This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer File: LKw-jWOxw6_HxsC_2p1ayBe27m0.cer (raw, json) Hash identifier: QO5zCYASpDYP+xAqNr8A7DVtm26KVOTxc8ERqcJ57Wk= Subject key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C127075D32E979FBA9B3D7515F2E8C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210985 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:70:75:d3:2e:97:9f:ba:9b:3d:75:15:f2:e8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:49:d9:ec:60:06:ed:18:13:46:ef:66:15: c1:ca:c4:5f:1c:dd:f4:81:da:0e:f3:cb:dd:59:ab: 04:98:0f:7e:3d:b0:40:6b:06:4b:8b:ef:31:dc:93: 37:f6:7c:69:16:8b:6a:fd:05:01:61:c5:7b:70:4e: 4d:67:d5:0f:96:e0:c3:bc:41:53:23:01:d4:3d:67: 6b:e1:01:ea:50:92:b8:89:4e:c3:04:70:a8:f9:e8: 0c:e3:f2:e6:1f:f5:e5:43:32:05:74:bb:06:4e:e6: 4f:e6:f3:cf:23:16:4a:9a:cd:6f:df:18:cc:71:31: 2b:f0:36:60:af:09:11:4b:bc:25:3b:09:6d:09:68: 38:08:0e:21:3b:51:32:6c:d3:51:3b:7c:75:b5:57: 76:0a:a8:bf:7c:94:5e:2e:e8:a7:57:11:48:99:26: 02:bd:b0:b1:3a:8e:e2:4d:6c:d0:84:e4:ce:65:3d: 3d:f3:cd:4e:12:e4:8c:4c:00:1a:a2:aa:00:9e:75: 45:1c:87:a4:05:a2:89:8f:54:43:57:dd:f3:03:9c: eb:0d:49:77:67:f1:14:d5:61:be:82:44:5e:46:3d: da:57:ba:30:de:53:f8:93:59:96:7d:ff:c3:de:11: 86:64:98:53:a5:92:5c:18:c9:80:53:53:b3:31:d2: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210985 Signature Algorithm: sha256WithRSAEncryption 59:b4:9e:44:e6:f8:ff:48:54:0e:91:44:b1:ed:15:84:16:67: af:ab:5e:00:b8:73:c3:cd:f6:27:41:61:c5:8c:ac:ef:53:68: 13:ab:e5:8f:ec:84:70:09:51:44:01:c7:9e:76:f6:ea:f7:31: a2:0e:0a:72:9f:63:17:b2:95:1b:90:a9:eb:88:1d:99:8c:e3: 8a:b7:a3:79:3b:3f:3c:48:5e:dc:78:a2:e6:2a:23:0f:70:14: b5:61:a7:b0:e5:b4:6f:51:ca:68:69:cf:c8:8e:dd:05:e9:a7: de:49:db:10:8e:5e:0c:f3:52:96:45:17:31:72:62:93:a2:22: 07:39:c7:12:90:c2:da:c6:3e:e1:ea:54:cd:43:58:57:2f:f0: c9:c3:cb:c0:9d:b7:72:56:25:6e:a0:42:19:ab:78:ec:f6:f0: 82:1b:36:88:62:dc:e6:2a:7b:f6:7d:1e:4c:e9:aa:86:7a:1f: 15:29:97:89:0b:c6:68:3a:db:a2:82:26:1d:14:be:a4:a4:66: 64:42:ad:a4:46:81:e1:28:e1:53:7d:a8:fc:0d:73:81:4d:09: c2:0e:d7:00:8d:6f:64:b2:e3:08:b0:32:4a:06:52:d9:df:52: 79:b3:53:23:b1:f0:f2:6f:ae:5e:29:75:19:98:58:81:ef:b7: e3:fd:5b:79 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EnB10y6Xn7qbPXUV8ujBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2FjM2U4ZDYzYjFjM2FmYzdjNmMwYmZkYTlkNWFjODE3YjZlZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SBJ2exgBu0YE0bvZhXBysRfHN30 gdoO88vdWasEmA9+PbBAawZLi+8x3JM39nxpFotq/QUBYcV7cE5NZ9UPluDDvEFT IwHUPWdr4QHqUJK4iU7DBHCo+egM4/LmH/XlQzIFdLsGTuZP5vPPIxZKms1v3xjM cTEr8DZgrwkRS7wlOwltCWg4CA4hO1EybNNRO3x1tVd2Cqi/fJReLuinVxFImSYC vbCxOo7iTWzQhOTOZT09881OEuSMTAAaoqoAnnVFHIekBaKJj1RDV93zA5zrDUl3 Z/EU1WG+gkReRj3aV7ow3lP4k1mWff/D3hGGZJhTpZJcGMmAU1OzMdLrdwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCysPo1jscOvx8bAv9qdWsgXtu5tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzE3ZTk5 OS1lNTNkLTQ4Y2EtOTgwYS05NWFlNjRiZDU2ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvMTdlOTk5 LWU1M2QtNDhjYS05ODBhLTk1YWU2NGJkNTZlYy8xL0xLdy1qV094dzZfSHhzQ18y cDFheUJlMjdtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4KTANBgkqhkiG9w0BAQsFAAOCAQEAWbSeROb4/0hU DpFEse0VhBZnr6teALhzw832J0FhxYys71NoE6vlj+yEcAlRRAHHnnb26vcxog4K cp9jF7KVG5Cp64gdmYzjirejeTs/PEhe3Hii5iojD3AUtWGnsOW0b1HKaGnPyI7d Bemn3knbEI5eDPNSlkUXMXJik6IiBznHEpDC2sY+4epUzUNYVy/wycPLwJ23clYl bqBCGat47Pbwghs2iGLc5ip79n0eTOmqhnofFSmXiQvGaDrbooImHRS+pKRmZEKt pEaB4SjhU32o/A1zgU0Jwg7XAI1vZLLjCLAySgZS2d9SebNTI7Hw8m+uXil1GZhY ge+34/1beQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:15 2026 by rpki-client