This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer File: lZmz54I3DcKBT1JcHW7OhNj3DzY.cer (raw, json) Hash identifier: /FuTdbWFKC4kCdbWuLzDMqxr1sfOIoe4x9RRd71P4F4= Subject key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3846CA446DEA42FC81FDDAB84AD8B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.226.20.0/22 IP: 2a0d:dc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:46:ca:44:6d:ea:42:fc:81:fd:da:b8:4a:d8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:16:7c:15:6f:65:09:52:b4:8b:6f:52:aa: 42:cd:38:67:f8:e4:ef:dd:0a:9e:61:a6:08:9c:84: 8e:30:5c:df:b0:eb:24:bb:14:27:1e:55:70:b8:ae: 41:39:e5:0b:6f:ae:eb:75:c8:5e:43:e3:f4:3b:cc: 13:9b:cc:7c:43:1f:8a:5d:9b:e3:13:17:c0:be:dd: a2:d9:b1:8a:45:d0:4a:8f:39:1f:75:70:f3:73:00: 7e:17:c8:ec:4a:cc:9e:2f:08:34:68:40:f6:f1:7c: 0a:1c:09:6c:3f:4f:8a:b9:69:7a:46:e5:60:3b:69: 9e:d6:2c:6a:33:43:57:20:2f:fb:00:de:f5:d3:68: 18:89:48:cb:b4:47:d6:cb:c3:e1:c5:30:86:1a:99: 20:23:81:5e:6d:75:69:8e:b9:30:55:2c:cc:f8:ee: 2c:95:9b:e8:0d:a9:b6:33:0b:c4:4d:d7:c1:dc:c6: 2d:e6:85:b0:fc:27:1b:47:fe:d7:c1:c4:36:4d:75: a2:53:0b:a3:ee:1d:67:97:37:a2:90:d9:d7:9c:1f: 99:69:9f:8b:c7:9a:70:9b:a0:93:17:31:f4:2a:66: 4a:6e:01:42:4b:76:cd:62:76:c2:33:ab:ca:7e:f1: b2:9b:d2:40:45:9e:f3:0e:1a:c6:1c:d5:ce:96:89: b7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.20.0/22 IPv6: 2a0d:dc00::/29 Signature Algorithm: sha256WithRSAEncryption 2f:7d:0a:fe:80:36:1b:9c:07:09:c4:ec:c2:04:d0:78:e0:f6: 68:65:75:80:77:06:a2:9d:1c:d3:c6:ba:5a:11:a4:bd:32:9d: 2e:6e:13:bc:dc:fc:d7:4d:f9:64:68:6d:41:62:c4:a5:83:f0: 2e:c6:bd:88:0a:0f:85:00:7b:6a:e9:14:9d:db:22:94:b6:51: 95:3c:e6:47:30:41:69:92:02:74:bc:41:b6:53:b9:36:7a:f9: 7b:7f:29:71:96:e3:07:02:93:66:b8:a4:4d:87:d5:ab:6a:9e: 29:2d:a7:00:3c:0a:53:eb:47:54:12:49:8a:b5:70:50:88:97: f7:42:3a:85:43:ff:bb:2f:9b:99:d2:38:69:53:f6:21:2a:6a: f7:86:c3:25:ad:d0:00:0c:47:14:37:7b:8e:17:02:1c:e8:47: 0f:c6:62:87:9a:b2:ed:21:46:eb:47:4f:46:db:07:f9:80:77: 75:9b:07:f0:bc:c2:03:69:87:84:4d:41:93:84:5f:53:85:19: 2d:d4:f8:b7:69:bd:71:32:e1:bd:00:ac:9d:29:6a:2b:a5:2e: cb:f4:ec:f0:20:e0:10:f0:96:f3:a3:bf:0d:a5:51:8e:5f:5c: db:35:3a:a6:31:f9:40:e6:bd:45:62:5c:30:83:17:97:a4:cd: 34:a6:47:89 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OEbKRG3qQvyB/dq4StizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTk5YjNlNzgyMzcwZGMyODE0ZjUyNWMxZDZlY2U4NGQ4ZjcwZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSYWfBVvZQlStItvUqpCzThn+OTv 3QqeYaYInISOMFzfsOskuxQnHlVwuK5BOeULb67rdcheQ+P0O8wTm8x8Qx+KXZvj ExfAvt2i2bGKRdBKjzkfdXDzcwB+F8jsSsyeLwg0aED28XwKHAlsP0+KuWl6RuVg O2me1ixqM0NXIC/7AN7102gYiUjLtEfWy8PhxTCGGpkgI4FebXVpjrkwVSzM+O4s lZvoDam2MwvETdfB3MYt5oWw/CcbR/7XwcQ2TXWiUwuj7h1nlzeikNnXnB+ZaZ+L x5pwm6CTFzH0KmZKbgFCS3bNYnbCM6vKfvGym9JARZ7zDhrGHNXOlom38wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJWZs+eCNw3CgU9SXB1uzoTY9w82MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzQwYTEw Mi1lZmNkLTRmZDItOTM3My1kMDZhYTUxOGFhNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvNDBhMTAy LWVmY2QtNGZkMi05MzczLWQwNmFhNTE4YWE2ZC8xL2xabXo1NEkzRGNLQlQxSmNI VzdPaE5qM0R6WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueIUMA0EAgACMAcDBQMqDdwAMA0GCSqGSIb3 DQEBCwUAA4IBAQAvfQr+gDYbnAcJxOzCBNB44PZoZXWAdwainRzTxrpaEaS9Mp0u bhO83PzXTflkaG1BYsSlg/Auxr2ICg+FAHtq6RSd2yKUtlGVPOZHMEFpkgJ0vEG2 U7k2evl7fylxluMHApNmuKRNh9Wrap4pLacAPApT60dUEkmKtXBQiJf3QjqFQ/+7 L5uZ0jhpU/YhKmr3hsMlrdAADEcUN3uOFwIc6EcPxmKHmrLtIUbrR09G2wf5gHd1 mwfwvMIDaYeETUGThF9ThRkt1Pi3ab1xMuG9AKydKWorpS7L9OzwIOAQ8Jbzo78N pVGOX1zbNTqmMflA5r1FYlwwgxeXpM00pkeJ -----END CERTIFICATE-----Generated at Mon Jan 26 04:48:21 2026 by rpki-client