60:28:1d: 54:a1:25:7f:b8:ae:d9:13:fd:df:4c:5e:72:7f:0b:04:8f:c4: d0:14:46:d6:9a:e7:f6:cb:07:96:d6:3e:3d:ca:55:1e:69:d3: c2:c8:e6:83:83:07:f3:6f:d2:36:a1:cc:bd:f6:a1:6d:9a:c3: 7d:3f:27:61:3c:ef:7b:ae:85:c2:72:2c:30:36:62:95:1c:63: 04:ea:23:f8:ec:52:d0:2a:c2:93:4f:e1:6b:50:52:46:8c:d4: cc:83:d2:5d:73:58:57:8f:9d:72:f2:9a:74:98:9e:af:31:54: 0a:e0:8d:ba:77:5e:12:e8:8d:b0:2f:f1:6d:99:f9:79:e8:b6: 9f:29:c4:e4:7a:81:cc:81:6d:d7:83:a8:76:d1:e4:82:59:d4: cf:c0:18:6b:8c:7b:ce:d8:c0:47:25:64:ee:71:62:d7:72:1f: 42:24:33:1b:60:25:06:fc:4e:d2:30:d6:ff:91:75:0b:c9:96: 26:29:a1:1d:27:54:18:c6:5d:3d:0f:d7:8c:af:6b:95:0c:da: 43:16:9f:6f:e4:d2:d5:6d:61:73:0b:26:12:35:13:ed:f9:4a: ee:6d:b5:7c:77:44:b7:26:ef:b9:f2:6d:21:e7:65:1e:aa:f9: bb:d5:1a:0e -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISAZt57PjCPMMeB59is1EQrkfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDk0OGU1ZjJmYTA0YjIyMmE2ZTk2ODgzYjg0MGY3MTI0NTMxNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fpzmBvxEfJqgFBfG427fCFRy2nM onYAzophKkueOGD1Rt7of/iT3C0QFd+9xl4836SNqBLWxKTge56vjwSYwJzrqvUl ZXbYbW1tY6c5r4mYhRi/Bm+k+ow3tpUNlssW74qVmYOGzixR+bX8+sXXCRdQhnb5 scGlupaSFRj1zjMi7Q8FUVYSTKXSQjmiTTQwuBpJ7GRi73jF8CHQpKdxdLAbytAD CmaAT7CwmWjlq9n77S/ShRH/Oa3VZjOOwPHLH0tlObTbw4LhnTpeMgvuprTQ3522 lSCE/3r8IGNKMTLkANwPddIlfszmXkjnESV8MM3NkY7LtArR4TWQ6wAGgQIDAQAB o4IDSjCCA0YwHQYDVR0OBBYEFJSUjl8voEsiKm6WiDuED3EkUxVWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2VjNDhi ZS05MjUwLTRmN2MtOWM4Ny02NDFiOGU2MGQzZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvZWM0OGJl LTkyNTAtNGY3Yy05Yzg3LTY0MWI4ZTYwZDNlMi8xL2xKU09YeS1nU3lJcWJwYUlP NFFQY1NSVEZWWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHIBggrBgEF BQcBBwEB/wSBuDCBtTB6BAIAATB0AwQAuS3AAwQBuS3CAwQAuVLIAwQAuVLKAwQA uWp4AwQBuWp6AwQBuXVIAwQBuY0YAwQAuY0bMAwDBAC5t2EDBAC5t2IDBAC5xjgD BAG5xjoDBAG59JQDBAC59JcDBAC8dCQDBADCJLwDBAHCJL4DBADUCPswNwQCAAIw MQMFACoDBmADBQMqBN0AAwUDKgWTQAMFAyoGPYADBQMqDt9AAwUDKg9fAAMFAyoP s4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOrVMA0GCSqGSIb3DQEBCwUAA4IB AQAq/clOifMElz5Yn/PDVnxgKB1UoSV/uK7ZE/3fTF5yfwsEj8TQFEbWmuf2yweW 1j49ylUeadPCyOaDgwfzb9I2ocy99qFtmsN9PydhPO97roXCciwwNmKVHGME6iP4 7FLQKsKTT+FrUFJGjNTMg9Jdc1hXj51y8pp0mJ6vMVQK4I26d14S6I2wL/Ftmfl5 6LafKcTkeoHMgW3Xg6h20eSCWdTPwBhrjHvO2MBHJWTucWLXch9CJDMbYCUG/E7S MNb/kXULyZYmKaEdJ1QYxl09D9eMr2uVDNpDFp9v5NLVbWFzCyYSNRPt+UrubbV8 d0S3Ju+58m0h52Ueqvm71RoO -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:35 2026 by rpki-client