This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer (raw, json) Hash identifier: nEX+Z85Q4WRYkVBsmh8kazVfcCZao1tEzZJYYtZtU7k= Subject key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14D45FFF13450E4465AB09C20C4B84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47204 IP: 194.88.199.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d4:5f:ff:13:45:0e:44:65:ab:09:c2:0c:4b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954b071a03db5d233d05ab0394548007767f83e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:fd:7e:f3:01:77:60:72:30:52:df:84:13: 5b:d1:64:20:0a:2d:d5:0a:ed:5a:bc:47:18:f4:a7: 97:91:73:cf:5e:64:6b:ac:f6:47:65:82:02:9f:e7: 1a:e8:63:d4:a4:a0:11:b0:fa:a8:40:ba:6a:42:e4: 6b:03:f9:eb:2d:04:6d:cd:05:b6:4a:d2:ea:62:9c: 8d:36:6e:7d:03:9f:54:ef:4a:d4:d6:91:20:a5:e5: db:48:54:9a:32:b6:2f:0f:86:03:1e:58:3a:8e:b3: 91:f4:72:87:e6:e3:f5:42:a6:2c:da:d7:55:6b:ad: 96:32:a7:1a:57:f6:d2:f7:90:1e:dc:91:f4:73:b7: 54:02:40:30:62:5f:bc:a2:12:6d:34:2a:13:e2:55: 54:b3:30:9f:91:26:31:0a:29:45:3d:b1:18:6d:45: fc:a4:01:28:08:e5:34:d2:1a:61:af:77:1a:33:31: b4:c3:83:60:b2:8e:e5:da:8b:9e:54:69:87:b2:25: 79:cb:44:f7:f0:c2:02:11:48:65:de:90:43:89:0a: 67:9a:59:3a:78:d8:0c:aa:c8:20:b4:6a:09:ca:05: 1e:2a:3f:9a:d0:e1:02:73:1c:11:69:63:94:d4:d2: 96:f9:65:2a:59:49:75:02:fb:b9:2a:4e:2f:2f:9e: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.199.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47204 Signature Algorithm: sha256WithRSAEncryption 0f:4e:02:54:82:66:8a:ad:24:5c:61:78:fd:a1:d4:4c:46:b7: af:36:01:e9:4b:02:cf:91:8a:88:b6:72:98:6d:8e:d9:08:99: ad:16:51:e6:77:2b:81:dd:6d:b1:bd:80:87:0b:5c:ff:a4:62: 03:cd:eb:b1:d3:cf:8a:a5:19:69:c9:94:76:71:82:13:a4:74: db:e5:87:aa:3e:bb:7f:b5:7e:bb:7a:7a:47:5d:ec:3e:65:d2: 62:00:b0:83:a9:5f:dc:88:6d:5b:4d:a9:d1:32:38:f1:c1:f1: c2:ba:4f:6a:c2:96:6b:2b:85:38:3a:51:83:73:c6:a0:1c:35: c2:47:27:79:9c:95:19:8e:68:e7:0b:1d:92:88:b0:7a:c7:4e: a0:0f:d1:0b:4d:b2:da:31:f7:7e:4b:6d:ae:1c:11:87:99:7c: e6:27:dc:d5:62:85:c0:29:24:47:3c:60:5d:45:4f:57:69:aa: b2:0b:60:5e:c2:30:6f:0f:e1:4e:5e:e5:33:d9:a0:70:23:47: c5:91:39:2e:53:29:6c:05:19:15:51:9a:24:70:fb:4c:ee:73: 7d:3e:ca:e4:d1:15:26:a6:3b:70:ef:1a:96:a4:7f:d2:ba:1a: 24:20:05:73:b6:74:74:9a:57:32:1e:dc:3f:4a:7e:28:af:ca: 58:22:3e:4e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FNRf/xNFDkRlqwnCDEuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRiMDcxYTAzZGI1ZDIzM2QwNWFiMDM5NDU0ODAwNzc2N2Y4M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnf9fvMBd2ByMFLfhBNb0WQgCi3V Cu1avEcY9KeXkXPPXmRrrPZHZYICn+ca6GPUpKARsPqoQLpqQuRrA/nrLQRtzQW2 StLqYpyNNm59A59U70rU1pEgpeXbSFSaMrYvD4YDHlg6jrOR9HKH5uP1QqYs2tdV a62WMqcaV/bS95Ae3JH0c7dUAkAwYl+8ohJtNCoT4lVUszCfkSYxCilFPbEYbUX8 pAEoCOU00hphr3caMzG0w4Ngso7l2oueVGmHsiV5y0T38MICEUhl3pBDiQpnmlk6 eNgMqsggtGoJygUeKj+a0OECcxwRaWOU1NKW+WUqWUl1Avu5Kk4vL57ZYQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJVLBxoD210jPQWrA5RUgAd2f4PnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2U2NDYy NS1jYjhiLTQ5Y2ItODU2OS0yNjZhYzEwNGY3YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZTY0NjI1 LWNiOGItNDljYi04NTY5LTI2NmFjMTA0ZjdiNC8xL2xVc0hHZ1BiWFNNOUJhc0Rs RlNBQjNaX2ctYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwljHMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC4ZDANBgkqhkiG9w0BAQsFAAOCAQEAD04CVIJmiq0kXGF4/aHUTEa3rzYB6UsC z5GKiLZymG2O2QiZrRZR5ncrgd1tsb2Ahwtc/6RiA83rsdPPiqUZacmUdnGCE6R0 2+WHqj67f7V+u3p6R13sPmXSYgCwg6lf3IhtW02p0TI48cHxwrpPasKWayuFODpR g3PGoBw1wkcneZyVGY5o5wsdkoiwesdOoA/RC02y2jH3fkttrhwRh5l85ifc1WKF wCkkRzxgXUVPV2mqsgtgXsIwbw/hTl7lM9mgcCNHxZE5LlMpbAUZFVGaJHD7TO5z fT7K5NEVJqY7cO8alqR/0roaJCAFc7Z0dJpXMh7cP0p+KK/KWCI+Tg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:15 2026 by rpki-client