This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer File: _LwbYj6YBVnjKlodtYD4pzRBdwU.cer (raw, json) Hash identifier: MN2Mzj0hatLaevRdV29Ou5FMIJYQI5km+mfL8SSQOGE= Subject key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9C3694C284617F405659E11431640 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6687 IP: 194.76.64.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:c3:69:4c:28:46:17:f4:05:65:9e:11:43:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcbc1b623e980559e32a5a1db580f8a734417705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:bd:9b:6a:d2:73:2a:b3:ef:76:46:bd:b3: 57:32:c4:3b:50:83:ef:18:08:fa:3b:af:ca:0e:cd: ff:2f:7f:96:0e:1b:52:db:84:ee:ea:11:77:ba:fa: 73:e4:15:ae:a7:79:b0:c9:b9:d8:a4:b3:03:b8:8f: f3:3e:97:a4:52:e3:8b:35:e7:6f:35:3d:a4:a6:7f: 88:97:48:76:70:df:24:bb:3d:70:e0:c8:e6:f8:ae: 4e:1d:9e:de:1f:c3:35:05:f1:e0:be:cc:c4:0a:98: 35:a2:31:46:c8:c0:3a:a9:24:00:a8:29:fc:86:2a: 56:35:d8:bf:6e:13:6a:53:2f:ea:0b:0f:92:1f:3e: 51:11:ba:4c:26:a5:89:2a:c6:50:21:2e:58:89:91: 5d:c9:62:ff:92:d8:8a:60:1c:9d:2a:1f:99:62:c2: 7f:90:38:d8:bf:99:98:3e:4d:35:61:76:39:01:83: 25:8e:4e:e8:93:9c:ca:d3:b0:4d:6c:95:c9:61:db: c5:10:87:3f:2a:a5:db:69:3a:86:b5:68:27:98:39: 49:56:17:f4:f2:a3:8a:d7:21:d1:24:ff:f9:8e:1e: 6d:22:a5:55:7b:7f:cd:53:61:6b:40:3a:88:8a:c2: 56:27:33:07:ac:59:30:c9:7a:b1:af:1a:65:30:ce: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.64.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6687 Signature Algorithm: sha256WithRSAEncryption 69:67:1d:23:43:61:9d:2a:4f:e4:3f:ef:b1:dd:79:b6:a8:d4: fa:13:de:38:06:57:e0:e4:c5:0f:40:3d:2e:3a:34:6c:4f:46: d2:70:6a:ac:61:c8:e4:43:9c:bf:d7:fd:5d:9c:b6:a1:f1:e9: f6:fc:53:7b:d9:7e:26:dd:ee:90:1a:51:e6:02:28:a4:a3:d9: 77:c7:03:d1:41:bf:7c:20:0c:25:70:e3:a4:3f:0e:1c:32:05: 86:c2:7b:40:11:76:28:19:d7:b5:1b:8b:76:e4:3a:95:eb:fb: 5b:0a:91:bc:4c:4f:ce:38:86:0f:33:47:0d:72:90:62:f8:24: 19:16:b0:cf:3e:2c:79:0f:1d:05:b9:1a:a7:21:42:35:73:fa: 74:72:50:fd:5b:ca:5b:fd:ae:a0:e9:ba:32:72:8a:11:db:7e: 7b:8e:f5:e7:e8:ce:19:5c:4d:4f:7e:36:e7:bf:79:b5:eb:34: 1b:ad:54:cb:72:a7:bd:4b:58:58:32:9a:b4:10:cc:fa:90:72: 26:69:66:98:2d:9a:c3:81:cc:f8:f1:1a:ae:a5:8a:23:ef:60: 32:b9:27:0f:0f:73:9a:d7:be:d6:e3:72:af:b7:9a:19:2f:20: 57:da:a0:6a:36:b1:fc:fb:88:a8:41:96:3f:ed:b2:48:8d:5c: 4e:32:dc:fb -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9ycNpTChGF/QFZZ4RQxZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2JjMWI2MjNlOTgwNTU5ZTMyYTVhMWRiNTgwZjhhNzM0NDE3NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZG9m2rScyqz73ZGvbNXMsQ7UIPv GAj6O6/KDs3/L3+WDhtS24Tu6hF3uvpz5BWup3mwybnYpLMDuI/zPpekUuOLNedv NT2kpn+Il0h2cN8kuz1w4Mjm+K5OHZ7eH8M1BfHgvszECpg1ojFGyMA6qSQAqCn8 hipWNdi/bhNqUy/qCw+SHz5REbpMJqWJKsZQIS5YiZFdyWL/ktiKYBydKh+ZYsJ/ kDjYv5mYPk01YXY5AYMljk7ok5zK07BNbJXJYdvFEIc/KqXbaTqGtWgnmDlJVhf0 8qOK1yHRJP/5jh5tIqVVe3/NU2FrQDqIisJWJzMHrFkwyXqxrxplMM7FNQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFPy8G2I+mAVZ4ypaHbWA+Kc0QXcFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzAzMmVh Yi1jNGM3LTRiNmQtOWQ2ZC03MWE3NTQyYTYwNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMDMyZWFi LWM0YzctNGI2ZC05ZDZkLTcxYTc1NDJhNjA2Ni8xL19Md2JZajZZQlZuaktsb2R0 WUQ0cHpSQmR3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFwkxAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AhofMA0GCSqGSIb3DQEBCwUAA4IBAQBpZx0jQ2GdKk/kP++x3Xm2qNT6E944Blfg 5MUPQD0uOjRsT0bScGqsYcjkQ5y/1/1dnLah8en2/FN72X4m3e6QGlHmAiiko9l3 xwPRQb98IAwlcOOkPw4cMgWGwntAEXYoGde1G4t25DqV6/tbCpG8TE/OOIYPM0cN cpBi+CQZFrDPPix5Dx0FuRqnIUI1c/p0clD9W8pb/a6g6boycooR2357jvXn6M4Z XE1Pfjbnv3m16zQbrVTLcqe9S1hYMpq0EMz6kHImaWaYLZrDgcz48RqupYoj72Ay uScPD3Oa177W43Kvt5oZLyBX2qBqNrH8+4ioQZY/7bJIjVxOMtz7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:07 2026 by rpki-client