This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer File: LXjkrg653KxiXZEGzohcW0mAddc.cer (raw, json) Hash identifier: rgGmnQiGNcfHTgeCEXECXnECMC04zah/hB919fWOGzY= Subject key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC3ABDE21A5EF1EA670B4A4FD885DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203556 AS: 205783 IP: 185.130.180.0/22 IP: 185.200.48.0/22 IP: 2001:67c:2f28::/48 IP: 2a0a:b340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3a:bd:e2:1a:5e:f1:ea:67:0b:4a:4f:d8:85:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:12:25:6f:3a:6a:8f:9b:71:86:62:de:28:df: df:3f:01:03:77:2d:a9:db:16:24:b0:34:c3:97:7e: af:70:f3:22:52:a9:10:03:5b:cd:5f:58:ef:0f:7f: 0e:6b:4c:fb:60:42:89:b4:41:43:ca:c6:71:e9:d9: b6:d9:b3:0e:d3:11:f6:01:98:f9:7d:f9:f9:36:79: 11:a0:d8:6f:ce:19:79:ba:17:44:09:cc:14:02:6f: d2:81:e4:40:1d:fe:25:5a:7e:e3:ed:b6:0d:3a:6b: d2:08:ff:3f:d6:f2:46:c1:3e:8b:75:14:ef:2b:26: 2b:e5:64:a4:0d:95:f6:08:bf:ca:17:19:f5:1c:6b: 8f:89:4f:b9:4d:b7:07:e2:a4:35:a2:b5:38:34:eb: 25:6f:eb:f6:7a:c4:d7:b5:bf:27:4c:a1:0d:52:7b: 75:a0:1b:b9:9e:e4:95:c3:1f:a7:82:4e:07:65:d9: 36:9e:a2:3c:a5:fe:c9:fa:f2:63:ca:bf:55:1b:a9: f9:18:5f:82:dc:bc:02:4a:38:65:f3:e8:8d:2b:45: 0f:cc:db:6d:09:fa:fd:8a:6d:61:93:7c:ae:7e:bd: d9:e3:fe:bd:ae:65:78:04:fc:cc:fa:4d:c2:a4:00: 89:ab:4c:3e:c8:b2:1b:f0:56:59:51:2b:f2:b8:dc: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.180.0/22 185.200.48.0/22 IPv6: 2001:67c:2f28::/48 2a0a:b340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203556 205783 Signature Algorithm: sha256WithRSAEncryption 6f:32:46:08:3a:4c:00:d8:0f:e2:c3:5b:fe:8d:9c:da:9d:d4: 4e:7d:15:e2:88:97:85:9b:5f:47:28:b7:06:7a:7b:35:dc:77: b1:38:0c:b0:88:ab:b6:00:e2:a6:d0:4d:7e:b6:52:4b:7d:2c: 06:ee:a1:3f:4c:ad:d0:75:27:be:62:96:1a:a5:7e:ff:47:40: bd:e7:9f:52:35:1c:a5:2b:62:55:ad:c3:29:3d:17:ce:9e:8a: 6b:96:d7:4d:5a:80:64:ce:08:f9:ce:1c:6f:04:ea:7a:80:b9: 05:bf:69:d8:2b:1e:c2:20:ea:f9:10:0b:a0:cc:f8:ce:94:ef: a9:28:6a:0d:6c:c2:a2:ec:0f:b1:9b:ea:fc:fa:f6:57:b4:00: 8a:0d:16:35:61:7f:15:55:89:a8:72:3c:37:d7:36:d3:69:23: 29:af:ca:30:20:47:f7:8b:21:2c:6d:e3:50:cd:90:98:aa:15: 7f:e8:d2:5a:d4:7b:d9:79:25:92:b7:8b:3e:3f:64:fd:2b:8b: b7:22:22:cf:97:b7:ba:ac:11:49:a0:00:5b:fc:03:19:a4:cc: 68:0d:5d:6f:98:90:56:4c:8c:5a:bf:59:07:0e:15:d3:ba:ab: 2c:9c:7b:b3:c9:95:66:ca:e6:f2:cf:1d:41:18:9c:de:0b:66: 34:5c:df:6b -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt57Dq94hpe8epnC0pP2IXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc4ZTRhZTBlYjlkY2FjNjI1ZDkxMDZjZTg4NWM1YjQ5ODA3NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBIlbzpqj5txhmLeKN/fPwEDdy2p 2xYksDTDl36vcPMiUqkQA1vNX1jvD38Oa0z7YEKJtEFDysZx6dm22bMO0xH2AZj5 ffn5NnkRoNhvzhl5uhdECcwUAm/SgeRAHf4lWn7j7bYNOmvSCP8/1vJGwT6LdRTv KyYr5WSkDZX2CL/KFxn1HGuPiU+5TbcH4qQ1orU4NOslb+v2esTXtb8nTKENUnt1 oBu5nuSVwx+ngk4HZdk2nqI8pf7J+vJjyr9VG6n5GF+C3LwCSjhl8+iNK0UPzNtt Cfr9im1hk3yufr3Z4/69rmV4BPzM+k3CpACJq0w+yLIb8FZZUSvyuNweRQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFC145K4OudysYl2RBs6IXFtJgHXXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzUyOGIz MS00MmM5LTQ2MjktYTQ1ZC1mNjU2NzU1MjYwNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTI4YjMx LTQyYzktNDYyOS1hNDVkLWY2NTY3NTUyNjA1ZS8xL0xYamtyZzY1M0t4aVhaRUd6 b2hjVzBtQWRkYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQCuYK0AwQCucgwMBYEAgACMBADBwAgAQZ8LygD BQMqCrNAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMbJAIDAyPXMA0GCSqGSIb3 DQEBCwUAA4IBAQBvMkYIOkwA2A/iw1v+jZzandROfRXiiJeFm19HKLcGens13Hex OAywiKu2AOKm0E1+tlJLfSwG7qE/TK3QdSe+YpYapX7/R0C9559SNRylK2JVrcMp PRfOnoprltdNWoBkzgj5zhxvBOp6gLkFv2nYKx7CIOr5EAugzPjOlO+pKGoNbMKi 7A+xm+r8+vZXtACKDRY1YX8VVYmocjw31zbTaSMpr8owIEf3iyEsbeNQzZCYqhV/ 6NJa1HvZeSWSt4s+P2T9K4u3IiLPl7e6rBFJoABb/AMZpMxoDV1vmJBWTIxav1kH DhXTuqssnHuzyZVmyubyzx1BGJzeC2Y0XN9r -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:44 2026 by rpki-client