This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer File: LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer (raw, json) Hash identifier: 17ZIkFZT1Gd5RFuHBfzHrwM8BCYsXpRbgthobtEaH9E= Subject key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E8C935C6FA44259A4D943F046771 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47405 AS: 56589 IP: 91.206.34.0/23 IP: 195.43.145.0/24 IP: 2001:67c:7e8::/48 IP: 2001:67c:7ec::/48 IP: 2001:67c:7f0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e8:c9:35:c6:fa:44:25:9a:4d:94:3f:04:67:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:8d:73:8f:e7:bc:20:a5:9c:ac:37:d0:d8: 82:44:ed:aa:f0:2d:16:13:0e:2d:93:5e:17:ff:ef: 89:96:85:8a:af:d7:61:ee:61:4b:e7:42:ca:b0:28: b9:06:66:cd:ce:20:83:62:52:32:2f:2a:7b:b3:2b: f8:75:5e:37:8b:8b:eb:d1:4f:1b:20:03:b1:6f:2d: d8:00:0f:d1:59:46:1a:4b:d2:29:0a:2a:f6:4d:ce: 42:3c:ec:0a:ee:ea:23:da:67:3e:cc:e2:ac:58:5e: ab:00:21:ec:4e:58:3d:c8:c3:ee:ec:cf:17:bc:6d: 25:fa:cc:d4:10:c6:22:e8:48:28:a2:58:fc:0f:56: 57:f0:51:d0:cb:c6:e0:b3:dd:12:1a:97:1f:9d:d3: 59:8a:db:02:7b:0a:cb:b7:41:10:bc:56:3b:d1:c2: a9:78:54:0f:81:24:56:68:0b:51:6a:dd:5e:35:de: a9:0a:13:4b:bb:9b:bf:dc:67:fe:3d:34:78:d8:f0: d6:ae:07:80:e1:6f:58:dc:ff:67:d9:36:98:f4:e5: d8:4a:88:a9:b7:52:a7:5d:09:d7:4a:23:9b:eb:9a: 47:a6:9d:1b:44:0f:b7:01:53:94:5c:0c:58:34:b3: 53:6f:68:67:96:f1:74:61:d8:ca:8c:e4:99:f7:91: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.34.0/23 195.43.145.0/24 IPv6: 2001:67c:7e8::/48 2001:67c:7ec::/48 2001:67c:7f0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47405 56589 Signature Algorithm: sha256WithRSAEncryption 5a:6a:ed:cb:99:fa:de:a1:0c:f9:5c:8e:96:74:a2:1a:02:61: 15:b1:75:c1:c5:a1:ea:86:7a:14:a8:fc:39:da:1e:22:c3:c6: 5a:6e:47:32:93:27:35:b7:ad:7a:e4:64:3b:60:bc:80:03:45: 49:9a:9a:0b:2a:01:22:46:9e:0b:0c:67:d0:65:35:a0:18:90: b9:b8:20:a6:a8:4d:40:c2:3d:23:b8:22:7e:69:22:a0:32:e8: 9e:94:fc:47:23:ae:fe:1f:e0:bb:45:6d:22:2f:63:cc:66:4e: 39:aa:21:44:8a:cb:d0:90:2b:ac:e0:d0:3d:34:0d:1f:6c:92: ff:6d:f8:12:ae:09:26:aa:4c:03:05:ec:bc:93:88:7a:4c:88: 8c:cc:d2:7f:7f:51:6c:09:09:45:88:66:41:b2:8c:51:d1:4a: 04:24:90:a1:c2:26:2d:b2:2b:23:21:3f:a1:8f:f0:d4:17:76: ba:08:32:18:e0:33:9f:72:5b:71:bd:cc:99:6d:92:86:73:93: e4:41:2e:49:26:21:f1:a1:fe:8b:f3:2f:49:19:87:56:44:bc: 43:d5:9d:41:73:63:e0:34:b6:27:29:23:08:2b:eb:d8:9d:a1: e4:93:71:3c:4c:4b:a4:93:1b:6b:9c:85:95:3b:a1:10:00:6b: 7f:d2:17:3f -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt3xujJNcb6RCWaTZQ/BGdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDU5NzI2OGE1NzUzNGY4Y2YxYjYzYjc5NGVlZjBkNzdjN2I0M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob2Nc4/nvCClnKw30NiCRO2q8C0W Ew4tk14X/++JloWKr9dh7mFL50LKsCi5BmbNziCDYlIyLyp7syv4dV43i4vr0U8b IAOxby3YAA/RWUYaS9IpCir2Tc5CPOwK7uoj2mc+zOKsWF6rACHsTlg9yMPu7M8X vG0l+szUEMYi6Egoolj8D1ZX8FHQy8bgs90SGpcfndNZitsCewrLt0EQvFY70cKp eFQPgSRWaAtRat1eNd6pChNLu5u/3Gf+PTR42PDWrgeA4W9Y3P9n2TaY9OXYSoip t1KnXQnXSiOb65pHpp0bRA+3AVOUXAxYNLNTb2hnlvF0YdjKjOSZ95FSNQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFC1ZcmildTT4zxtjt5Tu8Nd8e0OiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzcxYjQy OC1jZTgyLTRlOTEtYmEwOS00ZTA0ODFkYzdkMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvNzFiNDI4 LWNlODItNGU5MS1iYTA5LTRlMDQ4MWRjN2QxYy8xL0xWbHlhS1YxTlBqUEcyTzNs Tzd3MTN4N1E2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzASBAIAATAMAwQBW84iAwQAwyuRMCEEAgACMBsDBwAgAQZ8B+gD BwAgAQZ8B+wDBwAgAQZ8B/AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDALktAgMA 3Q0wDQYJKoZIhvcNAQELBQADggEBAFpq7cuZ+t6hDPlcjpZ0ohoCYRWxdcHFoeqG ehSo/DnaHiLDxlpuRzKTJzW3rXrkZDtgvIADRUmamgsqASJGngsMZ9BlNaAYkLm4 IKaoTUDCPSO4In5pIqAy6J6U/Ecjrv4f4LtFbSIvY8xmTjmqIUSKy9CQK6zg0D00 DR9skv9t+BKuCSaqTAMF7LyTiHpMiIzM0n9/UWwJCUWIZkGyjFHRSgQkkKHCJi2y KyMhP6GP8NQXdroIMhjgM59yW3G9zJltkoZzk+RBLkkmIfGh/ovzL0kZh1ZEvEPV nUFzY+A0ticpIwgr69idoeSTcTxMS6STG2uchZU7oRAAa3/SFz8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:05 2026 by rpki-client