This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer File: lgxteH5rXrZCSN2aehBlsQU_dFg.cer (raw, json) Hash identifier: pWKtiQ8+zPCQPQI1Tp20HlDG2y5QbYgy3OKAL15WaTU= Subject key identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A21CCC77204A853A9AD5A13D2C3421 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29641 IP: 171.33.0.0/18 IP: 193.8.96.0/20 IP: 194.56.200.0 -- 194.56.205.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1c:cc:77:20:4a:85:3a:9a:d5:a1:3d:2c:34:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:19:1d:2d:c9:6e:17:07:76:26:2b:03:ef: 0c:e2:37:36:ac:8e:d9:3b:6a:c2:30:1a:af:dd:14: e5:c1:12:58:8e:ba:9f:6b:05:0d:5a:cb:60:06:32: 12:f1:8c:e0:1d:a6:9a:73:6e:7b:dc:b0:0c:18:7c: 26:93:6a:ea:17:d2:1a:40:90:3e:32:15:04:1d:52: 04:ba:83:63:94:98:f9:2f:ca:21:a4:c5:39:94:a6: ca:6d:6b:ed:f6:f0:8a:02:a4:4d:92:08:77:99:12: 59:d2:35:f8:1f:9b:35:4a:75:39:39:a6:93:97:94: 9c:56:85:ea:de:49:e5:3d:69:9d:d8:d5:dc:2f:4b: 2e:61:b5:72:7c:5d:70:d4:b4:7c:be:4e:fe:1e:0d: 74:3b:b6:8f:8f:7a:f6:59:fe:aa:2d:45:76:c4:aa: 85:ac:65:39:b4:ad:64:80:c5:d1:be:77:7b:77:b7: e0:db:b3:e5:c5:fb:e7:96:9f:bf:1e:06:8c:34:5a: 95:91:30:6d:ed:40:05:17:b0:97:d5:af:cb:e1:65: c1:43:52:44:2d:69:cb:d8:c5:94:19:92:fa:fb:fd: b7:71:fe:5d:ba:59:65:36:61:f2:b1:91:52:c2:b0: 9c:fe:e5:fd:36:f1:5e:46:b8:37:6a:1b:ad:bb:c0: 60:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.33.0.0/18 193.8.96.0/20 194.56.200.0-194.56.205.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29641 Signature Algorithm: sha256WithRSAEncryption 8f:9f:06:7f:36:7a:6a:6f:4c:85:fb:35:68:58:3c:7e:00:21: db:8f:ac:e9:32:c5:45:ec:23:a6:cc:2d:c6:ff:c2:01:0a:e5: b7:20:4e:3b:a1:49:ae:8a:bf:03:d1:51:c9:0c:1c:32:92:c9: bc:ae:22:78:1c:e7:47:e4:68:12:79:b5:0c:f8:ce:86:99:d5: c1:9a:ed:64:86:f8:5b:18:34:8d:50:f7:74:a0:67:f5:89:84: 17:80:c6:4b:c9:02:d7:56:ed:47:ac:cb:7a:2a:db:51:7a:f2: 77:8b:63:0a:28:c3:96:f8:17:c0:a8:de:69:e0:a0:72:1f:bd: e0:59:f1:98:ed:9f:ef:ea:cd:f0:56:92:2c:0e:9f:2d:76:aa: 06:b4:5f:28:30:3d:ce:af:d4:8a:ef:ca:b9:12:e0:e5:4a:18: fe:13:17:6b:5f:32:57:41:7a:53:c8:7a:43:37:1c:51:93:cf: 9c:f8:78:2a:91:54:60:a4:4d:07:c1:d5:c4:71:40:d5:55:57: 44:16:c3:24:18:f5:50:dc:8f:f1:69:98:d3:f3:39:1e:38:a8: b8:52:9f:0e:cc:6f:13:b3:f2:46:99:8c:32:3e:03:4b:07:5e: 02:ca:eb:40:a5:f5:5d:20:97:51:a5:2d:e0:4b:e6:87:37:a0: 72:b5:35:65 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt4ohzMdyBKhTqa1aE9LDQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjBjNmQ3ODdlNmI1ZWI2NDI0OGRkOWE3YTEwNjViMTA1M2Y3NDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZwZHS3JbhcHdiYrA+8M4jc2rI7Z O2rCMBqv3RTlwRJYjrqfawUNWstgBjIS8YzgHaaac2573LAMGHwmk2rqF9IaQJA+ MhUEHVIEuoNjlJj5L8ohpMU5lKbKbWvt9vCKAqRNkgh3mRJZ0jX4H5s1SnU5OaaT l5ScVoXq3knlPWmd2NXcL0suYbVyfF1w1LR8vk7+Hg10O7aPj3r2Wf6qLUV2xKqF rGU5tK1kgMXRvnd7d7fg27Plxfvnlp+/HgaMNFqVkTBt7UAFF7CX1a/L4WXBQ1JE LWnL2MWUGZL6+/23cf5dulllNmHysZFSwrCc/uX9NvFeRrg3ahutu8BgcwIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFJYMbXh+a162QkjdmnoQZbEFP3RYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzA1YWIx Ni0yMjI4LTQ4OGUtYjE1Mi1lYjA5MjE4OTU3MTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvMDVhYjE2 LTIyMjgtNDg4ZS1iMTUyLWViMDkyMTg5NTcxNC8xL2xneHRlSDVyWHJaQ1NOMmFl aEJsc1FVX2RGZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjAgBAIAATAaAwQGqyEAAwQEwQhgMAwDBAPCOMgDBAHCOMwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICc8kwDQYJKoZIhvcNAQELBQADggEBAI+fBn82 empvTIX7NWhYPH4AIduPrOkyxUXsI6bMLcb/wgEK5bcgTjuhSa6KvwPRUckMHDKS ybyuIngc50fkaBJ5tQz4zoaZ1cGa7WSG+FsYNI1Q93SgZ/WJhBeAxkvJAtdW7Ues y3oq21F68neLYwoow5b4F8Co3mngoHIfveBZ8Zjtn+/qzfBWkiwOny12qga0Xygw Pc6v1IrvyrkS4OVKGP4TF2tfMldBelPIekM3HFGTz5z4eCqRVGCkTQfB1cRxQNVV V0QWwyQY9VDcj/FpmNPzOR44qLhSnw7MbxOz8kaZjDI+A0sHXgLK60Cl9V0gl1Gl LeBL5oc3oHK1NWU= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:38 2026 by rpki-client