This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer File: lKpBiudwvajvBRax0cYzpn6R84s.cer (raw, json) Hash identifier: MaBtjG6ZewpBfrpFUzXEKONjiMi/65ZEuLEq4b6cOxE= Subject key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80763997246FA4EA4A8B5353A24BAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49248 IP: 91.212.102.0/24 IP: 2001:678:dfc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:76:39:97:24:6f:a4:ea:4a:8b:53:53:a2:4b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:db:77:65:de:62:4f:32:f2:79:71:a5:3c: 3e:4a:af:01:69:37:eb:29:a6:ee:fa:f3:57:9e:d1: 73:ee:f8:b6:f9:e8:17:3c:64:0b:17:30:03:f3:e7: 5e:79:fd:29:59:27:37:c8:ac:8e:ee:0f:f2:31:cc: ee:75:7d:05:63:9b:fd:32:dd:e1:54:90:3d:30:e3: 41:32:9f:68:4c:47:5f:15:b8:df:94:56:a0:eb:77: ae:d5:cb:82:2e:75:ca:0d:88:9d:b0:6d:18:40:4d: 69:79:07:e8:b7:3d:84:e0:81:16:38:2b:52:af:7c: a9:c7:2f:36:79:c1:7c:7f:5a:ae:7e:9e:95:4d:08: 8a:4c:58:7a:56:79:56:80:c2:1c:38:03:d3:84:b1: e3:1b:3b:39:9b:1a:cc:05:c6:02:e5:35:4d:a7:be: 85:16:e5:d4:2c:8a:f9:0b:85:f9:7a:52:d5:04:e7: 6f:45:9a:39:fc:7d:79:ab:31:12:08:3c:f7:1f:ba: 8d:bc:41:91:50:98:00:0c:f1:88:55:16:ff:01:b0: 39:d7:cc:88:cf:f2:ca:6c:9c:12:2c:5d:47:c9:a8: fd:5c:70:c5:f8:84:88:55:db:00:b2:c0:6a:35:7c: 43:8c:e0:6e:9a:59:db:86:f2:d1:1f:ba:d3:b8:be: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.102.0/24 IPv6: 2001:678:dfc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49248 Signature Algorithm: sha256WithRSAEncryption 1f:e6:a4:c2:78:5c:f8:06:f8:6f:59:10:16:c8:f4:e6:75:ff: c7:d2:bd:af:1f:c8:c4:4f:d2:df:cf:e7:e9:e2:7b:cf:87:fd: 97:49:2a:df:ee:17:75:20:d1:72:63:e4:82:06:ef:dd:2a:5f: 0c:69:c7:bd:86:0e:e9:b6:29:ed:21:36:7c:63:4d:2e:89:4c: 75:2d:f7:82:b3:f3:bf:60:f6:32:02:f6:72:c5:b0:03:af:e2: 14:bd:9a:eb:c9:64:7d:c3:66:ce:d1:23:cf:18:1a:85:7e:b5: 12:17:dc:5b:eb:10:20:69:70:bd:63:53:02:a5:b5:30:d6:0d: 02:52:1b:77:d1:59:91:0e:46:68:a3:51:f4:76:ce:a7:7c:95: ef:c3:7a:9d:f8:78:04:e1:ff:9a:71:51:b5:85:1c:36:64:f2: 67:70:e0:dd:d7:56:fb:28:2e:0c:08:5a:53:44:e3:cd:e9:e5: 4a:0a:e8:f0:e6:89:70:25:25:c4:75:8c:f5:36:14:b4:3e:e5: 10:bf:76:82:93:78:44:94:a6:d5:5c:01:01:e0:27:b2:3b:25: 6c:c5:cf:a7:bd:53:4f:b6:60:f5:30:cd:66:f5:40:5d:ba:1b: 7a:4c:2e:90:3c:28:40:82:c4:0e:d9:6c:4c:ab:55:e5:84:77: 97:6a:08:d6 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt8gHY5lyRvpOpKi1NTokuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGFhNDE4YWU3NzBiZGE4ZWYwNTE2YjFkMWM2MzNhNjdlOTFmMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww/bd2XeYk8y8nlxpTw+Sq8BaTfr Kabu+vNXntFz7vi2+egXPGQLFzAD8+deef0pWSc3yKyO7g/yMczudX0FY5v9Mt3h VJA9MONBMp9oTEdfFbjflFag63eu1cuCLnXKDYidsG0YQE1peQfotz2E4IEWOCtS r3ypxy82ecF8f1qufp6VTQiKTFh6VnlWgMIcOAPThLHjGzs5mxrMBcYC5TVNp76F FuXULIr5C4X5elLVBOdvRZo5/H15qzESCDz3H7qNvEGRUJgADPGIVRb/AbA518yI z/LKbJwSLF1Hyaj9XHDF+ISIVdsAssBqNXxDjOBumlnbhvLRH7rTuL6UHQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFJSqQYrncL2o7wUWsdHGM6Z+kfOLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzA5ZTJm Ny1lNjUwLTRmMzgtYTc0NS1jMzk2MjAwZmUwYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvMDllMmY3 LWU2NTAtNGYzOC1hNzQ1LWMzOTYyMDBmZTBiZi8xL2xLcEJpdWR3dmFqdkJSYXgw Y1l6cG42Ujg0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9RmMA8EAgACMAkDBwAgAQZ4DfwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMBgMA0GCSqGSIb3DQEBCwUAA4IBAQAf5qTCeFz4 BvhvWRAWyPTmdf/H0r2vH8jET9Lfz+fp4nvPh/2XSSrf7hd1INFyY+SCBu/dKl8M ace9hg7ptintITZ8Y00uiUx1LfeCs/O/YPYyAvZyxbADr+IUvZrryWR9w2bO0SPP GBqFfrUSF9xb6xAgaXC9Y1MCpbUw1g0CUht30VmRDkZoo1H0ds6nfJXvw3qd+HgE 4f+acVG1hRw2ZPJncODd11b7KC4MCFpTROPN6eVKCujw5olwJSXEdYz1NhS0PuUQ v3aCk3hElKbVXAEB4CeyOyVsxc+nvVNPtmD1MM1m9UBduht6TC6QPChAgsQO2WxM q1XlhHeXagjW -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:25 2026 by rpki-client