This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer File: lMhsmzXXghFrLNhYOifOtAO49ho.cer (raw, json) Hash identifier: 6KjJ07YV3obRv+ACQNZnY9MU7n4n2SG/D3R/OzWPPxE= Subject key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910BCB022C5106BC05136DFF30DD4C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.161.202.0 -- 46.161.207.255 IP: 185.169.160.0/22 IP: 188.247.0.0/19 IP: 2a06:d300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bc:b0:22:c5:10:6b:c0:51:36:df:f3:0d:d4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:59:18:1f:d6:26:5c:fa:1a:46:a1:fc:0e:de: 5a:15:81:59:a0:88:ad:72:e8:b1:80:8f:0d:bd:18: 13:e7:1d:2b:45:3c:57:8f:4d:d0:f1:7a:58:1e:59: 10:52:d3:61:bd:da:fd:9a:d2:c8:0a:4d:78:76:1d: c3:79:fd:9c:b3:f1:d8:fc:49:57:9d:ae:ca:ea:f4: e4:50:31:d5:b5:62:18:1c:2d:2f:33:2a:37:c7:0d: 4b:f4:10:02:73:81:f7:8b:bc:14:c0:db:5a:59:47: 35:e4:6b:3a:03:bf:78:12:16:59:6f:d1:22:de:73: e8:47:e8:82:6a:6b:77:b4:5e:c2:3a:51:22:1a:a3: a0:c2:94:98:8b:a8:57:35:dd:1b:41:7c:2a:22:17: 7e:20:a9:68:1c:39:cf:68:a7:a2:53:1b:0a:fd:78: a2:37:6c:34:b6:e3:74:4d:4c:0f:1e:54:b6:dd:9f: 6a:65:23:d4:f9:80:84:8e:fa:39:f7:8a:f6:16:2b: 5f:61:68:1c:92:ce:04:e3:49:f5:f2:19:7e:1a:ed: 11:42:4d:92:3d:1d:1b:f8:4b:c4:fb:a7:3f:cf:85: 60:8c:dd:5f:ae:bb:7f:0b:3b:15:33:1b:b8:47:58: 01:9c:16:f7:55:6d:f1:dc:4a:12:7f:b6:0d:4d:3a: 05:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.161.202.0-46.161.207.255 185.169.160.0/22 188.247.0.0/19 IPv6: 2a06:d300::/29 Signature Algorithm: sha256WithRSAEncryption b0:4f:38:3c:29:be:71:1d:1c:fe:2d:31:e5:56:4c:19:ed:69: dd:78:3f:fd:5d:3a:47:ed:21:e6:76:e1:3e:d2:2a:bd:80:c0: 28:f1:27:69:15:e6:05:a6:2a:fa:f5:90:d2:7e:b2:e9:8c:e2: 68:4c:77:0c:4f:fa:e0:8a:d7:cf:6d:ab:ee:6a:a7:01:56:8f: 84:ce:48:c7:ae:4a:03:24:38:09:b8:30:c1:c2:81:05:06:1b: a4:fb:43:dd:fa:c1:a0:ac:f2:5e:27:3c:a4:e5:5e:12:71:78: 1e:7a:7b:eb:72:b2:2d:ee:c4:59:02:db:2a:3f:1e:73:57:8d: 64:a2:d7:c8:cb:f7:f2:9a:8c:43:e5:7e:4d:21:45:e6:dc:4d: dc:2d:6d:36:30:e9:6c:9e:6a:5c:c6:0f:43:04:54:ee:da:7f: 4f:0a:0f:2f:6a:5f:81:60:a8:41:98:ba:4a:85:10:ae:dc:fe: 4e:5a:d9:4b:8a:f0:58:ab:35:06:9e:df:e0:d5:a1:6e:ae:6b: 73:d5:c9:77:b9:74:b0:fd:50:97:35:5f:7f:26:d1:bd:ae:e4: 56:8e:63:e4:47:62:18:7b:35:a7:8e:a3:10:5e:2e:d5:93:20: f8:1c:d2:49:1d:da:14:8c:5c:f3:93:60:8a:79:76:d4:44:89: 5c:d8:7f:fa -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt5ELywIsUQa8BRNt/zDdTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGM4NmM5YjM1ZDc4MjExNmIyY2Q4NTgzYTI3Y2ViNDAzYjhmNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lkYH9YmXPoaRqH8Dt5aFYFZoIit cuixgI8NvRgT5x0rRTxXj03Q8XpYHlkQUtNhvdr9mtLICk14dh3Def2cs/HY/ElX na7K6vTkUDHVtWIYHC0vMyo3xw1L9BACc4H3i7wUwNtaWUc15Gs6A794EhZZb9Ei 3nPoR+iCamt3tF7COlEiGqOgwpSYi6hXNd0bQXwqIhd+IKloHDnPaKeiUxsK/Xii N2w0tuN0TUwPHlS23Z9qZSPU+YCEjvo594r2FitfYWgcks4E40n18hl+Gu0RQk2S PR0b+EvE+6c/z4VgjN1frrt/CzsVMxu4R1gBnBb3VW3x3EoSf7YNTToFJwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFJTIbJs114IRayzYWDonzrQDuPYaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2ZkZDY4 OC0zZTIzLTQ2ZjQtYTA3My0zNWIwYzk2NTI0ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZmRkNjg4 LTNlMjMtNDZmNC1hMDczLTM1YjBjOTY1MjRmYS8xL2xNaHNtelhYZ2hGckxOaFlP aWZPdEFPNDloby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaMAwDBAEuocoDBAQuocADBAK5qaADBAW89wAwDQQC AAIwBwMFAyoG0wAwDQYJKoZIhvcNAQELBQADggEBALBPODwpvnEdHP4tMeVWTBnt ad14P/1dOkftIeZ24T7SKr2AwCjxJ2kV5gWmKvr1kNJ+sumM4mhMdwxP+uCK189t q+5qpwFWj4TOSMeuSgMkOAm4MMHCgQUGG6T7Q936waCs8l4nPKTlXhJxeB56e+ty si3uxFkC2yo/HnNXjWSi18jL9/KajEPlfk0hRebcTdwtbTYw6WyealzGD0MEVO7a f08KDy9qX4FgqEGYukqFEK7c/k5a2UuK8FirNQae3+DVoW6ua3PVyXe5dLD9UJc1 X38m0b2u5FaOY+RHYhh7NaeOoxBeLtWTIPgc0kkd2hSMXPOTYIp5dtREiVzYf/o= -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:32 2026 by rpki-client