This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer File: LvuebXVm3--dXLmNkpy3AyPTifI.cer (raw, json) Hash identifier: SKhE12x9u99guDicgqJthiX8oQnB+DtyV0fl93GmuBY= Subject key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6AC8A95A3803F6CD7DC73E6609CCC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49354 IP: 37.18.128.0/22 IP: 2a05:280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ac:8a:95:a3:80:3f:6c:d7:dc:73:e6:60:9c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:de:e9:5d:6e:48:e1:c7:06:c3:2e:d7:d7: ff:9e:44:42:64:02:0d:ae:ad:41:0a:ab:39:6b:ff: f7:05:9f:63:bd:71:6d:90:b9:6e:81:b6:52:a7:61: e0:e2:37:b4:9e:2a:1a:3c:d5:8d:e4:05:ac:27:5d: 20:c3:5a:e6:f9:ef:ca:83:55:40:d6:50:b5:7d:1b: d6:b7:6e:49:7b:9a:a7:ba:ea:f3:c7:76:2a:ba:b3: 07:23:8b:f1:54:9d:22:7a:af:d9:a5:37:18:02:7e: 12:be:fd:af:8d:43:69:10:31:4e:cf:24:65:4e:68: b1:eb:d3:56:f2:be:fb:ee:20:01:d3:68:d7:0d:4a: f3:56:23:af:96:87:f9:78:e5:3a:e2:89:10:18:68: b5:7e:76:57:84:2c:d1:18:64:c2:e8:3e:6c:f6:94: df:5e:25:97:46:f6:0c:6e:5f:86:39:51:9f:23:7f: 5b:de:3a:e2:43:35:f8:62:a9:96:ee:e2:cd:85:a4: fa:1f:90:b9:44:f7:4a:fe:d0:91:7f:a0:ca:31:37: 32:e8:7f:c0:f4:96:f9:03:19:ac:3f:0b:a2:8c:00: e8:ca:29:e3:e7:9d:d3:c7:de:38:d6:0d:5e:68:ef: b1:64:b4:b7:35:cc:64:50:79:06:15:7d:a3:6e:0f: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.128.0/22 IPv6: 2a05:280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49354 Signature Algorithm: sha256WithRSAEncryption 24:2e:7e:af:3e:77:25:ca:99:8f:80:af:23:3c:0b:bc:99:9b: eb:09:25:66:03:03:55:97:5d:98:fa:9a:7c:2b:0a:48:b0:c3: 5a:07:b4:38:53:d3:17:51:f8:59:85:82:2c:7a:03:39:0b:b9: a5:3d:5a:38:12:c7:66:77:1e:29:be:75:86:0a:04:9d:3c:23: 95:41:1e:47:a5:17:cc:be:0b:19:ed:5f:81:49:ba:c4:22:6b: 72:20:a7:6a:03:0a:38:16:24:37:c0:61:00:03:a6:e3:27:8e: dc:79:70:6a:d4:7e:3c:18:88:ab:9d:f4:ed:a5:52:66:7e:0a: 9d:97:c5:00:96:a0:14:52:9d:4d:c9:44:8e:8a:18:ec:be:9f: b2:06:50:e9:39:d3:35:ee:06:e9:66:48:d2:23:94:19:c9:be: 5a:c4:c5:e0:0b:19:68:1e:e8:7d:0f:2c:95:fc:ff:80:4c:a1: 18:6c:83:1e:55:76:23:ee:29:c0:5e:e7:33:75:a8:d2:ab:eb: 38:a2:c2:f4:f8:78:8f:7a:cb:64:a3:38:01:42:c3:1d:3b:bd: 19:a2:45:3a:85:00:8a:87:24:a6:a6:0e:1d:84:de:d9:6e:0e: 82:da:ff:56:e8:dc:d3:e8:7f:37:80:5d:ff:0c:24:b0:21:ac: 6b:ec:57:59 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xqyKlaOAP2zX3HPmYJzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWZiOWU2ZDc1NjZkZmVmOWQ1Y2I5OGQ5MjljYjcwMzIzZDM4OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhHe6V1uSOHHBsMu19f/nkRCZAIN rq1BCqs5a//3BZ9jvXFtkLlugbZSp2Hg4je0nioaPNWN5AWsJ10gw1rm+e/Kg1VA 1lC1fRvWt25Je5qnuurzx3YqurMHI4vxVJ0ieq/ZpTcYAn4Svv2vjUNpEDFOzyRl Tmix69NW8r777iAB02jXDUrzViOvlof5eOU64okQGGi1fnZXhCzRGGTC6D5s9pTf XiWXRvYMbl+GOVGfI39b3jriQzX4YqmW7uLNhaT6H5C5RPdK/tCRf6DKMTcy6H/A 9Jb5AxmsPwuijADoyinj553Tx9441g1eaO+xZLS3NcxkUHkGFX2jbg+mAQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFC77nm11Zt/vnVy5jZKctwMj04nyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzFmYzYy Ny1hMzczLTQ3NGQtYmM3ZS1lMmQ4NDY4NDk0ODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMWZjNjI3 LWEzNzMtNDc0ZC1iYzdlLWUyZDg0Njg0OTQ4Mi8xL0x2dWViWFZtMy0tZFhMbU5r cHkzQXlQVGlmSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCJRKAMA0EAgACMAcDBQMqBQKAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDAyjANBgkqhkiG9w0BAQsFAAOCAQEAJC5+rz53JcqZ j4CvIzwLvJmb6wklZgMDVZddmPqafCsKSLDDWge0OFPTF1H4WYWCLHoDOQu5pT1a OBLHZnceKb51hgoEnTwjlUEeR6UXzL4LGe1fgUm6xCJrciCnagMKOBYkN8BhAAOm 4yeO3HlwatR+PBiIq5307aVSZn4KnZfFAJagFFKdTclEjooY7L6fsgZQ6TnTNe4G 6WZI0iOUGcm+WsTF4AsZaB7ofQ8slfz/gEyhGGyDHlV2I+4pwF7nM3Wo0qvrOKLC 9Ph4j3rLZKM4AULDHTu9GaJFOoUAiockpqYOHYTe2W4Ogtr/Vujc0+h/N4Bd/wwk sCGsa+xXWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:02 2026 by rpki-client