This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer (raw, json) Hash identifier: 9kzNIM9Ay4scPl6hzOtdFJCgHj20DrBYgbTRNbOKMaI= Subject key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF54D88E24382EAD9188D1A181DDE7909 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 25 Jan 2026 13:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210457 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:4d:88:e2:43:82:ea:d9:18:8d:1a:18:1d:de:79:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 25 13:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cf:9d:a9:38:de:83:b6:fe:da:39:29:15:f0: c7:96:4a:03:83:f5:4c:2c:94:ca:31:49:9f:2c:ab: 36:df:9a:c9:99:9e:ee:4d:a5:f1:3c:16:62:53:d2: a8:2e:49:a6:24:8b:4f:f5:c5:66:c8:13:14:36:56: b2:f8:c7:e9:eb:cb:9a:c5:15:11:16:61:4d:01:7d: d3:8f:0e:8b:7d:89:8f:7a:47:19:e4:31:c3:28:7e: 81:b5:1b:70:05:2b:78:cd:48:50:5f:2a:cc:dc:1a: 1a:f0:e4:5b:5f:ff:42:fc:12:83:89:69:75:38:35: b8:e3:10:a8:1b:c0:c2:6d:9b:6b:0a:a6:76:55:31: 25:26:74:af:32:17:f7:f7:cf:a3:b3:5f:09:c5:ee: 9a:df:80:1a:2a:4d:ab:a7:ae:4a:b7:60:fe:f0:a5: 49:8c:46:29:79:0c:9d:1e:c5:82:21:16:e9:74:6d: 8b:35:81:25:36:53:18:3f:6c:24:5e:16:04:1a:91: 15:d4:d8:8b:35:b6:16:dd:ee:0b:16:08:de:0b:4e: a6:b8:d8:7f:a6:65:64:88:a9:1f:b1:51:aa:8b:3b: 9c:63:cc:d3:8b:b0:20:0d:ba:c0:79:a5:a4:d3:d1: c0:4e:31:88:41:07:c4:19:41:9d:ed:df:80:7b:5e: db:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210457 Signature Algorithm: sha256WithRSAEncryption 1a:63:4d:2a:8a:5d:36:1d:0c:da:7e:45:85:f0:b3:7d:98:69: ec:63:b6:65:3b:6e:cc:41:b8:a3:64:2d:4f:91:7b:87:05:70: 94:22:9e:5e:66:cb:ed:30:ac:6e:7b:81:eb:e4:76:c2:ee:04: cc:0f:94:53:7a:88:e8:1c:ca:01:a6:dc:e5:ea:0f:cc:3f:fe: ad:4f:71:a7:71:e9:52:a4:c6:99:d1:b7:15:b0:a2:d5:fd:42: 81:27:37:a5:29:e9:75:3d:53:78:f9:52:6f:52:9a:3c:ba:55: 9a:4b:7b:59:43:57:75:50:a8:16:ec:f1:01:26:48:1c:33:2f: 85:2d:5e:8a:6b:ab:b5:e3:d4:1f:ce:50:19:23:5e:5e:ca:c9: 9a:73:ca:cd:0d:ee:fe:db:7c:08:d3:57:e8:b3:bd:eb:c6:8d: fc:c4:eb:30:9e:df:06:19:b4:b8:8e:fd:bd:0b:33:04:d4:82: 0a:e2:bd:e5:aa:87:ee:08:e3:67:8b:6e:e0:b2:de:1f:a5:fe: 99:d2:90:2b:70:77:16:db:d5:7b:2f:ea:c6:a6:e1:aa:01:54: be:6b:1c:82:95:fb:c6:21:87:ec:6e:96:92:f0:47:c2:29:36: 60:8c:9b:ca:85:ed:37:59:13:6d:14:dc:f1:9a:d3:dc:69:e5: e9:29:ae:af -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZv1TYjiQ4Lq2RiNGhgd3nkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI1MTMxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRmYzRkOGRhNTc2NWYwNmQ3YzI0ZWUyN2RhYzBhZjM0MzFlZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8+dqTjeg7b+2jkpFfDHlkoDg/VM LJTKMUmfLKs235rJmZ7uTaXxPBZiU9KoLkmmJItP9cVmyBMUNlay+Mfp68uaxRUR FmFNAX3Tjw6LfYmPekcZ5DHDKH6BtRtwBSt4zUhQXyrM3Boa8ORbX/9C/BKDiWl1 ODW44xCoG8DCbZtrCqZ2VTElJnSvMhf398+js18Jxe6a34AaKk2rp65Kt2D+8KVJ jEYpeQydHsWCIRbpdG2LNYElNlMYP2wkXhYEGpEV1NiLNbYW3e4LFgjeC06muNh/ pmVkiKkfsVGqizucY8zTi7AgDbrAeaWk09HATjGIQQfEGUGd7d+Ae17b7wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJVPxNjaV2XwbXwk7ifawK80Me36MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzIxY2Uw NS05Y2MyLTQ0NTEtYmQxOS0wNDA4NDRmYTQyMzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvMjFjZTA1 LTljYzItNDQ1MS1iZDE5LTA0MDg0NGZhNDIzOC8xL2xVX0UyTnBYWmZCdGZDVHVK OXJBcnpReDdmby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM2GTANBgkqhkiG9w0BAQsFAAOCAQEAGmNNKopdNh0M 2n5FhfCzfZhp7GO2ZTtuzEG4o2QtT5F7hwVwlCKeXmbL7TCsbnuB6+R2wu4EzA+U U3qI6BzKAabc5eoPzD/+rU9xp3HpUqTGmdG3FbCi1f1CgSc3pSnpdT1TePlSb1Ka PLpVmkt7WUNXdVCoFuzxASZIHDMvhS1eimurtePUH85QGSNeXsrJmnPKzQ3u/tt8 CNNX6LO968aN/MTrMJ7fBhm0uI79vQszBNSCCuK95aqH7gjjZ4tu4LLeH6X+mdKQ K3B3FtvVey/qxqbhqgFUvmscgpX7xiGH7G6WkvBHwik2YIybyoXtN1kTbRTc8ZrT 3Gnl6Smurw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:46 2026 by rpki-client