This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer File: lgYvXdsY-W14SSs1ONd0XMRxSiY.cer (raw, json) Hash identifier: U+vGHySdxC0h8q8Ll0vuL1YtIr99ZL+ZiEpGZCzN/f8= Subject key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B367074C95BCF7F244A11E2A1050382 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39493 IP: 5.42.64.0/19 IP: 78.25.128.0/18 IP: 217.196.108.0/22 IP: 2a13:5980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:70:74:c9:5b:cf:7f:24:4a:11:e2:a1:05:03:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1e:c6:95:f7:8b:f6:6c:43:2e:05:63:8a:cb: f9:96:20:f6:31:09:2e:35:4f:64:7b:c0:5e:b0:5b: 67:19:81:4d:9d:8f:22:cd:4d:b5:2a:c0:e7:24:cd: 0c:b8:5a:b5:da:04:34:3b:cb:bd:1a:b9:31:ba:37: b4:2f:01:72:f0:0e:27:eb:a0:b9:6d:9e:88:80:5e: 39:c0:85:c1:25:e2:a9:22:7a:c8:e7:18:0f:39:89: e2:4d:4d:4f:e5:ce:c9:5b:74:f6:6e:37:ef:d4:de: 90:5c:bb:39:f8:8c:e7:d0:8f:a3:52:44:e4:1b:22: ff:ed:73:33:11:f5:10:a0:0f:1b:07:7e:4d:22:ae: 4b:1c:b5:b6:85:f2:ae:9a:9c:15:02:ca:37:10:52: b3:6e:62:b4:20:cc:ce:5c:d8:18:24:62:9a:83:e9: d3:83:bc:d6:89:87:3e:4c:5d:b5:dd:fa:47:ea:92: 19:b1:04:73:35:ab:b4:08:bb:0a:f2:c3:8e:08:8f: 0a:13:49:50:2d:1e:c7:7c:29:74:be:5c:83:d2:e2: d1:c7:0c:76:d8:06:35:b6:83:ef:18:ab:cb:75:f0: 33:58:9d:ef:41:40:1e:10:70:37:eb:29:7f:21:bc: b2:1f:7b:75:03:0e:01:07:c6:4e:ed:48:75:5d:d4: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.64.0/19 78.25.128.0/18 217.196.108.0/22 IPv6: 2a13:5980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39493 Signature Algorithm: sha256WithRSAEncryption af:6f:71:d4:30:79:48:da:2c:da:6a:b9:ce:8c:86:7e:f8:4a: a6:c1:9a:43:94:bc:ce:ca:cd:7b:e9:c8:7d:36:2a:28:7d:27: e9:09:10:5d:7b:78:c4:d1:b9:49:52:e5:49:3e:02:ef:52:48: 10:35:f0:50:70:70:52:d0:c8:4e:a3:5a:1d:7f:35:e0:a6:d7: 6c:24:e7:a6:a2:e4:2e:77:37:02:62:d9:6c:83:c6:72:23:19: 52:46:34:66:14:ef:6d:87:15:05:c0:2c:99:8f:97:68:a3:d0: de:72:3e:32:ff:03:93:81:e0:ea:84:fd:b2:3d:d7:76:b0:ec: 2b:b8:56:a7:e9:2a:e6:05:00:23:e2:4e:65:ce:ae:bb:48:93: 17:87:c8:b1:af:91:b2:f2:cf:67:b1:c4:65:2a:11:e3:b9:44: 7a:73:05:00:4f:3f:65:27:cb:a2:4f:84:1c:34:da:09:f0:1f: 55:3b:32:6e:ee:bb:26:d3:46:b0:1e:05:d1:ee:3f:30:c6:ae: 0f:6b:65:bf:32:bf:ee:06:68:19:89:58:a5:dc:b3:77:64:76: f3:f2:c6:78:e8:29:e0:8a:0e:ee:96:b4:fb:a3:8e:be:85:57: 5f:8a:04:45:7d:1d:70:ff:8d:e4:9e:d4:8b:cd:a2:e5:0a:bd: 4d:fc:bc:91 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7NnB0yVvPfyRKEeKhBQOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjA2MmY1ZGRiMThmOTZkNzg0OTJiMzUzOGQ3NzQ1Y2M0NzE0YTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R7GlfeL9mxDLgVjisv5liD2MQku NU9ke8BesFtnGYFNnY8izU21KsDnJM0MuFq12gQ0O8u9Grkxuje0LwFy8A4n66C5 bZ6IgF45wIXBJeKpInrI5xgPOYniTU1P5c7JW3T2bjfv1N6QXLs5+Izn0I+jUkTk GyL/7XMzEfUQoA8bB35NIq5LHLW2hfKumpwVAso3EFKzbmK0IMzOXNgYJGKag+nT g7zWiYc+TF213fpH6pIZsQRzNau0CLsK8sOOCI8KE0lQLR7HfCl0vlyD0uLRxwx2 2AY1toPvGKvLdfAzWJ3vQUAeEHA36yl/IbyyH3t1Aw4BB8ZO7Uh1XdRazwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFJYGL13bGPlteEkrNTjXdFzEcUomMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2UwNTk3 NS1kYThlLTQ2MGItOWViYi0zZmNiNWYzZjNjNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZTA1OTc1 LWRhOGUtNDYwYi05ZWJiLTNmY2I1ZjNmM2M1OS8xL2xnWXZYZHNZLVcxNFNTczFP TmQwWE1SeFNpWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFBSpAAwQGThmAAwQC2cRsMA0EAgACMAcDBQMq E1mAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCaRTANBgkqhkiG9w0BAQsFAAOC AQEAr29x1DB5SNos2mq5zoyGfvhKpsGaQ5S8zsrNe+nIfTYqKH0n6QkQXXt4xNG5 SVLlST4C71JIEDXwUHBwUtDITqNaHX814KbXbCTnpqLkLnc3AmLZbIPGciMZUkY0 ZhTvbYcVBcAsmY+XaKPQ3nI+Mv8Dk4Hg6oT9sj3XdrDsK7hWp+kq5gUAI+JOZc6u u0iTF4fIsa+RsvLPZ7HEZSoR47lEenMFAE8/ZSfLok+EHDTaCfAfVTsybu67JtNG sB4F0e4/MMauD2tlvzK/7gZoGYlYpdyzd2R28/LGeOgp4IoO7pa0+6OOvoVXX4oE RX0dcP+N5J7Ui82i5Qq9Tfy8kQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:29 2026 by rpki-client