This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer File: LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer (raw, json) Hash identifier: 3OALZzaYmv4zaXZpu4WmDX7ZebkKdiS6soJ2FBHlzM8= Subject key identifier: 2D:90:93:67:DB:DD:D1:E4:86:6B:D8:9E:AF:72:75:98:A4:7B:58:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F0130B227E9D5CB08FC1FCBB4B893 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56470 IP: 91.223.168.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:01:30:b2:27:e9:d5:cb:08:fc:1f:cb:b4:b8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d909367dbddd1e4866bd89eaf727598a47b583d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:7a:8c:27:a5:5e:df:b8:27:02:4e:2e:9d: 76:2d:48:72:72:86:e8:1a:2c:0e:cb:c2:24:04:f1: e9:92:28:e8:34:b2:f8:68:93:df:02:aa:57:7c:a3: 21:b0:e9:a6:2d:f7:3b:3e:8e:38:8c:9f:2b:e8:69: ec:6f:d5:a7:96:6b:2b:ac:56:24:b8:bf:5e:80:bb: f6:31:53:4c:69:72:43:d2:fd:0a:b5:c3:d1:fb:3f: cf:4f:69:3d:53:bd:20:a2:a9:c8:63:83:de:38:3c: 08:f5:10:37:aa:90:7b:5a:5c:1c:76:ce:3d:06:9f: 60:0f:ac:ee:9c:6d:67:0a:89:7a:f4:7c:46:6a:cb: 49:52:03:2f:a5:9f:8e:4c:fd:ee:2a:f0:f4:ea:07: 0f:c6:58:21:bc:6d:6d:a0:c1:c2:25:44:d9:5b:fd: 34:4f:1d:da:73:82:a4:aa:4a:da:6c:40:d9:cb:bf: 39:96:f9:54:f5:c2:b5:dd:c6:00:21:2f:58:21:2c: 2c:6b:fd:13:53:44:4c:d0:dc:86:2a:9c:79:ad:2f: e4:2c:69:b5:32:19:0a:f0:77:dd:a8:f9:5a:af:12: be:a5:61:43:93:bb:d8:c2:99:f9:5c:bc:e0:fc:13: 9d:78:c9:a8:0e:73:5d:eb:f6:00:62:00:37:9d:13: 1b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:90:93:67:DB:DD:D1:E4:86:6B:D8:9E:AF:72:75:98:A4:7B:58:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.168.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56470 Signature Algorithm: sha256WithRSAEncryption 0a:4b:14:6f:49:6b:d2:c2:ea:74:f0:1f:19:52:42:46:fa:00: fa:27:5e:1c:f0:4a:59:a5:87:27:a2:8e:4f:20:a4:48:f5:10: 62:5c:d2:1f:1a:17:c8:b3:d0:ff:f3:d3:7a:df:c9:46:3a:7f: 1f:ab:47:17:7d:b5:3a:ff:ee:32:58:64:97:11:17:63:7c:e5: 4f:55:27:40:01:bd:af:d8:e9:82:c8:d7:64:3f:02:10:81:f1: 49:a4:01:63:69:56:06:21:46:c0:00:51:1d:98:8d:50:fa:7c: c2:93:d9:8e:95:f7:22:ed:ab:6a:9d:7e:a5:e0:77:4f:06:b4: 79:ce:c3:a1:a6:c3:aa:d0:35:3c:cd:8b:8e:ae:32:29:3b:a1: e3:eb:6d:3d:78:02:2c:79:3e:6c:50:61:d1:9c:d3:af:62:ad: 9a:3f:95:a8:ab:34:fc:88:0f:82:ff:5f:da:1d:45:86:ad:a5: b8:34:9f:dc:19:a1:4f:94:5f:6c:b5:5f:8a:72:85:d9:64:cd: af:a9:ce:94:1f:03:6d:50:5f:e0:da:c6:5d:8b:6d:8b:e6:88: 1d:87:02:9c:81:aa:10:34:50:fd:56:8d:51:88:f5:a5:84:f6: 2a:55:dd:08:4a:79:4a:2a:53:2b:11:82:4d:57:c4:e7:5f:71: 52:37:9e:f0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fwEwsifp1csI/B/LtLiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDkwOTM2N2RiZGRkMWU0ODY2YmQ4OWVhZjcyNzU5OGE0N2I1ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvex6jCelXt+4JwJOLp12LUhycobo GiwOy8IkBPHpkijoNLL4aJPfAqpXfKMhsOmmLfc7Po44jJ8r6Gnsb9WnlmsrrFYk uL9egLv2MVNMaXJD0v0KtcPR+z/PT2k9U70goqnIY4PeODwI9RA3qpB7Wlwcds49 Bp9gD6zunG1nCol69HxGastJUgMvpZ+OTP3uKvD06gcPxlghvG1toMHCJUTZW/00 Tx3ac4KkqkrabEDZy785lvlU9cK13cYAIS9YISwsa/0TU0RM0NyGKpx5rS/kLGm1 MhkK8HfdqPlarxK+pWFDk7vYwpn5XLzg/BOdeMmoDnNd6/YAYgA3nRMbjQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFC2Qk2fb3dHkhmvYnq9ydZike1g9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzRjOTQx ZC05OTJkLTRlZWYtODhmNS1mMGY4MDA4ZGZjNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNGM5NDFk LTk5MmQtNGVlZi04OGY1LWYwZjgwMDhkZmM0Yy8xL0xaQ1RaOXZkMGVTR2E5aWVy M0oxbUtSN1dEMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9+oMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDcljANBgkqhkiG9w0BAQsFAAOCAQEACksUb0lr0sLqdPAfGVJCRvoA+ideHPBK WaWHJ6KOTyCkSPUQYlzSHxoXyLPQ//PTet/JRjp/H6tHF321Ov/uMlhklxEXY3zl T1UnQAG9r9jpgsjXZD8CEIHxSaQBY2lWBiFGwABRHZiNUPp8wpPZjpX3Iu2rap1+ peB3Twa0ec7DoabDqtA1PM2Ljq4yKTuh4+ttPXgCLHk+bFBh0ZzTr2Ktmj+VqKs0 /IgPgv9f2h1Fhq2luDSf3BmhT5RfbLVfinKF2WTNr6nOlB8DbVBf4NrGXYtti+aI HYcCnIGqEDRQ/VaNUYj1pYT2KlXdCEp5SipTKxGCTVfE519xUjee8A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:47 2026 by rpki-client