This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer File: LXR59FZDorguENq_c-_vdwOx4tI.cer (raw, json) Hash identifier: BVGPD6X7/JN1pLom28b2Ng0zWaqe+42mKS0nDwDGlJE= Subject key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75CD38F5204CC878A9F1B2DC4FE98 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41405 IP: 45.146.212.0/22 IP: 91.223.159.0/24 IP: 185.123.84.0/22 IP: 195.200.217.0/24 IP: 2a06:ac00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5c:d3:8f:52:04:cc:87:8a:9f:1b:2d:c4:fe:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:f4:fc:ff:bf:6a:40:1b:26:fb:91:c3:55: 0e:34:f5:d7:a3:e1:28:3d:18:4e:66:f7:0b:26:67: a6:01:12:aa:ed:92:9e:ff:a6:d5:10:7e:9f:b7:15: ef:06:6e:ed:eb:6b:18:ba:83:5a:95:80:04:20:1c: 7f:7d:85:7d:c1:8c:a4:e5:57:54:16:a2:65:79:bb: 75:d1:43:99:2f:81:0a:4a:12:9d:a4:56:61:f2:5c: 83:91:8f:e4:bf:c6:29:d0:b3:66:1b:c9:77:bf:06: d1:c3:69:bc:85:3e:e2:f0:46:0a:cc:3c:d8:c4:a9: 78:02:d1:26:53:74:6a:e2:f1:c9:1d:86:e7:9a:06: 6a:83:01:4a:fb:3a:36:0f:71:fa:f4:44:20:df:0a: 4e:ae:a1:6f:61:f4:4e:86:70:af:14:d4:c8:11:84: 5d:d5:52:ed:92:a0:a2:c8:93:e5:9b:b4:e0:0d:ff: be:40:ba:8a:e3:80:0f:07:2d:77:9f:d3:a4:b5:72: 4d:86:92:4f:46:a3:64:05:e2:53:45:46:61:4c:49: f0:bc:ef:dc:03:e3:bd:99:6b:3e:90:cc:3a:ed:b8: c8:4b:b7:23:73:1a:c5:bc:42:dc:c6:2b:3f:74:46: 50:9d:13:5b:6f:1e:eb:c5:0e:e1:44:c5:da:2f:37: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.212.0/22 91.223.159.0/24 185.123.84.0/22 195.200.217.0/24 IPv6: 2a06:ac00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41405 Signature Algorithm: sha256WithRSAEncryption 05:74:1e:ea:64:94:d1:05:5a:59:a1:61:1c:74:eb:f3:8a:0a: aa:ac:99:16:e6:66:21:67:d0:86:99:70:52:bc:85:de:aa:5b: 7f:5f:f5:52:d3:0a:7c:77:fc:f2:e1:49:96:65:74:eb:7b:59: 45:f9:9e:13:86:c8:a5:ac:b6:a4:46:e0:f1:33:f3:7c:5b:88: ce:27:79:9f:c4:ba:2c:80:7c:c7:81:0b:f3:15:64:15:1b:a9: 77:97:9c:a9:89:94:90:d9:e4:ac:8a:17:21:91:cc:91:e9:0c: 29:a0:a7:be:2a:3f:5d:7f:69:5e:30:5c:a1:b6:2a:e0:28:ac: 5d:b9:87:5a:40:d6:e3:54:40:41:aa:5d:4a:1b:8c:e8:ab:95: 7b:82:59:97:fd:c4:de:69:5a:76:74:cf:7d:9c:34:1e:6f:ee: d5:35:33:55:55:0b:35:fe:4b:e7:98:2f:df:90:7f:a0:2b:5d: 7f:79:29:cb:c8:12:b3:b9:60:2b:7c:57:ac:db:65:6b:5f:74: 60:ee:c1:56:9c:eb:f6:20:da:1f:6a:f4:c4:72:56:6b:64:d4: bf:ca:37:37:b2:fa:a6:b7:cc:ba:6f:fc:b1:3b:ab:28:14:86: 0c:11:79:53:f4:94:f2:3f:50:1e:f3:8a:ef:84:74:86:82:15: ba:ed:44:9a -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3x1zTj1IEzIeKnxstxP6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc0NzlmNDU2NDNhMmI4MmUxMGRhYmY3M2VmZWY3NzAzYjFlMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT/0/P+/akAbJvuRw1UONPXXo+Eo PRhOZvcLJmemARKq7ZKe/6bVEH6ftxXvBm7t62sYuoNalYAEIBx/fYV9wYyk5VdU FqJlebt10UOZL4EKShKdpFZh8lyDkY/kv8Yp0LNmG8l3vwbRw2m8hT7i8EYKzDzY xKl4AtEmU3Rq4vHJHYbnmgZqgwFK+zo2D3H69EQg3wpOrqFvYfROhnCvFNTIEYRd 1VLtkqCiyJPlm7TgDf++QLqK44APBy13n9OktXJNhpJPRqNkBeJTRUZhTEnwvO/c A+O9mWs+kMw67bjIS7cjcxrFvELcxis/dEZQnRNbbx7rxQ7hRMXaLzeHNQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFC10efRWQ6K4LhDav3Pv73cDseLSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzlkZmUx ZS1jZDc0LTQ3MWUtOTFiZi0wZmMzZmRjZjU5YWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOWRmZTFl LWNkNzQtNDcxZS05MWJmLTBmYzNmZGNmNTlhZS8xL0xYUjU5RlpEb3JndUVOcV9j LV92ZHdPeDR0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLZLUAwQAW9+fAwQCuXtUAwQAw8jZMA0EAgAC MAcDBQMqBqwAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwChvTANBgkqhkiG9w0B AQsFAAOCAQEABXQe6mSU0QVaWaFhHHTr84oKqqyZFuZmIWfQhplwUryF3qpbf1/1 UtMKfHf88uFJlmV063tZRfmeE4bIpay2pEbg8TPzfFuIzid5n8S6LIB8x4EL8xVk FRupd5ecqYmUkNnkrIoXIZHMkekMKaCnvio/XX9pXjBcobYq4CisXbmHWkDW41RA QapdShuM6KuVe4JZl/3E3mladnTPfZw0Hm/u1TUzVVULNf5L55gv35B/oCtdf3kp y8gSs7lgK3xXrNtla190YO7BVpzr9iDaH2r0xHJWa2TUv8o3N7L6prfMum/8sTur KBSGDBF5U/SU8j9QHvOK74R0hoIVuu1Emg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:53 2026 by rpki-client