This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer File: LKYTd0lZnAPHtHLxQscZaAAGtuY.cer (raw, json) Hash identifier: lF2G8CVS0I9EFI/SIkbnsU7ahVBkz20hPhX/UeXq3UE= Subject key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37821D05E602977D144AC78879CAC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47700 IP: 91.208.107.0/24 IP: 2001:678:478::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:82:1d:05:e6:02:97:7d:14:4a:c7:88:79:ca:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ca6137749599c03c7b472f142c719680006b6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:7c:39:a5:4f:31:9a:7e:6b:9b:b9:a9:22: 40:8d:b3:01:38:bc:05:92:f4:c0:f8:ed:35:ea:4c: 1e:ee:0c:76:50:e2:3a:a1:af:cb:f7:65:16:89:1d: eb:7a:33:f9:39:64:23:00:8c:79:0b:fb:0e:81:f6: 4f:3f:21:86:7f:85:e7:8a:0c:e7:ad:e8:1f:ff:40: 26:bb:8a:f7:09:0a:d0:9b:48:4b:43:a9:d0:31:11: e9:d3:77:ac:09:b6:e1:a5:15:49:fe:eb:91:51:df: 6c:a6:d9:ce:c4:97:00:57:6a:45:10:db:f2:84:8f: 6d:14:bf:ba:d0:de:bd:b5:6d:8e:e6:69:87:03:86: 81:99:25:1d:a2:34:94:c8:34:4e:d5:4d:d3:f8:9e: 00:2e:37:9e:d4:79:34:22:fb:d4:8f:41:9a:78:fc: af:3a:86:bd:a1:fc:72:8f:bd:13:06:13:2e:07:a5: 65:76:c5:f4:c2:c2:73:a8:6a:86:8e:d3:ef:70:bb: 92:be:d1:93:3d:4e:59:b7:26:55:1b:4b:86:17:a4: 7a:6a:ed:75:8d:23:28:49:d7:bb:d0:c7:85:27:49: c5:2a:7f:d5:7b:3f:7a:c6:aa:2a:34:01:13:68:3e: fa:76:b0:f1:70:d9:45:3f:27:d7:cc:f4:bd:9b:c8: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.107.0/24 IPv6: 2001:678:478::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47700 Signature Algorithm: sha256WithRSAEncryption 4a:28:b9:67:fc:5e:07:10:40:17:1d:ee:97:82:f3:ed:45:7b: 7c:5a:49:a2:48:1f:df:5b:5e:6a:96:16:ad:2d:7d:88:e4:31: 0c:a2:86:ff:81:9d:64:72:b6:ea:6f:7d:a3:74:ce:ba:54:90: 99:10:ac:6f:bd:57:70:31:ab:0e:90:7c:ee:86:fd:cd:75:20: 72:c1:08:e5:0d:9b:a4:8f:6d:f9:49:47:3b:4b:35:d0:c6:5c: cc:be:94:9e:14:f4:2f:4a:02:c2:73:a7:6c:73:63:16:95:af: 51:20:29:dd:28:12:25:5e:0d:df:14:5e:63:ed:46:d0:0a:42: 2b:90:37:9b:13:03:a7:3f:a1:0a:57:f1:e0:c4:90:c9:d7:28: 31:c0:a5:7c:57:83:9a:6b:eb:01:23:cc:44:2a:c9:6c:6f:3f: 53:9d:b6:53:91:29:51:60:71:40:8e:ae:70:d4:e3:dc:6c:3a: 72:ad:1a:9f:a3:cb:52:72:bd:8a:1c:dc:f0:1e:8e:12:8c:8d: 9e:35:c8:b7:26:6a:a6:f0:fb:07:ea:e2:94:38:2f:7a:b1:b9: 68:72:5a:1b:b6:72:a8:a1:a7:9b:d1:85:3c:42:41:5e:d2:70: 82:ec:a4:8c:aa:bd:3a:63:2d:5f:dc:ce:60:d9:67:e9:6a:c5: d3:a5:60:db -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+N4IdBeYCl30USseIecrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2E2MTM3NzQ5NTk5YzAzYzdiNDcyZjE0MmM3MTk2ODAwMDZiNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulB8OaVPMZp+a5u5qSJAjbMBOLwF kvTA+O016kwe7gx2UOI6oa/L92UWiR3rejP5OWQjAIx5C/sOgfZPPyGGf4Xnigzn regf/0Amu4r3CQrQm0hLQ6nQMRHp03esCbbhpRVJ/uuRUd9sptnOxJcAV2pFENvy hI9tFL+60N69tW2O5mmHA4aBmSUdojSUyDRO1U3T+J4ALjee1Hk0IvvUj0GaePyv Ooa9ofxyj70TBhMuB6VldsX0wsJzqGqGjtPvcLuSvtGTPU5ZtyZVG0uGF6R6au11 jSMoSde70MeFJ0nFKn/Vez96xqoqNAETaD76drDxcNlFPyfXzPS9m8jDCQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFCymE3dJWZwDx7Ry8ULHGWgABrbmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzZmY2Y2 Ni04ZThjLTRkYmItOGNmMC01MDE5ZDJjMzg4ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvNmZjZjY2 LThlOGMtNGRiYi04Y2YwLTUwMTlkMmMzODhkYi8xL0xLWVRkMGxabkFQSHRITHhR c2NaYUFBR3R1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9BrMA8EAgACMAkDBwAgAQZ4BHgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDALpUMA0GCSqGSIb3DQEBCwUAA4IBAQBKKLln/F4H EEAXHe6XgvPtRXt8WkmiSB/fW15qlhatLX2I5DEMoob/gZ1kcrbqb32jdM66VJCZ EKxvvVdwMasOkHzuhv3NdSBywQjlDZukj235SUc7SzXQxlzMvpSeFPQvSgLCc6ds c2MWla9RICndKBIlXg3fFF5j7UbQCkIrkDebEwOnP6EKV/HgxJDJ1ygxwKV8V4Oa a+sBI8xEKslsbz9TnbZTkSlRYHFAjq5w1OPcbDpyrRqfo8tScr2KHNzwHo4SjI2e Nci3Jmqm8PsH6uKUOC96sbloclobtnKooaeb0YU8QkFe0nCC7KSMqr06Yy1f3M5g 2WfpasXTpWDb -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:06 2026 by rpki-client