This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer File: lDBvaK6kuuEk-shfLJqj9a6FARM.cer (raw, json) Hash identifier: XCeKXdlqSRtZuqtmCfb3We5SWwZkf5LMf+Wc3dJwulU= Subject key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA93B5888F7A15FA3979EA9A27D230 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.136.254.0/23 IP: 82.146.16.0/22 IP: 185.50.4.0 -- 185.50.6.255 IP: 185.81.180.0/22 IP: 194.76.192.0/24 IP: 194.76.217.0 -- 194.76.218.255 IP: 194.76.238.0/24 IP: 195.191.231.0/24 IP: 195.211.167.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:93:b5:88:8f:7a:15:fa:39:79:ea:9a:27:d2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:48:5b:60:05:78:91:cd:d3:05:dd:7a:06: 5b:ab:54:b8:23:46:fa:7e:f9:c5:91:69:db:c9:42: a2:60:58:bc:66:ee:de:02:ba:4d:10:45:8b:90:07: 7c:5d:79:0f:d1:e0:49:82:49:06:97:28:d2:90:78: 6e:ac:33:86:0d:7e:6b:f9:9e:fe:92:fc:2c:78:3f: db:04:0a:49:15:56:69:90:86:5e:fd:cc:4e:41:c2: 2c:61:40:aa:9e:5e:6a:7a:1b:6c:16:9c:db:81:09: 22:41:36:cd:16:49:90:67:86:23:84:91:51:53:25: 55:b1:2a:d6:5f:e1:0c:12:f9:0e:ce:c4:54:8f:6c: c0:75:df:43:dc:5f:a6:24:25:bc:a7:c8:51:78:7a: c6:0e:6e:eb:74:45:02:a9:d6:40:ef:d9:5d:d5:19: 2a:d7:e8:d9:07:d8:5c:90:75:c4:3e:d3:fa:32:0f: 5e:4d:ba:11:02:1d:0e:8b:fb:65:94:a0:08:19:48: 78:87:f2:0b:a4:ff:5c:72:80:57:18:51:9e:40:b5: 80:0d:af:10:30:53:6a:32:63:42:f0:61:c6:ae:cc: 17:a9:1f:c3:e3:e6:0f:be:7f:13:f9:09:9a:d5:f8: dc:3a:fe:9a:ea:84:a3:13:b7:87:7f:2a:3e:8d:8c: 3f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.136.254.0/23 82.146.16.0/22 185.50.4.0-185.50.6.255 185.81.180.0/22 194.76.192.0/24 194.76.217.0-194.76.218.255 194.76.238.0/24 195.191.231.0/24 195.211.167.0/24 Signature Algorithm: sha256WithRSAEncryption 63:b5:19:76:9f:65:72:da:1d:7b:e3:35:da:a5:c0:ff:d2:bd: d5:63:5e:df:3b:98:8d:e0:d9:c0:7e:bb:5f:a1:d0:d9:55:77: bd:21:c3:c7:12:81:11:a5:ca:34:d5:bc:8b:c7:42:21:f9:bd: 3d:7d:99:0a:dc:30:19:91:7f:d6:0b:64:91:46:03:07:fe:9a: 06:4d:1a:e1:a9:64:cf:38:27:4e:d6:fe:5f:e6:80:fa:69:9c: f9:bd:02:39:87:f5:c1:8a:27:31:85:c8:85:8f:74:67:47:59: e2:dc:ed:95:fd:a4:a4:46:05:16:27:4d:8b:4e:61:2c:50:27: 5d:27:db:0b:d8:b6:10:08:7a:31:b0:2a:d8:6e:60:5b:f4:1f: c3:02:d0:0b:3c:cf:6c:e0:68:97:e8:ef:8a:f9:8b:67:a5:6e: cc:69:44:f7:2f:f4:ba:74:2f:23:d8:b2:da:e6:69:9f:cd:5f: 5b:3e:f8:c6:4d:1e:09:53:dd:5d:b8:04:06:2b:78:4b:4b:fc: 02:13:87:66:95:3f:3c:c0:e4:04:e4:e0:a2:7b:d3:9e:be:78: fb:04:de:77:cc:42:7f:a4:d0:9d:cf:70:2f:0f:ac:e8:f4:ec: 4b:b3:e7:97:07:7f:6c:6b:2b:34:98:41:eb:af:e2:38:42:d5: 5a:bd:3b:ef -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt9ypO1iI96Ffo5eeqaJ9IwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDMwNmY2OGFlYTRiYWUxMjRmYWM4NWYyYzlhYTNmNWFlODUwMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng9IW2AFeJHN0wXdegZbq1S4I0b6 fvnFkWnbyUKiYFi8Zu7eArpNEEWLkAd8XXkP0eBJgkkGlyjSkHhurDOGDX5r+Z7+ kvwseD/bBApJFVZpkIZe/cxOQcIsYUCqnl5qehtsFpzbgQkiQTbNFkmQZ4YjhJFR UyVVsSrWX+EMEvkOzsRUj2zAdd9D3F+mJCW8p8hReHrGDm7rdEUCqdZA79ld1Rkq 1+jZB9hckHXEPtP6Mg9eTboRAh0Oi/tllKAIGUh4h/ILpP9ccoBXGFGeQLWADa8Q MFNqMmNC8GHGrswXqR/D4+YPvn8T+Qma1fjcOv6a6oSjE7eHfyo+jYw/DwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFJQwb2iupLrhJPrIXyyao/WuhQETMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzVmZDg4 ZS1mZmI2LTQ2NTItYTk5MC0zZDhiYzg5YjQ0MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNWZkODhl LWZmYjYtNDY1Mi1hOTkwLTNkOGJjODliNDQyNy8xL2xEQnZhSzZrdXVFay1zaGZM SnFqOWE2RkFSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjBMBAIAATBGAwQBToj+AwQCUpIQMAwDBAK5MgQDBAC5MgYDBAK5 UbQDBADCTMAwDAMEAMJM2QMEAMJM2gMEAMJM7gMEAMO/5wMEAMPTpzANBgkqhkiG 9w0BAQsFAAOCAQEAY7UZdp9lctode+M12qXA/9K91WNe3zuYjeDZwH67X6HQ2VV3 vSHDxxKBEaXKNNW8i8dCIfm9PX2ZCtwwGZF/1gtkkUYDB/6aBk0a4alkzzgnTtb+ X+aA+mmc+b0COYf1wYonMYXIhY90Z0dZ4tztlf2kpEYFFidNi05hLFAnXSfbC9i2 EAh6MbAq2G5gW/QfwwLQCzzPbOBol+jvivmLZ6VuzGlE9y/0unQvI9iy2uZpn81f Wz74xk0eCVPdXbgEBit4S0v8AhOHZpU/PMDkBOTgonvTnr54+wTed8xCf6TQnc9w Lw+s6PTsS7Pnlwd/bGsrNJhB66/iOELVWr077w== -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:02 2026 by rpki-client