This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer File: LKzIXJmo4dt9HFImfC3b08OeGLI.cer (raw, json) Hash identifier: xwStdRUMZNRaiHiJsEuo+XObEeKvqFGwdYEWBbyTDEU= Subject key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AF5138FE19BA60ED10CC315AD5E29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49862 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f5:13:8f:e1:9b:a6:0e:d1:0c:c3:15:ad:5e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:54:56:35:f9:43:48:af:0c:a1:8b:b2:c4: 1a:4a:3e:0c:f6:8f:6b:03:04:04:ad:41:26:e1:2a: 64:01:77:7d:09:3a:26:7c:af:4a:29:5d:60:7b:b6: f2:a2:d9:db:cf:3a:55:ce:fe:2f:41:3b:38:1e:49: e0:5d:d2:76:f2:8d:e4:24:91:54:82:71:61:69:84: c7:b8:14:13:61:2d:00:dd:0c:01:3c:cc:72:5e:72: b1:1c:62:88:a2:01:fa:2a:e8:d9:f0:2f:9c:47:63: d6:cb:12:47:e8:90:45:0f:9f:30:45:18:16:bd:a5: 11:29:5a:0f:32:3a:49:70:18:46:ba:89:f5:52:cb: 64:86:89:1a:d3:c8:bf:eb:f7:97:df:ef:0d:3e:81: a1:af:24:12:4e:4e:16:32:ed:53:9c:b9:0b:12:a7: 7b:58:e0:15:16:c0:5f:f9:41:90:80:b8:20:33:fa: db:49:11:5c:32:90:db:55:b1:b7:3b:4d:4f:12:6e: b6:54:72:15:25:50:04:60:85:00:f5:51:50:8e:01: d8:fb:4b:f1:2e:bf:93:a2:60:97:40:fb:5f:14:95: f7:b2:11:53:b7:a2:04:c6:8d:50:f2:c3:5a:8e:67: 95:21:19:26:ec:9c:ca:99:73:14:f2:36:af:4a:ab: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49862 Signature Algorithm: sha256WithRSAEncryption 64:ef:a0:95:47:11:04:84:1d:46:c1:9d:bd:d3:cc:b7:85:cc: 2e:18:ba:f2:da:28:35:d6:f8:e0:23:16:1d:79:ed:b7:76:b1: db:e9:d5:45:c4:1c:05:61:8e:de:98:1f:da:60:f4:6f:3c:a8: 03:98:b9:e9:a9:a2:c2:08:55:ae:82:41:fb:53:70:5c:5e:77: aa:54:0e:f0:30:75:30:c8:90:f4:0f:79:c0:9e:1f:64:c3:d1: 50:e1:3f:55:70:7d:2e:c5:f1:be:d8:35:a9:4d:cf:67:8d:4b: 13:2d:49:74:13:d0:f5:ac:be:a3:d0:f1:df:f0:dd:54:46:47: 78:eb:03:9c:1a:7d:6c:47:1f:b7:09:d3:26:3f:66:09:0e:46: 90:ab:05:34:ab:dc:93:3e:e0:a5:93:45:4f:45:40:a8:28:97: 93:e7:65:dd:a6:6d:13:62:2b:91:53:2c:c7:83:cf:c1:b6:55: d3:66:08:07:ff:59:90:ea:39:d5:d4:b1:66:f4:4f:56:12:1d: ea:60:eb:88:e9:a4:87:d4:41:82:f3:05:e4:0d:dc:56:3d:01: 9d:fd:7e:b4:19:d1:a3:f7:41:4f:25:f8:16:9a:b6:66:32:74: 2e:5b:15:26:0b:69:63:21:0e:c9:9f:eb:1e:5e:81:3e:eb:fd: d7:16:b4:13 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9WvUTj+Gbpg7RDMMVrV4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2FjYzg1Yzk5YThlMWRiN2QxYzUyMjY3YzJkZGJkM2MzOWUxOGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aNUVjX5Q0ivDKGLssQaSj4M9o9r AwQErUEm4SpkAXd9CTomfK9KKV1ge7byotnbzzpVzv4vQTs4HkngXdJ28o3kJJFU gnFhaYTHuBQTYS0A3QwBPMxyXnKxHGKIogH6KujZ8C+cR2PWyxJH6JBFD58wRRgW vaURKVoPMjpJcBhGuon1Ustkhoka08i/6/eX3+8NPoGhryQSTk4WMu1TnLkLEqd7 WOAVFsBf+UGQgLggM/rbSRFcMpDbVbG3O01PEm62VHIVJVAEYIUA9VFQjgHY+0vx Lr+TomCXQPtfFJX3shFTt6IExo1Q8sNajmeVIRkm7JzKmXMU8javSquFgQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCysyFyZqOHbfRxSJnwt29PDnhiyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzBhZGQ3 Yy1hMjhjLTRhZTgtODg4NS0wMWNlMDZkMzE1Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMGFkZDdj LWEyOGMtNGFlOC04ODg1LTAxY2UwNmQzMTVjZC8xL0xLeklYSm1vNGR0OUhGSW1m QzNiMDhPZUdMSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDCxjANBgkqhkiG9w0BAQsFAAOCAQEAZO+glUcRBIQd RsGdvdPMt4XMLhi68tooNdb44CMWHXntt3ax2+nVRcQcBWGO3pgf2mD0bzyoA5i5 6amiwghVroJB+1NwXF53qlQO8DB1MMiQ9A95wJ4fZMPRUOE/VXB9LsXxvtg1qU3P Z41LEy1JdBPQ9ay+o9Dx3/DdVEZHeOsDnBp9bEcftwnTJj9mCQ5GkKsFNKvckz7g pZNFT0VAqCiXk+dl3aZtE2IrkVMsx4PPwbZV02YIB/9ZkOo51dSxZvRPVhId6mDr iOmkh9RBgvMF5A3cVj0Bnf1+tBnRo/dBTyX4Fpq2ZjJ0LlsVJgtpYyEOyZ/rHl6B Puv91xa0Ew== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:15 2026 by rpki-client