This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer (raw, json) Hash identifier: Mvy7BifgZI5gVb2BcVCSlxKi7MrJ3ZArOr8kuuOI8U0= Subject key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F0816848D523DD67FBB60AEA7608F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.40.224.0/22 IP: 77.247.112.0/22 IP: 87.101.80.0/22 IP: 185.158.68.0/22 IP: 185.222.132.0/22 IP: 188.65.16.0/22 IP: 193.9.152.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:08:16:84:8d:52:3d:d6:7f:bb:60:ae:a7:60:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8f:9f:66:d9:45:a1:b4:cd:b6:d9:4e:59:8c: 44:c2:79:84:7a:30:9a:ff:72:2e:fe:ce:8a:24:6d: 0f:04:b6:a8:ab:e3:44:2e:2a:39:c4:fe:19:cc:99: f6:de:38:ad:7b:c6:f5:d0:21:fe:89:78:6c:85:19: 2d:6c:d6:cf:ac:73:90:00:52:ad:d0:a8:7c:d2:ae: 92:2d:d1:c2:e7:2f:9d:de:b8:fd:44:05:9c:96:75: 6f:07:80:bd:69:dc:3f:27:d0:f8:1d:1f:cb:5c:fa: c0:3e:39:b2:8e:71:34:4d:83:96:1f:8d:f5:2e:2c: 79:95:7f:96:0f:04:bc:63:76:a8:4d:cc:1b:ac:03: 67:91:35:78:04:bd:f5:f0:a4:89:6a:b8:25:91:eb: a6:2e:e9:90:69:95:77:7f:51:d6:37:ea:99:69:a8: 28:6e:c0:10:d9:aa:84:39:04:20:e9:d7:7e:6f:89: 38:38:c3:67:39:ef:e8:4b:c2:9a:11:c7:e3:b4:bf: 9b:c8:6a:53:a6:7a:5a:77:25:59:20:aa:30:e8:33: d2:92:8d:86:e2:d8:ed:8e:95:7b:5f:d3:95:26:a4: e0:4a:9a:f4:ef:2b:5f:f8:b1:bc:ff:98:f3:59:94: 3c:8e:e8:cf:93:8b:2b:7f:3f:84:9c:8f:45:13:1c: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.224.0/22 77.247.112.0/22 87.101.80.0/22 185.158.68.0/22 185.222.132.0/22 188.65.16.0/22 193.9.152.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:7d:6f:af:1a:5e:6a:d8:a0:ec:b4:66:c4:d5:55:3b:8a:ae: cd:80:40:02:a0:53:2c:80:a7:b3:1d:23:ad:13:72:02:a1:f3: 5b:7c:71:ac:a4:bc:01:b5:7d:9b:6b:77:9f:bd:df:e8:11:d5: a8:d2:cd:2b:b7:6c:40:3e:c2:eb:6e:69:e5:58:fb:27:2c:af: 98:4f:b4:67:40:86:db:30:85:4a:de:f6:cf:9a:5b:6e:ad:e5: ac:48:d3:4a:be:31:dc:b1:a6:f9:25:01:3a:ea:8f:63:aa:e9: 53:ad:f7:9a:ec:d0:af:9a:a3:4f:58:46:8c:63:23:44:dc:43: 02:a4:61:0d:d7:7b:9a:6b:ee:ce:5c:1b:ba:25:3e:89:9f:e6: 38:bc:ef:c4:5e:72:10:a7:4f:31:ea:c7:1f:f1:f5:50:f3:bd: f1:a8:97:c1:13:9f:a9:d7:76:8e:d2:59:73:71:5e:fe:84:80: e5:c8:81:23:98:0e:50:a2:dd:82:f8:6a:4d:86:bc:d5:44:ec: 26:57:14:e6:e3:42:b9:53:4b:0d:8c:f7:cc:21:73:e4:ae:45: 59:e4:ea:53:50:aa:7d:df:d3:6b:9b:ac:45:21:4a:11:22:0e: 0e:b8:d4:f1:0e:55:c5:95:8d:89:8b:32:db:79:d1:bf:06:5c: 42:cd:1c:60 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt5fwgWhI1SPdZ/u2Cup2CPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGY4Nzc5YTNjODJmMDBmYzE0NDM1ZWU3ZDhkMGI4ZDZkZDgyMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I+fZtlFobTNttlOWYxEwnmEejCa /3Iu/s6KJG0PBLaoq+NELio5xP4ZzJn23jite8b10CH+iXhshRktbNbPrHOQAFKt 0Kh80q6SLdHC5y+d3rj9RAWclnVvB4C9adw/J9D4HR/LXPrAPjmyjnE0TYOWH431 Lix5lX+WDwS8Y3aoTcwbrANnkTV4BL318KSJarglkeumLumQaZV3f1HWN+qZaago bsAQ2aqEOQQg6dd+b4k4OMNnOe/oS8KaEcfjtL+byGpTpnpadyVZIKow6DPSko2G 4tjtjpV7X9OVJqTgSpr07ytf+LG8/5jzWZQ8jujPk4srfz+EnI9FExyaHwIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFC34d5o8gvAPwUQ17n2NC41t2CBOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5L2NjZDk2 ZS0xMzNlLTQ1YjctODhiNy1lMmFlMDU1ZWNlZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvY2NkOTZl LTEzM2UtNDViNy04OGI3LWUyYWUwNTVlY2VkMS8xL0xmaDNtanlDOEFfQlJEWHVm WTBMalczWUlFNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAwBAIAATAqAwQCHyjgAwQCTfdwAwQCV2VQAwQCuZ5EAwQCud6E AwQCvEEQAwQCwQmYMA0GCSqGSIb3DQEBCwUAA4IBAQBOfW+vGl5q2KDstGbE1VU7 iq7NgEACoFMsgKezHSOtE3ICofNbfHGspLwBtX2ba3efvd/oEdWo0s0rt2xAPsLr bmnlWPsnLK+YT7RnQIbbMIVK3vbPmltureWsSNNKvjHcsab5JQE66o9jqulTrfea 7NCvmqNPWEaMYyNE3EMCpGEN13uaa+7OXBu6JT6Jn+Y4vO/EXnIQp08x6scf8fVQ 873xqJfBE5+p13aO0llzcV7+hIDlyIEjmA5Qot2C+GpNhrzVROwmVxTm40K5U0sN jPfMIXPkrkVZ5OpTUKp939Nrm6xFIUoRIg4OuNTxDlXFlY2JizLbedG/BlxCzRxg -----END CERTIFICATE-----Generated at Mon Jan 26 18:46:04 2026 by rpki-client