This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer File: lajACQMBmVVkqiE4tDA4nviM13s.cer (raw, json) Hash identifier: b8GvNt6ZLE4tu78i199fzGfxqBy7XZlLuwgepnj2qB4= Subject key identifier: 95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A97E092A2C98669235B460C1CD30DF62F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 18 Nov 2025 16:51:08 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 44372 IP: 193.93.152.0/22 IP: 2a07:3ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:e0:92:a2:c9:86:69:23:5b:46:0c:1c:d3:0d:f6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 18 16:51:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=95a8c0090301995564aa2138b430389ef88cd77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:26:9d:e8:8b:59:02:86:74:bd:62:5e:70: dd:73:43:1b:bb:80:67:63:61:90:2d:43:d8:15:fd: 67:65:b3:33:c0:47:8e:96:c7:b7:04:4c:8d:74:0e: 63:af:e9:2c:95:75:23:60:bc:a1:d0:8e:0a:7d:9e: 96:7b:f4:11:9c:7d:1e:54:9d:f4:17:d9:42:8d:d0: 04:20:72:62:7d:c0:3e:0a:e7:36:50:e7:19:fc:b8: c1:4d:d2:c0:d2:62:91:13:39:ce:44:cc:18:a3:3d: 70:a8:55:79:5e:c7:8e:09:6b:1a:06:50:bd:b2:0e: 02:cd:90:2d:f7:63:7a:52:b8:a9:b7:cd:22:c6:84: 0c:19:d6:bd:7b:85:d1:79:10:02:19:e6:d4:4b:69: 83:d5:4e:10:3a:83:f7:98:a9:eb:ad:4f:d4:89:c2: 36:27:3b:06:19:c9:a1:36:4f:a1:e9:ac:db:64:4b: c3:59:13:c6:be:43:a3:81:0c:f4:a6:8b:d0:5e:24: 7d:14:e2:8f:71:bd:98:06:0f:50:90:0d:0e:63:80: 5e:5e:14:29:27:3f:a8:e8:3e:60:84:fb:3d:c9:66: 27:97:d7:35:08:7e:b4:e5:97:d1:66:f8:a5:75:08: b2:eb:d4:9b:b7:ed:b9:e0:5c:77:c1:ba:75:2f:34: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.152.0/22 IPv6: 2a07:3ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44372 Signature Algorithm: sha256WithRSAEncryption a5:c5:c0:58:1f:79:5d:85:ad:63:e5:7c:0d:3e:2b:4e:3b:b4: e8:4a:45:b9:de:b3:48:4c:0e:38:41:af:dd:e8:e0:5e:46:3f: d6:6c:cc:34:66:aa:3f:c5:ac:72:57:71:2f:49:50:1e:7c:00: 0a:a1:69:70:9f:7c:f8:7e:64:d0:f8:61:73:c7:4e:28:4a:fc: 7b:a0:0d:12:ff:7c:fa:87:14:4d:69:1f:51:71:96:6d:d6:ca: a2:7c:e7:8e:20:81:87:68:9c:58:b0:50:f8:e4:4d:09:bf:be: 69:56:2f:a8:87:7e:a9:a2:48:ec:14:1e:21:1c:e7:05:81:26: e4:cb:98:bc:f9:c2:96:8a:04:fc:6b:4c:b3:24:00:01:65:b6: d6:ab:d1:41:42:85:ea:00:08:0a:8f:44:4a:6e:92:c6:6e:c3: ff:e7:c1:89:8d:1c:7c:d6:9e:0f:be:e7:af:c9:6b:45:49:c8: 2d:cf:e9:bc:f7:71:1a:cc:17:ee:71:f7:88:03:a2:b7:b6:79: 17:93:02:0a:81:91:e4:7e:24:94:d3:67:16:8c:e9:29:e6:4d: 36:f2:c5:22:a6:12:cb:b1:7d:5e:a6:29:b5:4f:18:f7:ba:0c: 5e:2f:e4:29:33:63:44:e9:37:75:bf:7d:1a:62:54:08:e8:35: 86:f8:be:d0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZqX4JKiyYZpI1tGDBzTDfYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE4MTY1MTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWE4YzAwOTAzMDE5OTU1NjRhYTIxMzhiNDMwMzg5ZWY4OGNkNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzYmneiLWQKGdL1iXnDdc0Mbu4Bn Y2GQLUPYFf1nZbMzwEeOlse3BEyNdA5jr+kslXUjYLyh0I4KfZ6We/QRnH0eVJ30 F9lCjdAEIHJifcA+Cuc2UOcZ/LjBTdLA0mKREznORMwYoz1wqFV5XseOCWsaBlC9 sg4CzZAt92N6Uript80ixoQMGda9e4XReRACGebUS2mD1U4QOoP3mKnrrU/UicI2 JzsGGcmhNk+h6azbZEvDWRPGvkOjgQz0povQXiR9FOKPcb2YBg9QkA0OY4BeXhQp Jz+o6D5ghPs9yWYnl9c1CH605ZfRZvildQiy69Sbt+254Fx3wbp1LzQA0QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJWowAkDAZlVZKohOLQwOJ74jNd7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzljYWUx MC0xNjEzLTRiOWUtYmJhNC0yNGQ0MmExNTFjMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvOWNhZTEw LTE2MTMtNGI5ZS1iYmE0LTI0ZDQyYTE1MWMwYS8xL2xhakFDUU1CbVZWa3FpRTR0 REE0bnZpTTEzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwV2YMA0EAgACMAcDBQMqBz7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCtVDANBgkqhkiG9w0BAQsFAAOCAQEApcXAWB95XYWt Y+V8DT4rTju06EpFud6zSEwOOEGv3ejgXkY/1mzMNGaqP8WscldxL0lQHnwACqFp cJ98+H5k0Phhc8dOKEr8e6ANEv98+ocUTWkfUXGWbdbKonznjiCBh2icWLBQ+ORN Cb++aVYvqId+qaJI7BQeIRznBYEm5MuYvPnClooE/GtMsyQAAWW21qvRQUKF6gAI Co9ESm6Sxm7D/+fBiY0cfNaeD77nr8lrRUnILc/pvPdxGswX7nH3iAOit7Z5F5MC CoGR5H4klNNnFozpKeZNNvLFIqYSy7F9XqYptU8Y97oMXi/kKTNjROk3db99GmJU COg1hvi+0A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:05 2025 by rpki-client