This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer (raw, json) Hash identifier: fceRLCkGQalYknCKxD9zb1dAR7rFin/KRQFdeKE5r2E= Subject key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B369754C5CC8B1A4AF0223DC90145AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41432 IP: 193.164.136.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:97:54:c5:cc:8b:1a:4a:f0:22:3d:c9:01:45:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:35:d7:f9:47:15:2f:96:2d:3e:c0:7b:d1: b6:58:e4:5a:16:72:61:6a:7c:dd:d7:22:39:e4:d3: 93:78:e5:07:fd:57:bc:1e:87:91:08:9f:51:57:17: 7f:1b:b2:08:7a:ef:e9:e6:13:32:56:46:35:18:c8: a5:c1:6d:da:d0:6e:bc:12:61:54:45:35:4b:ac:2b: 52:62:4c:31:ba:b0:4a:cc:32:9b:ab:6f:70:92:dc: ea:01:af:d9:65:97:35:f3:0d:e3:3c:2e:d6:07:60: ff:21:ac:f2:c0:e7:e0:e0:f4:6f:3b:57:ac:b5:d4: 4b:24:bb:40:c4:b5:75:4b:9b:a0:cc:31:f4:f0:70: fa:39:9c:c0:bf:8d:db:b3:c3:81:0f:59:f6:b6:ac: 88:2d:7f:5d:fb:6f:9a:21:6f:e1:dc:9d:af:f4:dc: 6e:16:39:ca:50:4c:7d:7e:94:27:50:12:67:20:07: 79:3d:98:76:21:28:c6:8a:f0:82:28:e4:1b:78:3d: 6a:40:ee:b3:3e:67:99:8a:ce:ae:81:91:bf:a0:3c: 22:c6:69:9f:3d:1c:ea:67:41:1a:1c:97:af:d8:dd: 0f:20:71:dc:db:f0:b2:a7:25:7a:7f:fe:d4:85:be: b1:c5:ab:f5:ad:16:7f:f2:29:34:b2:5f:ae:02:00: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.136.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41432 Signature Algorithm: sha256WithRSAEncryption 62:e6:a7:4a:c9:ae:e0:e6:a1:76:c8:30:11:33:60:83:c8:b2: 76:ee:b4:76:cd:0f:4e:c0:cf:22:ad:7c:38:62:53:2f:29:df: dd:bf:3e:55:c5:96:99:ff:88:38:e0:ad:21:b4:14:14:25:72: 22:b1:06:3f:dc:df:8f:ef:9f:21:88:2b:c8:a8:f8:e7:2c:a3: 93:32:5f:50:cc:38:5d:50:19:bb:66:2f:6d:c5:a5:50:f6:88: 0d:54:62:1c:6e:57:5d:ce:a8:d9:0a:86:e5:dd:7a:3f:7c:97: 73:38:64:86:8f:cb:10:ad:18:67:83:c8:a8:c0:b5:a4:39:a9: 6a:0d:ee:40:5f:d6:07:da:c4:92:45:9a:63:17:98:5d:f5:e1: da:0e:cb:e3:7d:1c:4b:ff:b0:27:8d:1d:73:1d:10:73:ee:1a: e4:4a:7e:45:bd:a9:d3:e1:9d:9c:21:f3:1b:d1:c5:30:cc:bf: 56:ed:0a:da:99:9f:7d:26:a0:6d:ff:36:ac:da:39:dc:87:92: db:bb:31:5e:2b:62:f3:16:fc:51:0c:ea:c2:f4:bd:72:83:e6: 14:b0:5d:f1:2b:e0:6e:63:78:4b:11:a7:e2:74:da:49:dc:6c: 43:f8:19:f5:11:5b:b3:2d:5a:a0:c8:6d:d0:6c:d7:e9:4f:5b: 1a:24:88:2e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NpdUxcyLGkrwIj3JAUWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjBkZDdjZGNlNTg4YmRhYTJiN2E4Y2IwNTZkNGRiMDE2NzAxNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Y11/lHFS+WLT7Ae9G2WORaFnJh anzd1yI55NOTeOUH/Ve8HoeRCJ9RVxd/G7IIeu/p5hMyVkY1GMilwW3a0G68EmFU RTVLrCtSYkwxurBKzDKbq29wktzqAa/ZZZc18w3jPC7WB2D/IazywOfg4PRvO1es tdRLJLtAxLV1S5ugzDH08HD6OZzAv43bs8OBD1n2tqyILX9d+2+aIW/h3J2v9Nxu FjnKUEx9fpQnUBJnIAd5PZh2ISjGivCCKOQbeD1qQO6zPmeZis6ugZG/oDwixmmf PRzqZ0EaHJev2N0PIHHc2/CypyV6f/7Uhb6xxav1rRZ/8ik0sl+uAgB/UQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJYN183OWIvaoreoywVtTbAWcBUyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2QzMTIz MC1jYmRjLTQyYzEtODczMi05MDJmZjE3YmM0OTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvZDMxMjMw LWNiZGMtNDJjMS04NzMyLTkwMmZmMTdiYzQ5NC8xL2xnM1h6YzVZaTlxaXQ2akxC VzFOc0Jad0ZUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwaSIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCh2DANBgkqhkiG9w0BAQsFAAOCAQEAYuanSsmu4OahdsgwETNgg8iydu60ds0P TsDPIq18OGJTLynf3b8+VcWWmf+IOOCtIbQUFCVyIrEGP9zfj++fIYgryKj45yyj kzJfUMw4XVAZu2YvbcWlUPaIDVRiHG5XXc6o2QqG5d16P3yXczhkho/LEK0YZ4PI qMC1pDmpag3uQF/WB9rEkkWaYxeYXfXh2g7L430cS/+wJ40dcx0Qc+4a5Ep+Rb2p 0+GdnCHzG9HFMMy/Vu0K2pmffSagbf82rNo53IeS27sxXiti8xb8UQzqwvS9coPm FLBd8SvgbmN4SxGn4nTaSdxsQ/gZ9RFbsy1aoMht0GzX6U9bGiSILg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:05 2026 by rpki-client