This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer (raw, json) Hash identifier: VC6VakX5r3K2KW/x4j8sbz/cZoq+YqFLDE9DV+asoiM= Subject key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791102D5A40E0EB75413D3FECE1E155E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208842 IP: 91.209.4.0/24 IP: 2a12:69c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:02:d5:a4:0e:0e:b7:54:13:d3:fe:ce:1e:15:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:da:a6:0f:df:1c:f0:4b:cb:e3:e0:52:e8: 3d:9f:f8:97:fc:be:4d:9c:69:6c:c6:ef:3d:42:ce: 9b:08:93:ca:59:23:dd:06:5e:17:41:25:e7:f5:f9: 38:9b:4d:9b:ac:ac:32:8e:82:fd:0c:21:5c:cd:1c: 3a:f3:59:fc:3a:80:b1:59:44:11:aa:d4:0c:49:3e: 2b:3e:1c:e5:93:75:78:b3:21:d8:61:92:f0:a5:9d: 91:78:b9:2c:55:10:94:23:93:e6:45:bf:6e:b7:56: 30:b2:bd:c8:77:a5:9c:d4:0f:22:0e:4b:db:cf:16: b3:6f:eb:7a:41:02:2b:e9:85:1a:ac:d4:6c:44:a0: 7c:44:b7:d6:ae:2b:75:4f:37:11:a2:47:f8:43:c4: e6:12:81:5f:43:70:af:b4:4a:0a:3b:0e:04:49:9d: 41:41:21:79:57:8b:91:55:bf:55:27:c0:27:99:64: 3a:1d:6f:d0:ca:c2:6a:6f:a5:e9:25:6c:6b:a8:50: 49:71:e1:a4:3a:5d:f9:6c:ab:0c:96:53:0e:c3:6a: 09:76:b2:bb:bc:96:61:2b:ce:ae:0e:ce:3e:1f:43: 03:37:0a:c5:65:31:fd:02:a7:81:c8:fe:b2:bf:12: 91:e1:9c:4a:82:32:3d:7c:ab:58:f5:46:f8:63:19: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.4.0/24 IPv6: 2a12:69c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208842 Signature Algorithm: sha256WithRSAEncryption 65:51:54:fe:2b:8a:be:48:10:1d:1c:7e:2a:2e:28:05:c5:34: ce:96:ea:42:88:fa:32:8f:3d:c4:2f:50:3a:94:27:84:22:2a: 7d:e2:02:c4:15:96:57:ac:c0:f1:1b:ba:3d:a0:a0:ae:b1:3e: 3d:93:29:7a:c9:6a:cd:52:eb:cf:17:17:5f:46:31:3f:ed:59: 9d:a3:14:03:e4:12:52:1e:05:70:8f:35:27:02:4e:43:3e:fd: 85:8e:9d:f1:cf:e2:83:ee:f1:87:a0:d9:17:2f:37:73:7a:82: 0e:84:2a:e1:d6:de:0d:35:8a:2d:e8:f8:99:36:d5:51:8a:30: b5:69:e8:ae:a3:a6:9f:34:6a:de:44:ea:fc:3d:e5:7e:b6:5d: cd:13:83:30:07:31:7d:e2:c6:57:cc:47:32:c7:2d:58:4f:31: 66:2e:13:c9:03:3b:13:c0:83:99:01:fe:2a:b1:8f:8f:53:04: 97:eb:81:28:89:f2:f2:2b:0d:9a:5e:20:ad:e0:67:09:73:34: 4f:f4:49:02:f8:33:28:c9:cb:69:1c:2a:5c:3c:5a:db:ce:a2: 9a:0c:a6:1d:c9:a8:fa:38:02:b4:78:ae:81:65:38:d6:b0:38: 2c:b1:f9:ec:1b:58:c1:0b:cf:e3:6c:71:8c:ce:60:d7:fa:0a: 11:4c:f9:52 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EQLVpA4Ot1QT0/7OHhVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjEwMjgxNWQyN2U2NTExNzQ2ZDRhM2U5ZmQxMzU5Y2Q5ODJhODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLbapg/fHPBLy+PgUug9n/iX/L5N nGlsxu89Qs6bCJPKWSPdBl4XQSXn9fk4m02brKwyjoL9DCFczRw681n8OoCxWUQR qtQMST4rPhzlk3V4syHYYZLwpZ2ReLksVRCUI5PmRb9ut1Ywsr3Id6Wc1A8iDkvb zxazb+t6QQIr6YUarNRsRKB8RLfWrit1TzcRokf4Q8TmEoFfQ3CvtEoKOw4ESZ1B QSF5V4uRVb9VJ8AnmWQ6HW/QysJqb6XpJWxrqFBJceGkOl35bKsMllMOw2oJdrK7 vJZhK86uDs4+H0MDNwrFZTH9AqeByP6yvxKR4ZxKgjI9fKtY9Ub4YxmUdwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFC8QKBXSfmURdG1KPp/RNZzZgqhmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2EzM2Y5 YS05YmMzLTQzMGQtYmI3Yy01ZWM3OTRiMGU2OWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTMzZjlh LTliYzMtNDMwZC1iYjdjLTVlYzc5NGIwZTY5Yy8xL0x4QW9GZEotWlJGMGJVby1u OUUxbk5tQ3FHWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9EEMA0EAgACMAcDBQMqEmnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvyjANBgkqhkiG9w0BAQsFAAOCAQEAZVFU/iuKvkgQ HRx+Ki4oBcU0zpbqQoj6Mo89xC9QOpQnhCIqfeICxBWWV6zA8Ru6PaCgrrE+PZMp eslqzVLrzxcXX0YxP+1ZnaMUA+QSUh4FcI81JwJOQz79hY6d8c/ig+7xh6DZFy83 c3qCDoQq4dbeDTWKLej4mTbVUYowtWnorqOmnzRq3kTq/D3lfrZdzRODMAcxfeLG V8xHMsctWE8xZi4TyQM7E8CDmQH+KrGPj1MEl+uBKIny8isNml4greBnCXM0T/RJ AvgzKMnLaRwqXDxa286imgymHcmo+jgCtHiugWU41rA4LLH57BtYwQvP42xxjM5g 1/oKEUz5Ug== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:46 2026 by rpki-client