This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer File: lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer (raw, json) Hash identifier: fQ2/8AewLMRY5cEnvJ/AJKQSG4kPV4fqZkImmszryTg= Subject key identifier: 95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38F9698EF4A8D99A6A7AD7B17F5606 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 64447 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f9:69:8e:f4:a8:d9:9a:6a:7a:d7:b1:7f:56:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=956e316c983804c2501ecc5abea53a2a83b57324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:38:94:e6:f3:93:a8:e7:47:17:8c:de:b9: da:d6:27:53:62:bf:de:8f:a9:32:b5:46:d2:ac:b7: 5f:b4:2e:4a:4e:21:8e:14:75:b5:d4:49:0b:d2:30: 7b:41:59:8c:e4:c1:65:03:6a:49:58:92:4d:9e:41: ad:7c:42:0e:5d:e4:92:2e:50:ed:f6:b6:34:3a:26: 48:5c:0d:6a:f0:06:fb:88:55:2d:dd:02:e4:8a:60: 08:39:f7:4e:98:ee:4a:c4:71:ee:19:92:28:76:47: f4:46:e4:d2:fd:62:ec:62:0b:ad:c0:56:f0:45:d3: 92:b5:da:29:f2:b6:fb:32:ef:23:8e:50:c6:82:56: 49:03:f6:a2:7e:93:02:29:a0:64:bb:60:d3:65:90: 62:4f:58:05:91:00:f3:05:6f:25:94:aa:73:a0:da: 62:92:72:66:72:2b:19:cf:20:c3:80:f8:2f:9e:5e: 12:3d:24:d6:a9:31:8b:9a:ca:a9:c9:4a:9e:3c:66: d3:e2:2b:81:39:21:01:e4:8c:27:8b:4b:a0:d2:6f: 9b:9d:3b:8c:19:b9:ee:63:e8:43:3b:96:bb:2a:73: ae:5e:b4:f3:c6:20:3f:be:76:35:3f:e0:05:c4:6d: 58:fd:f7:b7:ac:75:3e:e5:0d:e7:2f:5f:20:24:2a: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 64447 Signature Algorithm: sha256WithRSAEncryption 13:36:05:5b:0c:7e:24:8e:b5:e7:8c:8d:28:2b:e5:20:55:6d: 82:f0:de:a2:a1:71:79:ad:8a:8a:94:70:b7:43:78:a5:3b:02: 1b:d6:72:3e:36:62:cb:83:af:9f:99:79:35:52:c0:30:4a:e4: 71:ad:60:3c:53:0e:0f:c9:a0:30:58:65:1e:7b:90:08:90:d8: 3e:78:01:52:39:8f:67:54:6b:75:80:98:5d:c5:01:29:a7:ed: 69:bd:9d:f6:69:a9:ff:0d:c0:cf:f1:48:fe:4f:50:bc:56:e3: 83:a1:64:17:4c:e8:e9:16:d5:46:52:05:a6:32:10:ca:06:9d: e0:62:fb:cf:a8:95:88:0a:60:7f:ed:5e:02:dd:39:7c:9e:04: 3f:fb:f6:c4:3e:cf:c5:de:3f:43:d6:89:9b:89:f5:c6:0d:f6: 1f:7a:49:5c:39:21:31:a5:91:58:bc:26:f6:43:c5:c3:54:e8: 6b:05:ba:9d:ac:66:04:fd:8d:21:9d:cf:c4:df:58:80:68:e5: 0f:a5:22:06:bf:e5:a5:21:55:d8:d9:ef:a2:5e:d5:9e:63:fb: 2c:3f:a1:8b:d6:3e:43:1e:8b:f8:83:52:37:06:ad:3c:a1:8d: dd:d3:be:2b:e2:8b:e4:f1:e7:31:6a:ca:d4:1f:a5:52:e3:e2: a6:13:8e:fa -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OPlpjvSo2Zpqetexf1YGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTZlMzE2Yzk4MzgwNGMyNTAxZWNjNWFiZWE1M2EyYTgzYjU3MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf84lObzk6jnRxeM3rna1idTYr/e j6kytUbSrLdftC5KTiGOFHW11EkL0jB7QVmM5MFlA2pJWJJNnkGtfEIOXeSSLlDt 9rY0OiZIXA1q8Ab7iFUt3QLkimAIOfdOmO5KxHHuGZIodkf0RuTS/WLsYgutwFbw RdOStdop8rb7Mu8jjlDGglZJA/aifpMCKaBku2DTZZBiT1gFkQDzBW8llKpzoNpi knJmcisZzyDDgPgvnl4SPSTWqTGLmsqpyUqePGbT4iuBOSEB5Iwni0ug0m+bnTuM GbnuY+hDO5a7KnOuXrTzxiA/vnY1P+AFxG1Y/fe3rHU+5Q3nL18gJCr+0wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJVuMWyYOATCUB7MWr6lOiqDtXMkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzAyMjQw Zi1lMDgwLTRiZTktOTNjNC0zOTZmY2RhNjQ5MGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvMDIyNDBm LWUwODAtNGJlOS05M2M0LTM5NmZjZGE2NDkwYy8xL2xXNHhiSmc0Qk1KUUhzeGF2 cVU2S29PMWN5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD7vzANBgkqhkiG9w0BAQsFAAOCAQEAEzYFWwx+JI61 54yNKCvlIFVtgvDeoqFxea2KipRwt0N4pTsCG9ZyPjZiy4Ovn5l5NVLAMErkca1g PFMOD8mgMFhlHnuQCJDYPngBUjmPZ1RrdYCYXcUBKaftab2d9mmp/w3Az/FI/k9Q vFbjg6FkF0zo6RbVRlIFpjIQygad4GL7z6iViApgf+1eAt05fJ4EP/v2xD7Pxd4/ Q9aJm4n1xg32H3pJXDkhMaWRWLwm9kPFw1ToawW6naxmBP2NIZ3PxN9YgGjlD6Ui Br/lpSFV2Nnvol7VnmP7LD+hi9Y+Qx6L+INSNwatPKGN3dO+K+KL5PHnMWrK1B+l UuPiphOO+g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:00 2026 by rpki-client