This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer File: lHS1JBtjw6-9s0LMR2NMVasv-EY.cer (raw, json) Hash identifier: cjqMO153bRkUxdvdWcrY4U0b71KWy1r/IObZwA2YCgI= Subject key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF28C56ECDA24C7A5D9A779FD847BED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210320 IP: 2001:67c:d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8c:56:ec:da:24:c7:a5:d9:a7:79:fd:84:7b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:65:6e:f0:68:b7:98:b1:b3:50:d0:df:4a: 9c:87:fc:44:0f:1c:36:17:68:93:16:c2:17:d9:72: 01:18:61:26:25:f4:50:0f:42:55:61:c1:87:fe:7e: 6b:27:27:34:45:f2:e2:ca:af:14:b1:92:46:56:64: 5a:93:64:be:6b:02:18:e2:c1:ed:c4:75:9a:ff:84: 5a:0d:4c:91:4d:ab:6c:d3:2c:28:e6:d1:a5:08:8b: 25:95:9d:03:5c:77:00:b2:d3:e2:cf:fe:0b:4f:3c: fd:ac:b6:3a:5c:7a:97:3d:09:eb:e1:b7:d0:83:98: 9a:d7:52:eb:1c:f9:f6:35:5a:de:f5:89:9f:47:4b: 9c:52:68:c2:c5:7c:da:99:94:90:2f:89:e9:30:82: 5a:31:d1:a0:8c:79:db:8a:4e:d9:8b:d2:5a:ee:b0: 3d:2c:e0:db:92:05:71:e4:94:c6:7b:0f:28:ad:67: 2a:b0:62:90:81:50:39:38:fa:82:08:c1:33:32:04: 3b:90:02:b1:79:48:bf:7a:22:b6:c7:85:b6:3c:d8: 69:ab:95:60:0d:85:ce:df:3c:9d:14:95:3d:11:67: 74:ee:1b:fa:ab:9d:bd:5c:87:f6:5f:ea:39:74:99: a6:33:29:e2:60:b8:72:24:17:10:1e:25:46:4d:01: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210320 Signature Algorithm: sha256WithRSAEncryption 1e:5d:13:74:c5:d9:7f:d4:35:47:4c:a2:98:b3:42:ce:ed:4a: 7c:a1:68:ba:3b:a1:22:cd:1f:42:1a:37:17:cd:eb:d9:87:75: 00:c9:6b:1d:9b:1e:de:01:20:3c:50:c3:4d:b8:b1:39:a8:13: 15:9a:d9:29:5d:77:b0:d7:54:f2:07:4c:57:fd:0f:25:5d:e0: 64:36:5c:ac:95:2d:cd:81:b6:13:05:a6:69:16:10:8c:71:db: a5:15:9a:4c:25:64:73:82:2d:60:e6:b6:5e:1b:11:d7:48:43: fb:d0:07:1d:55:5b:a8:9c:a9:4c:99:09:3f:11:9a:b5:a3:63: 36:d6:5b:fb:ec:d1:44:ce:e2:88:f1:1a:09:95:e3:ff:66:58: 28:fe:d9:dc:1d:19:09:a6:4d:04:07:c2:21:26:56:f5:d5:45: c9:52:48:fa:8e:4b:e7:8d:47:e3:01:69:b7:b5:be:95:98:cd: c4:1f:de:29:8a:78:82:97:76:2c:70:cf:3d:c2:e9:be:4b:a0: 3b:34:1f:36:96:ad:be:99:ae:63:d9:bb:a1:0d:fd:a4:98:7e: 2d:2e:d8:ca:6d:a4:31:44:22:2c:5e:65:46:dd:cf:b4:59:42: 0f:cf:0e:45:6e:55:e8:d3:40:e1:b2:a6:5e:61:80:a0:2b:fa: ec:9e:e6:5a -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/8oxW7Nokx6XZp3n9hHvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDc0YjUyNDFiNjNjM2FmYmRiMzQyY2M0NzYzNGM1NWFiMmZmODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgdlbvBot5ixs1DQ30qch/xEDxw2 F2iTFsIX2XIBGGEmJfRQD0JVYcGH/n5rJyc0RfLiyq8UsZJGVmRak2S+awIY4sHt xHWa/4RaDUyRTats0ywo5tGlCIsllZ0DXHcAstPiz/4LTzz9rLY6XHqXPQnr4bfQ g5ia11LrHPn2NVre9YmfR0ucUmjCxXzamZSQL4npMIJaMdGgjHnbik7Zi9Ja7rA9 LODbkgVx5JTGew8orWcqsGKQgVA5OPqCCMEzMgQ7kAKxeUi/eiK2x4W2PNhpq5Vg DYXO3zydFJU9EWd07hv6q529XIf2X+o5dJmmMyniYLhyJBcQHiVGTQG5VwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJR0tSQbY8OvvbNCzEdjTFWrL/hGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzdmMDJi MC1kOWFkLTRmNWQtOWI2OS00OGY2MjFhY2I5YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvN2YwMmIw LWQ5YWQtNGY1ZC05YjY5LTQ4ZjYyMWFjYjliNy8xL2xIUzFKQnRqdzYtOXMwTE1S Mk5NVmFzdi1FWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfADUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM1kDANBgkqhkiG9w0BAQsFAAOCAQEAHl0TdMXZf9Q1R0yimLNCzu1KfKFo ujuhIs0fQho3F83r2Yd1AMlrHZse3gEgPFDDTbixOagTFZrZKV13sNdU8gdMV/0P JV3gZDZcrJUtzYG2EwWmaRYQjHHbpRWaTCVkc4ItYOa2XhsR10hD+9AHHVVbqJyp TJkJPxGataNjNtZb++zRRM7iiPEaCZXj/2ZYKP7Z3B0ZCaZNBAfCISZW9dVFyVJI +o5L541H4wFpt7W+lZjNxB/eKYp4gpd2LHDPPcLpvkugOzQfNpatvpmuY9m7oQ39 pJh+LS7Yym2kMUQiLF5lRt3PtFlCD88ORW5V6NNA4bKmXmGAoCv67J7mWg== -----END CERTIFICATE-----Generated at Sun Jan 11 14:46:30 2026 by rpki-client