This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lTSP97COo_n-Ii1_e6E9on3LaJU.cer File: lTSP97COo_n-Ii1_e6E9on3LaJU.cer (raw, json) Hash identifier: qI4+a3iRVpKSH3vRLVaaTUY95N8xmckiOnt7dhryxys= Subject key identifier: 95:34:8F:F7:B0:8E:A3:F9:FE:22:2D:7F:7B:A1:3D:A2:7D:CB:68:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B331B1E3FA259F3CD5A0F6C9CB393B1F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 20:16:13 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 56523 IP: 91.224.224.0/23 IP: 185.38.220.0/23 IP: 2a04:7840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:1b:1e:3f:a2:59:f3:cd:5a:0f:6c:9c:b3:93:b1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 20:16:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=95348ff7b08ea3f9fe222d7f7ba13da27dcb6895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:2a:88:7d:82:bb:6b:74:f2:a5:cb:be:3c: 38:f7:46:6a:ae:36:61:53:13:d4:89:1f:0e:27:ad: 69:ef:05:a8:2c:3b:b2:17:9b:95:93:85:13:60:06: e7:c3:48:f2:af:a2:bb:38:52:75:0d:fc:c2:e7:95: 37:2b:e5:7a:76:1c:d2:33:be:c4:b1:1a:60:16:47: 44:b2:70:6c:ff:3c:d1:37:0d:5a:fc:a7:3e:56:c2: 7c:05:f6:7b:6f:bb:e3:5b:08:32:5a:68:9a:7a:f5: 98:49:35:e5:d6:f9:3b:e0:0a:8e:e2:73:80:0e:f0: ca:49:81:81:eb:59:b1:42:7a:43:b1:6c:78:16:a6: 22:ed:52:1a:18:cb:97:fb:f9:bc:c8:48:0e:f2:6c: 0a:65:63:29:31:73:f9:c0:fe:7a:fb:7a:2b:be:66: fe:e6:3f:39:7b:d6:aa:21:0a:71:64:27:5f:bf:1c: 67:ca:8c:79:8a:d1:c4:c8:f9:41:ab:94:50:ce:af: de:55:e9:26:9f:f8:6f:05:69:2e:56:3f:e4:49:10: f1:92:b5:f2:8f:77:1a:1d:6b:b6:90:b9:bb:f7:3d: a0:c8:ae:48:a9:a2:d4:94:07:af:84:44:e3:77:5e: d7:c8:5f:c0:c3:c5:12:13:30:a9:3b:73:00:76:71: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:34:8F:F7:B0:8E:A3:F9:FE:22:2D:7F:7B:A1:3D:A2:7D:CB:68:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.224.0/23 185.38.220.0/23 IPv6: 2a04:7840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56523 Signature Algorithm: sha256WithRSAEncryption 24:b0:58:b8:8b:fa:0f:2b:a6:57:50:35:1a:fe:26:e9:70:ea: 37:8b:67:2f:e0:5f:72:7d:1b:5b:dc:73:44:e4:bc:ac:92:d9: cf:e7:44:9f:19:e5:1e:18:bb:74:64:85:51:ba:83:d5:53:4f: c3:0e:af:ba:8c:c3:c6:ef:4d:b2:f4:2c:52:33:84:6c:77:d4: 88:bf:26:47:4b:31:b6:e5:0e:c9:81:67:65:86:15:2e:fe:f3: 7b:56:20:2c:53:c1:2a:f3:d6:61:c2:25:62:af:c3:33:47:96: 3a:2a:26:62:46:6b:6c:c3:af:8b:b7:c5:5a:f3:4c:1f:96:26: 82:7d:1e:23:1a:a3:e2:a3:56:d9:dd:a3:7d:7f:77:36:d0:10: 15:17:7d:75:84:10:2a:70:b4:50:94:45:96:aa:68:81:8e:de: 80:9d:b8:62:6f:ae:30:da:02:be:84:b5:93:11:b9:2e:2d:36: e2:64:73:28:a2:9b:56:fb:8b:39:d4:06:0f:9f:53:79:90:bf: 7b:5c:be:82:72:8a:5c:b9:2c:6a:9b:78:a9:9e:94:23:a2:58: 19:30:9a:a8:e8:cb:f4:52:da:31:89:88:7c:3f:81:ca:5b:a4: f7:8d:0c:9e:56:33:d3:25:f9:ed:c0:9b:fe:3e:8f:21:8d:f7: 1f:91:6e:52 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZszGx4/olnzzVoPbJyzk7H2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MjAxNjEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTM0OGZmN2IwOGVhM2Y5ZmUyMjJkN2Y3YmExM2RhMjdkY2I2ODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu8qiH2Cu2t08qXLvjw490ZqrjZh UxPUiR8OJ61p7wWoLDuyF5uVk4UTYAbnw0jyr6K7OFJ1DfzC55U3K+V6dhzSM77E sRpgFkdEsnBs/zzRNw1a/Kc+VsJ8BfZ7b7vjWwgyWmiaevWYSTXl1vk74AqO4nOA DvDKSYGB61mxQnpDsWx4FqYi7VIaGMuX+/m8yEgO8mwKZWMpMXP5wP56+3orvmb+ 5j85e9aqIQpxZCdfvxxnyox5itHEyPlBq5RQzq/eVekmn/hvBWkuVj/kSRDxkrXy j3caHWu2kLm79z2gyK5IqaLUlAevhETjd17XyF/Aw8USEzCpO3MAdnEGJQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJU0j/ewjqP5/iItf3uhPaJ9y2iVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2I0MWU5 ZC1hZmJiLTQ1ZmUtYmM2Mi1mZDVmM2YzYjM5NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYjQxZTlk LWFmYmItNDVmZS1iYzYyLWZkNWYzZjNiMzk1ZS8xL2xUU1A5N0NPb19uLUlpMV9l NkU5b24zTGFKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBW+DgAwQBuSbcMA0EAgACMAcDBQMqBHhAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDcyzANBgkqhkiG9w0BAQsFAAOCAQEAJLBY uIv6DyumV1A1Gv4m6XDqN4tnL+Bfcn0bW9xzROS8rJLZz+dEnxnlHhi7dGSFUbqD 1VNPww6vuozDxu9NsvQsUjOEbHfUiL8mR0sxtuUOyYFnZYYVLv7ze1YgLFPBKvPW YcIlYq/DM0eWOiomYkZrbMOvi7fFWvNMH5Ymgn0eIxqj4qNW2d2jfX93NtAQFRd9 dYQQKnC0UJRFlqpogY7egJ24Ym+uMNoCvoS1kxG5Li024mRzKKKbVvuLOdQGD59T eZC/e1y+gnKKXLksapt4qZ6UI6JYGTCaqOjL9FLaMYmIfD+Byluk940MnlYz0yX5 7cCb/j6PIY33H5FuUg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:19 2025 by rpki-client