This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer File: lKMuRFwk3tm4UhLUebiACBZevbo.cer (raw, json) Hash identifier: 5Wzth9XZI/rV2nFXQf//cGedHvCnyuKyTSkLUBbL3TA= Subject key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1587585FBCD3B0ED69C2E743DE6384 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29608 AS: 35217 IP: 37.60.152.0/21 IP: 79.143.240.0/20 IP: 178.20.64.0/21 IP: 185.101.208.0/22 IP: 185.152.24.0/22 IP: 185.170.80.0/22 IP: 185.226.48.0/22 IP: 193.30.224.0/22 IP: 193.46.252.0/24 IP: 193.47.70.0/24 IP: 193.47.75.0/24 IP: 193.47.86.0/24 IP: 193.239.192.0/23 IP: 2a01:678::/29 IP: 2a01:40c0::/29 IP: 2a07:81c0::/29 IP: 2a0f:8340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:87:58:5f:bc:d3:b0:ed:69:c2:e7:43:de:63:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94a32e445c24ded9b85212d479b88008165ebdba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:6d:e5:3d:1a:22:a5:07:1f:de:e1:ea:d8: 9c:82:5f:bb:50:62:20:8a:a2:7f:12:58:14:4b:4f: dc:04:fd:84:e5:6c:4d:4d:34:8c:9d:dd:bb:21:5c: 3c:fc:dc:d4:70:c4:fd:f8:03:7e:3b:0e:b5:6b:0f: 1c:9b:40:8b:09:be:98:69:a2:f2:f9:a9:fd:38:9f: 0a:08:6c:3e:3f:7d:8d:6d:fb:54:05:f3:d2:7e:d1: e0:73:5d:a1:47:d8:45:98:74:a7:e4:55:8e:69:43: 8f:0a:76:f5:1f:36:0b:75:7e:ac:5f:87:06:45:87: 3c:ef:52:08:d9:2e:e4:f3:db:d2:fa:a4:40:05:a8: b6:3a:15:fd:b3:7d:8a:c5:37:49:a0:35:da:7f:6e: 5e:59:01:87:1f:2f:00:40:af:66:be:7e:29:cb:37: b1:27:0d:fc:06:32:77:e0:e7:41:4e:e9:30:1a:ee: 99:2c:1d:34:e4:43:46:3b:79:ca:ab:7d:2a:d7:73: f5:f1:e2:50:95:6d:6d:d2:ea:eb:6c:42:04:98:47: c3:75:6f:c4:bf:32:84:36:fe:d6:0e:e0:45:94:81: 76:a4:e2:38:60:bb:d9:d7:67:cd:c8:35:a3:6d:d4: 1c:4a:7d:c9:25:15:12:e3:04:cf:a6:d9:d1:70:1a: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.152.0/21 79.143.240.0/20 178.20.64.0/21 185.101.208.0/22 185.152.24.0/22 185.170.80.0/22 185.226.48.0/22 193.30.224.0/22 193.46.252.0/24 193.47.70.0/24 193.47.75.0/24 193.47.86.0/24 193.239.192.0/23 IPv6: 2a01:678::/29 2a01:40c0::/29 2a07:81c0::/29 2a0f:8340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29608 35217 Signature Algorithm: sha256WithRSAEncryption 48:a9:56:ab:c2:6d:eb:5e:8f:3e:c6:c3:65:66:0f:c4:7c:c5: 1e:9c:10:9f:1e:d9:3e:50:9e:bc:ab:5b:bc:df:dc:4e:b7:d9: a7:77:ca:ce:ad:4e:a7:53:c7:71:12:a6:3a:c6:68:0d:5b:0c: e6:63:1c:28:e6:87:eb:dc:f5:c9:eb:c6:d3:00:71:82:f9:75: 36:17:53:4a:16:24:b6:25:98:c8:86:50:c2:df:2b:00:70:8c: 62:d1:3b:00:7c:64:dc:95:ea:49:b8:62:cf:7f:ad:9c:13:18: 92:87:ec:04:7b:3c:73:be:c5:a7:16:c5:31:e5:b6:4d:64:d1: 4f:c6:24:54:d6:42:11:80:c7:16:76:d7:82:ad:b3:9c:a7:b4: 6b:92:7b:90:6b:ef:d8:8d:bb:79:1f:4e:6d:07:22:e0:2e:dc: 49:6f:8c:97:94:b2:f7:05:c1:d0:49:b5:6f:20:db:36:8e:2f: 01:55:d9:40:7a:da:65:fa:7e:21:f5:17:b5:1a:bf:d5:29:36: af:52:82:62:28:5d:c6:1a:df:eb:eb:ce:f7:ce:e8:f2:e3:cb: bf:1a:5d:03:cd:c0:f3:1b:c3:26:13:8b:e9:65:1b:66:9b:f9: ba:c2:9c:8f:b4:4a:d5:e4:95:8b:46:35:2f:75:b1:fb:7f:3b: 70:dd:68:72 -----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgISAZt/FYdYX7zTsO1pwudD3mOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGEzMmU0NDVjMjRkZWQ5Yjg1MjEyZDQ3OWI4ODAwODE2NWViZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj5t5T0aIqUHH97h6ticgl+7UGIg iqJ/ElgUS0/cBP2E5WxNTTSMnd27IVw8/NzUcMT9+AN+Ow61aw8cm0CLCb6YaaLy +an9OJ8KCGw+P32NbftUBfPSftHgc12hR9hFmHSn5FWOaUOPCnb1HzYLdX6sX4cG RYc871II2S7k89vS+qRABai2OhX9s32KxTdJoDXaf25eWQGHHy8AQK9mvn4pyzex Jw38BjJ34OdBTukwGu6ZLB005ENGO3nKq30q13P18eJQlW1t0urrbEIEmEfDdW/E vzKENv7WDuBFlIF2pOI4YLvZ12fNyDWjbdQcSn3JJRUS4wTPptnRcBrOkQIDAQAB o4IDETCCAw0wHQYDVR0OBBYEFJSjLkRcJN7ZuFIS1Hm4gAgWXr26MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2Y4OTFj NC0xOWFjLTQzN2MtYjc4Mi1lMTQ4N2E1NGMxZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvZjg5MWM0 LTE5YWMtNDM3Yy1iNzgyLWUxNDg3YTU0YzFlNS8xL2xLTXVSRndrM3RtNFVoTFVl YmlBQ0JaZXZiby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGLBggrBgEF BQcBBwEB/wR8MHowVAQCAAEwTgMEAyU8mAMEBE+P8AMEA7IUQAMEArll0AMEArmY GAMEArmqUAMEArniMAMEAsEe4AMEAMEu/AMEAMEvRgMEAMEvSwMEAMEvVgMEAcHv wDAiBAIAAjAcAwUDKgEGeAMFAyoBQMADBQMqB4HAAwUDKg+DQDAeBggrBgEFBQcB CAEB/wQPMA2gCzAJAgJzqAIDAImRMA0GCSqGSIb3DQEBCwUAA4IBAQBIqVarwm3r Xo8+xsNlZg/EfMUenBCfHtk+UJ68q1u839xOt9mnd8rOrU6nU8dxEqY6xmgNWwzm Yxwo5ofr3PXJ68bTAHGC+XU2F1NKFiS2JZjIhlDC3ysAcIxi0TsAfGTclepJuGLP f62cExiSh+wEezxzvsWnFsUx5bZNZNFPxiRU1kIRgMcWdteCrbOcp7RrknuQa+/Y jbt5H05tByLgLtxJb4yXlLL3BcHQSbVvINs2ji8BVdlAetpl+n4h9Re1Gr/VKTav UoJiKF3GGt/r6873zujy48u/Gl0DzcDzG8MmE4vpZRtmm/m6wpyPtErV5JWLRjUv dbH7fztw3Why -----END CERTIFICATE-----Generated at Tue Feb 10 05:56:19 2026 by rpki-client