This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer (raw, json) Hash identifier: V43ZuNhnp60yRSmsA5Rw4d1naGtQvthJT7eJmzyaM80= Subject key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83FE2108AAE8C1C0762D437602342C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56522 IP: 91.224.200.0/23 IP: 176.121.72.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:fe:21:08:aa:e8:c1:c0:76:2d:43:76:02:34:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:42:b7:b2:7d:c9:0e:95:c4:bd:ca:67:3e: be:8d:76:46:dd:6f:ee:a2:56:6b:85:30:97:2a:89: 2e:14:4d:0f:0c:6b:9d:09:cb:43:20:7d:04:0a:85: 03:47:e0:e4:e4:be:7d:2d:7f:27:2d:c9:e4:94:f3: 56:ee:87:c6:a5:d4:9b:a2:a0:1e:c7:49:ca:1b:db: 05:5d:07:8e:5d:ff:27:04:03:a7:b9:99:b2:e4:61: cc:3f:b2:2b:73:f1:de:58:ff:e3:f4:92:d3:1e:ac: fc:f2:9c:a1:f8:07:d4:43:f7:8b:d2:93:51:c0:32: be:08:d2:4a:bf:fc:a9:e6:55:a5:61:1b:c0:39:d8: 13:4b:a3:f9:03:a6:42:86:f5:3e:10:d6:43:40:2b: 76:87:a7:6d:96:97:e6:da:6a:87:03:5b:f2:6d:9e: eb:d9:62:91:89:a6:25:a5:e7:73:71:70:e9:8c:29: 3a:f2:ad:2e:e7:3f:2a:76:46:28:4b:dc:30:a4:49: 0b:0f:b3:23:a2:a4:89:18:08:0d:c3:bf:6c:cb:61: f0:93:80:5f:ad:3e:fb:72:ee:e7:c8:06:ad:e7:2d: ac:fb:77:50:aa:d8:e9:bb:d1:b1:48:cf:0c:b0:cb: 1b:c2:f2:17:02:8c:dd:87:fc:9c:18:05:0b:d5:ed: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.200.0/23 176.121.72.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56522 Signature Algorithm: sha256WithRSAEncryption 98:14:59:53:9e:91:5a:69:17:bf:b3:db:7d:c3:68:d8:8d:7b: bd:98:d9:67:eb:bd:bc:95:dc:73:a6:28:48:f8:be:ce:cd:73: 68:20:84:50:4a:46:33:c9:a3:1f:87:55:2c:8b:97:1a:d6:7b: 84:8d:69:3f:b2:6d:f1:d9:44:63:0e:f2:20:88:50:5f:1d:4c: f3:19:30:39:8f:3d:1a:c2:a1:7f:49:37:5f:f4:a1:d3:ef:4c: 0d:69:23:40:f6:f6:17:c6:8a:da:64:bd:0d:2c:96:e9:90:fe: c8:fe:47:f6:2d:54:f0:84:a2:6d:f5:a6:29:33:d1:81:39:2b: aa:02:4c:de:31:f3:f6:b6:ce:65:e2:4a:5b:6c:57:53:2c:98: 55:6a:04:20:94:00:7d:7b:c9:0c:b1:c6:17:52:de:cd:25:41: e3:1e:5c:f5:91:70:b1:56:1b:ce:18:7d:ec:60:d8:c6:33:dd: 35:fa:03:35:1c:06:40:41:fb:f7:bf:78:6f:2f:3b:17:22:e2: 11:51:40:8c:7c:47:63:5c:b6:32:c4:e9:0a:83:ef:cd:eb:53: 4e:83:d9:e8:98:7e:0e:9c:ba:4b:ab:7a:9e:ed:5d:ed:a8:1c: 34:5f:63:9c:41:11:2f:fa:e4:ab:d6:a9:f2:cc:73:1d:d3:e5: 22:a9:e7:d7 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/g/4hCKrowcB2LUN2AjQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGZjNTRkNTU0M2UxMjQ4NGI2YmFiMmZkYzM5OWE4ZjUyOTU3ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOpCt7J9yQ6VxL3KZz6+jXZG3W/u olZrhTCXKokuFE0PDGudCctDIH0ECoUDR+Dk5L59LX8nLcnklPNW7ofGpdSboqAe x0nKG9sFXQeOXf8nBAOnuZmy5GHMP7Irc/HeWP/j9JLTHqz88pyh+AfUQ/eL0pNR wDK+CNJKv/yp5lWlYRvAOdgTS6P5A6ZChvU+ENZDQCt2h6dtlpfm2mqHA1vybZ7r 2WKRiaYlpedzcXDpjCk68q0u5z8qdkYoS9wwpEkLD7MjoqSJGAgNw79sy2Hwk4Bf rT77cu7nyAat5y2s+3dQqtjpu9GxSM8MsMsbwvIXAozdh/ycGAUL1e2phwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFC38VNVUPhJIS2urL9w5mo9SlXh8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2I2Yjlj NC04MmRmLTRlYTYtYWVmYy03MDY0NGU4ZjM2NDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvYjZiOWM0 LTgyZGYtNGVhNi1hZWZjLTcwNjQ0ZThmMzY0MS8xL0xmeFUxVlEtRWtoTGE2c3Yz RG1hajFLVmVIdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW+DIAwQDsHlIMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDcyjANBgkqhkiG9w0BAQsFAAOCAQEAmBRZU56RWmkXv7PbfcNo2I17 vZjZZ+u9vJXcc6YoSPi+zs1zaCCEUEpGM8mjH4dVLIuXGtZ7hI1pP7Jt8dlEYw7y IIhQXx1M8xkwOY89GsKhf0k3X/Sh0+9MDWkjQPb2F8aK2mS9DSyW6ZD+yP5H9i1U 8ISibfWmKTPRgTkrqgJM3jHz9rbOZeJKW2xXUyyYVWoEIJQAfXvJDLHGF1LezSVB 4x5c9ZFwsVYbzhh97GDYxjPdNfoDNRwGQEH79794by87FyLiEVFAjHxHY1y2MsTp CoPvzetTToPZ6Jh+Dpy6S6t6nu1d7agcNF9jnEERL/rkq9ap8sxzHdPlIqnn1w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:53 2026 by rpki-client