This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer File: lt2IX_TTiauqvQOlF10JdBrLpg0.cer (raw, json) Hash identifier: ekamtaHG3lmctb7cpaJcPFVMOG0i1Zo2083vMJoj+Xg= Subject key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11BB00E618E42B3B8A926D2DAF7E66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.26.116.0/22 IP: 2a07:f4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:bb:00:e6:18:e4:2b:3b:8a:92:6d:2d:af:7e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96dd885ff4d389abaabd03a5175d09741acba60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:f6:e3:77:4d:a5:1e:dc:f3:66:ab:71:25: 69:fb:91:40:6d:63:52:d7:03:c5:b2:8d:9d:9e:b1: e5:f7:24:ca:95:92:7a:fb:5f:70:d5:ce:2c:3c:f4: 23:6f:8d:47:de:c9:f5:63:16:30:e8:c4:fa:bd:54: 17:27:9f:e0:9a:e0:59:e9:71:e7:3a:c1:ff:21:45: fb:ee:81:2c:1a:a6:72:37:6d:a5:99:e9:17:1e:3d: cd:a3:5d:d5:07:4f:f7:f0:b5:e2:83:ff:90:0b:34: 5f:55:59:6e:42:01:0b:bf:79:b7:bd:68:2c:19:20: 8d:e9:b6:6f:97:2d:01:bf:1e:2f:e1:72:b9:fc:7f: 21:23:96:eb:58:4f:c9:82:a0:af:c4:7c:71:fa:05: 34:25:a8:db:63:9d:5c:15:39:1e:9e:37:70:96:77: 22:ce:97:a0:3c:2a:f3:d7:2a:2c:45:4b:ed:93:37: 45:51:32:42:88:37:44:0d:fc:27:db:93:57:c0:0d: 4b:20:7e:79:9b:bd:26:3a:34:48:94:b6:4b:5d:f5: 4e:76:76:ff:b6:1b:be:86:8d:80:70:b1:8d:95:b6: b3:50:d1:db:0c:63:f0:43:31:f5:ef:ae:a0:21:b6: 29:7a:27:7d:bb:e5:b7:27:c0:c0:36:97:74:00:5f: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.116.0/22 IPv6: 2a07:f4c0::/29 Signature Algorithm: sha256WithRSAEncryption 2d:29:c2:a2:c3:96:b2:05:b9:5c:cd:9e:6a:08:74:3d:ad:55: 28:91:39:5a:d4:20:cb:02:b6:e0:49:a6:f6:b5:f1:47:44:b0: 62:58:ed:27:c7:6f:93:80:2c:a2:6c:03:3f:b8:75:65:a7:f5: c0:ca:3d:7f:05:26:be:b9:39:62:4a:5e:49:91:97:90:67:12: 9b:06:d1:71:0f:4d:d7:ea:cd:38:97:cf:33:a4:e8:8b:c5:90: 70:79:bf:50:e8:5b:08:06:81:46:c0:79:6a:22:1f:84:03:37: 3b:0d:f7:47:6e:02:e1:34:d5:21:8b:b4:a3:a9:c2:0e:5a:8e: 8c:c1:8c:2d:13:e0:71:d6:14:0b:6b:8d:a3:3f:5f:df:12:c4: 4c:9f:ce:11:0b:f4:19:ec:69:fe:c1:99:99:d8:30:2c:29:7d: 59:13:8b:84:38:28:42:17:43:74:2b:99:3a:3d:0f:9b:f6:e4: 50:59:3b:c6:c1:4c:07:77:13:10:43:aa:26:d7:de:7b:96:ae: c8:33:76:51:8a:94:6f:33:e9:ff:95:30:1d:22:fd:e9:24:be: d5:93:d5:34:7f:e3:d5:dc:aa:c8:b5:21:dd:4a:20:36:08:07: 8c:d6:9e:55:eb:e6:0d:73:c6:28:16:a2:c6:43:25:cf:25:c0: a9:5f:fc:e6 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8EbsA5hjkKzuKkm0tr35mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRkODg1ZmY0ZDM4OWFiYWFiZDAzYTUxNzVkMDk3NDFhY2JhNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9b243dNpR7c82arcSVp+5FAbWNS 1wPFso2dnrHl9yTKlZJ6+19w1c4sPPQjb41H3sn1YxYw6MT6vVQXJ5/gmuBZ6XHn OsH/IUX77oEsGqZyN22lmekXHj3No13VB0/38LXig/+QCzRfVVluQgELv3m3vWgs GSCN6bZvly0Bvx4v4XK5/H8hI5brWE/JgqCvxHxx+gU0JajbY51cFTkenjdwlnci zpegPCrz1yosRUvtkzdFUTJCiDdEDfwn25NXwA1LIH55m70mOjRIlLZLXfVOdnb/ thu+ho2AcLGNlbazUNHbDGPwQzH1766gIbYpeid9u+W3J8DANpd0AF/LUwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJbdiF/004mrqr0DpRddCXQay6YNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzBjNTI2 NS0zMmFmLTQ4ZjItOTA2ZC1iNjUyYzg1NTU2YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvMGM1MjY1 LTMyYWYtNDhmMi05MDZkLWI2NTJjODU1NTZiYi8xL2x0MklYX1RUaWF1cXZRT2xG MTBKZEJyTHBnMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwRp0MA0EAgACMAcDBQMqB/TAMA0GCSqGSIb3 DQEBCwUAA4IBAQAtKcKiw5ayBblczZ5qCHQ9rVUokTla1CDLArbgSab2tfFHRLBi WO0nx2+TgCyibAM/uHVlp/XAyj1/BSa+uTliSl5JkZeQZxKbBtFxD03X6s04l88z pOiLxZBweb9Q6FsIBoFGwHlqIh+EAzc7DfdHbgLhNNUhi7SjqcIOWo6MwYwtE+Bx 1hQLa42jP1/fEsRMn84RC/QZ7Gn+wZmZ2DAsKX1ZE4uEOChCF0N0K5k6PQ+b9uRQ WTvGwUwHdxMQQ6om1957lq7IM3ZRipRvM+n/lTAdIv3pJL7Vk9U0f+PV3KrItSHd SiA2CAeM1p5V6+YNc8YoFqLGQyXPJcCpX/zm -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:41 2026 by rpki-client