This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer (raw, json) Hash identifier: f+HW0+LAhvMrIrAt80rKg84FlS9CGsDpSBe/avn7r3w= Subject key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82D78C8C8879C564A3FEB079966D27 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43211 IP: 185.188.104.0/22 IP: 2a0b:be80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d7:8c:8c:88:79:c5:64:a3:fe:b0:79:96:6d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0baab9bd8c69d07b6501147543df74270a33a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:ba:bd:a1:b5:54:17:d5:31:44:ae:92:d0: a8:3b:79:60:e4:dc:1d:42:10:a9:00:54:79:60:ab: a2:c1:83:90:b4:c9:c4:15:70:57:92:de:2f:65:cb: c4:43:7f:b1:82:e6:5d:4e:ab:62:ef:1e:74:f1:94: e4:98:51:ac:d6:69:1f:dc:45:98:eb:c2:e0:34:6b: 72:51:79:5e:e6:0d:74:5b:71:ef:50:8c:53:2f:0c: 31:b0:74:47:44:ac:30:b9:c3:11:03:dc:47:6c:18: 73:92:f8:e2:2f:55:33:48:19:f8:71:d3:e1:1f:19: 34:37:0b:eb:d2:e6:2d:91:ee:f0:4f:07:a1:1f:db: 1c:63:52:08:d1:4d:42:6c:69:2a:ee:9a:4a:20:80: f9:71:1a:31:1f:12:06:59:1c:73:94:6e:59:cb:db: 35:5e:a1:24:8f:4b:27:3c:26:31:98:0b:23:13:23: d5:bc:90:3e:a9:ed:fb:d2:91:62:33:aa:2e:c5:14: d8:62:91:5b:3c:c4:11:04:0e:43:55:05:dd:88:03: c2:1d:03:a5:6d:46:d5:e1:bd:76:c4:75:0c:51:b4: f3:48:4a:6e:2f:67:6b:d9:db:5c:ec:fa:02:83:1f: 58:4d:f0:f8:52:59:46:78:a1:b0:67:00:63:88:ab: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.104.0/22 IPv6: 2a0b:be80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43211 Signature Algorithm: sha256WithRSAEncryption 4f:71:21:e5:9b:58:1e:ea:5d:35:a3:a0:ed:87:66:37:eb:d1: 37:9b:3a:78:4b:c9:43:4b:6b:5a:a5:4b:16:bd:9d:8a:73:3d: 7c:cb:22:52:04:bb:03:b9:e9:53:ab:08:c5:1e:2e:6c:3b:0f: c1:de:c5:c7:24:7d:90:d7:53:08:fa:ac:65:70:25:98:1a:bc: f9:1f:a3:78:dd:29:10:39:62:5c:6e:a3:d7:68:67:7e:fb:10: d2:c8:dd:94:7e:82:aa:dc:3e:d0:3b:5d:24:2e:8d:22:b7:c6: 58:d4:43:bc:0b:29:f6:66:f2:36:6a:9f:19:73:ca:d7:d5:70: 2f:f8:78:e6:75:55:e4:0b:cc:ee:fd:ac:07:1a:c9:19:d2:25: 77:0f:a1:90:73:0b:9b:52:f6:19:a4:5f:2b:04:b6:a9:b2:49: 4f:e7:f1:a6:ec:9f:4f:7d:85:48:d8:f9:1c:bd:36:e3:fd:62: 57:dd:aa:bb:8e:e3:2c:c0:dd:80:55:75:03:8d:1c:44:05:4d: 85:8d:90:23:0e:a4:d2:f0:0c:54:9f:69:66:81:a8:3e:1b:0a: 63:85:e6:7e:8e:e7:37:34:8f:01:09:ae:30:78:e6:89:ba:e3: b2:7f:ea:e2:2b:f4:27:95:4a:6a:10:b1:61:eb:95:bb:82:76: 60:b0:b4:3d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gteMjIh5xWSj/rB5lm0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGJhYWI5YmQ4YzY5ZDA3YjY1MDExNDc1NDNkZjc0MjcwYTMzYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseq6vaG1VBfVMUSuktCoO3lg5Nwd QhCpAFR5YKuiwYOQtMnEFXBXkt4vZcvEQ3+xguZdTqti7x508ZTkmFGs1mkf3EWY 68LgNGtyUXle5g10W3HvUIxTLwwxsHRHRKwwucMRA9xHbBhzkvjiL1UzSBn4cdPh Hxk0Nwvr0uYtke7wTwehH9scY1II0U1CbGkq7ppKIID5cRoxHxIGWRxzlG5Zy9s1 XqEkj0snPCYxmAsjEyPVvJA+qe370pFiM6ouxRTYYpFbPMQRBA5DVQXdiAPCHQOl bUbV4b12xHUMUbTzSEpuL2dr2dtc7PoCgx9YTfD4UllGeKGwZwBjiKtBwQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNC6q5vYxp0HtlARR1Q990JwozohMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzkxOTll Yi1lOGViLTQwNGQtODk1NS05YmQ1ZDUxMzgwNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvOTE5OWVi LWU4ZWItNDA0ZC04OTU1LTliZDVkNTEzODA1OS8xLzBMcXJtOWpHblFlMlVCRkhW RDMzUW5Dak9pRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubxoMA0EAgACMAcDBQMqC76AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCoyzANBgkqhkiG9w0BAQsFAAOCAQEAT3Eh5ZtYHupd NaOg7YdmN+vRN5s6eEvJQ0trWqVLFr2dinM9fMsiUgS7A7npU6sIxR4ubDsPwd7F xyR9kNdTCPqsZXAlmBq8+R+jeN0pEDliXG6j12hnfvsQ0sjdlH6Cqtw+0DtdJC6N IrfGWNRDvAsp9mbyNmqfGXPK19VwL/h45nVV5AvM7v2sBxrJGdIldw+hkHMLm1L2 GaRfKwS2qbJJT+fxpuyfT32FSNj5HL024/1iV92qu47jLMDdgFV1A40cRAVNhY2Q Iw6k0vAMVJ9pZoGoPhsKY4Xmfo7nNzSPAQmuMHjmibrjsn/q4iv0J5VKahCxYeuV u4J2YLC0PQ== -----END CERTIFICATE-----Generated at Sat Jan 3 02:32:36 2026 by rpki-client