This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer (raw, json) Hash identifier: 3QiG1rPUBypdAoHqR1fSN44QDjUOzIDEYMh4RJvEaro= Subject key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B2D7DF7976C0832DE1254CC48EDE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202598 IP: 185.156.56.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b2:d7:df:79:76:c0:83:2d:e1:25:4c:c4:8e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:f2:1b:8d:83:cd:58:00:9b:da:de:1b:b0: ac:0d:7d:fa:21:2c:44:06:97:ae:8f:a2:05:a3:bb: a3:d3:c5:60:21:ba:5a:68:50:47:0d:e8:7d:3d:88: 81:01:4d:7a:36:34:86:82:40:aa:64:52:45:5a:d3: c2:85:20:56:b9:24:12:32:40:c5:3f:a9:19:a4:5b: 38:f2:53:df:e8:46:d6:2a:51:e0:46:3e:4b:19:2d: 78:9c:2a:e7:83:e0:5f:47:e7:43:c2:a1:0d:4d:d6: 6d:a7:d6:d8:24:f3:5a:1c:e1:a7:ae:07:ba:ba:29: 6f:54:b7:25:1e:ce:84:b0:5d:5e:25:54:90:97:ac: 3b:5b:ae:79:a3:14:f6:b6:99:f1:48:d5:cc:52:87: aa:61:c9:1a:f8:2a:75:40:62:50:a4:68:5b:b5:f8: 73:9f:67:9d:26:99:9c:72:f0:e0:cf:2a:92:ff:b8: 5a:e3:02:b6:d4:11:62:98:80:27:28:05:1c:e6:f8: 4a:24:14:8f:51:de:15:70:f6:2e:29:7a:df:ec:a3: 02:09:c7:ce:6f:e7:90:93:ff:b9:a2:75:59:2f:8f: 10:b7:16:39:cd:41:e3:88:94:a2:4e:28:61:c9:9b: 73:c4:21:af:86:3b:c7:23:71:e6:82:55:21:0b:80: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202598 Signature Algorithm: sha256WithRSAEncryption 48:04:27:3e:cc:ff:8c:d1:58:84:08:e0:2b:9a:41:3b:b1:1a: 11:6a:87:12:3b:af:80:49:54:16:a4:f1:fa:92:50:f9:37:81: 34:2b:b1:a7:e1:91:89:7a:9b:ab:61:9c:30:81:4c:a9:8c:ff: ae:52:35:74:2d:d9:aa:9d:e6:89:4a:91:f2:20:61:43:bd:f3: c4:2e:ab:4a:69:b5:44:90:87:28:81:3d:ab:e0:bb:d2:f0:bb: 27:98:2f:db:1e:43:21:b0:40:ae:38:5e:06:3f:83:6d:28:ac: 31:c7:81:96:d3:20:a1:2e:30:51:9f:b1:14:bb:c8:65:d0:e9: 4f:57:4a:ab:c3:84:ae:3e:aa:be:f6:29:50:85:a0:9e:e3:6b: a8:cb:1d:37:5d:64:9f:7f:46:f4:c0:0f:8a:8f:cf:fd:d5:67: 6f:50:7a:b4:27:c1:9d:58:65:ae:e2:15:9b:d8:52:35:1a:fa: d6:cf:86:b8:c5:00:f3:ab:01:97:8f:41:8d:85:a4:59:02:a6: 7e:ad:9d:20:a3:1e:aa:6d:8a:3e:1a:c2:28:0c:1d:8a:c9:24: 6d:51:ca:9e:fe:7a:0f:85:cd:48:0e:6e:5c:d1:b2:eb:39:20: 20:88:02:ce:d7:13:b5:ca:5c:97:ad:37:25:a9:6a:89:2b:57: a2:e9:9b:ed -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xrLX33l2wIMt4SVMxI7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzcyN2QwOWZiYjE5YTdmOTg1ZDc1MWEyMDMxMWMxYmFkNGIwNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHbyG42DzVgAm9reG7CsDX36ISxE Bpeuj6IFo7uj08VgIbpaaFBHDeh9PYiBAU16NjSGgkCqZFJFWtPChSBWuSQSMkDF P6kZpFs48lPf6EbWKlHgRj5LGS14nCrng+BfR+dDwqENTdZtp9bYJPNaHOGnrge6 uilvVLclHs6EsF1eJVSQl6w7W655oxT2tpnxSNXMUoeqYcka+Cp1QGJQpGhbtfhz n2edJpmccvDgzyqS/7ha4wK21BFimIAnKAUc5vhKJBSPUd4VcPYuKXrf7KMCCcfO b+eQk/+5onVZL48QtxY5zUHjiJSiTihhyZtzxCGvhjvHI3HmglUhC4B7wwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCxyfQn7sZp/mF11GiAxHButSwcfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2JmM2Vj YS0xNzFmLTQwMWMtOWI1ZC1jY2M0ZjFlMDA5OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYmYzZWNh LTE3MWYtNDAxYy05YjVkLWNjYzRmMWUwMDk5MC8xL0xISjlDZnV4bW4tWVhYVWFJ REVjRzYxTEJ4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZw4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMXZjANBgkqhkiG9w0BAQsFAAOCAQEASAQnPsz/jNFYhAjgK5pBO7EaEWqHEjuv gElUFqTx+pJQ+TeBNCuxp+GRiXqbq2GcMIFMqYz/rlI1dC3Zqp3miUqR8iBhQ73z xC6rSmm1RJCHKIE9q+C70vC7J5gv2x5DIbBArjheBj+DbSisMceBltMgoS4wUZ+x FLvIZdDpT1dKq8OErj6qvvYpUIWgnuNrqMsdN11kn39G9MAPio/P/dVnb1B6tCfB nVhlruIVm9hSNRr61s+GuMUA86sBl49BjYWkWQKmfq2dIKMeqm2KPhrCKAwdiskk bVHKnv56D4XNSA5uXNGy6zkgIIgCztcTtcpcl603JalqiStXoumb7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:10 2026 by rpki-client