This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer File: livXalysKD7OCg-OqyyXAhQB-4k.cer (raw, json) Hash identifier: cfVa82xRS97W9tbCWAepiInjsW6s3W6I290wGN97CVM= Subject key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36937EA827D297C6098B5B57C4D3A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31251 IP: 85.203.0.0/18 IP: 2a02:a10::/29 IP: 2a03:60c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:93:7e:a8:27:d2:97:c6:09:8b:5b:57:c4:d3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:9b:c1:77:a0:56:3f:dd:69:60:8e:97:e0: 17:37:b2:c1:40:23:0c:bd:07:a6:b3:ee:9b:b2:10: 7a:ef:fa:31:9e:e6:04:9f:fa:99:37:42:8b:18:59: a0:b5:ef:a5:4d:8d:38:f5:78:e8:cf:e3:82:93:cd: c5:6a:3e:42:8e:78:b1:d2:9f:fb:57:c2:3a:35:6e: 4e:14:aa:0b:06:bc:d0:6f:d7:a6:75:b9:e5:f7:8c: 09:8f:cc:f1:bd:a1:6d:b7:9e:eb:5e:73:d5:db:ee: 52:e7:7e:10:dd:c6:a3:4b:b9:b6:07:53:e5:77:bc: 62:18:2c:d1:13:5a:3e:d6:f1:f9:ac:ff:83:02:f7: 3d:85:d7:78:43:ec:c4:41:85:e2:59:80:8b:e1:d3: 11:18:e5:8f:c4:c5:65:15:cf:de:0c:07:2b:a0:93: 68:fc:b7:12:bf:e7:87:eb:55:ce:6c:d0:91:45:27: 0b:dc:e4:e2:33:06:58:17:b6:57:76:36:49:6b:bd: fb:45:1f:17:f8:31:a0:79:0b:b1:bd:f1:17:84:f4: d0:62:3e:80:95:77:d4:48:a5:54:98:94:cf:b0:ac: 56:ca:49:05:aa:ff:a6:a6:b6:c4:d1:fa:f4:93:b3: 6c:6f:63:d1:97:e0:e7:46:41:08:79:5c:16:ef:72: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.0.0/18 IPv6: 2a02:a10::/29 2a03:60c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31251 Signature Algorithm: sha256WithRSAEncryption a3:8e:60:74:0d:f3:b5:cb:6a:bf:84:c9:0d:69:12:b2:5f:74: 7c:b1:f6:b9:8e:94:c0:24:3d:35:05:b4:2b:92:4c:41:4b:84: 8e:4e:c6:fc:0c:71:5b:9b:45:70:0d:5c:85:55:ca:80:0a:82: 99:a1:76:72:ba:33:41:0c:77:1d:48:49:31:31:10:91:47:8f: c8:77:12:38:55:48:d6:9e:94:fd:ca:b5:c7:7d:4b:33:6a:dc: 3d:5a:65:ad:34:86:1d:cf:1a:3e:5e:08:b0:b6:11:d0:31:50: d5:8c:6f:79:e8:fa:fb:9b:7f:a9:3f:fa:c7:60:d7:7b:39:43: 23:e7:29:d0:bb:d9:90:6d:91:52:e6:6f:c2:a7:03:8d:d7:b0: 41:4a:9c:9f:fa:4f:03:74:ca:a8:44:62:1e:03:91:14:d5:a9: b7:3a:71:d6:7a:7b:83:67:c1:85:da:e9:63:53:de:00:09:62: 5a:2b:44:67:1e:58:39:18:9d:46:c6:e2:f7:bb:23:e2:2d:2c: e3:ac:68:0e:2a:47:1f:99:9f:5a:b7:1d:c8:89:da:b4:58:53: 25:5e:69:94:3b:e5:8d:73:27:d6:6c:41:f0:6e:07:da:e9:57: 3e:06:94:58:fc:9d:93:e2:63:b2:61:ac:10:bc:35:a8:e9:50: 8c:34:20:6b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NpN+qCfSl8YJi1tXxNOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjJiZDc2YTVjYWMyODNlY2UwYTBmOGVhYjJjOTcwMjE0MDFmYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCebwXegVj/daWCOl+AXN7LBQCMM vQems+6bshB67/oxnuYEn/qZN0KLGFmgte+lTY049Xjoz+OCk83Faj5Cjnix0p/7 V8I6NW5OFKoLBrzQb9emdbnl94wJj8zxvaFtt57rXnPV2+5S534Q3cajS7m2B1Pl d7xiGCzRE1o+1vH5rP+DAvc9hdd4Q+zEQYXiWYCL4dMRGOWPxMVlFc/eDAcroJNo /LcSv+eH61XObNCRRScL3OTiMwZYF7ZXdjZJa737RR8X+DGgeQuxvfEXhPTQYj6A lXfUSKVUmJTPsKxWykkFqv+mprbE0fr0k7Nsb2PRl+DnRkEIeVwW73Jv6wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJYr12pcrCg+zgoPjqsslwIUAfuJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzA0NjQ2 MC0xMDJjLTQ5MzAtODQyYy02YWIxMTE1NWY2ZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvMDQ2NDYw LTEwMmMtNDkzMC04NDJjLTZhYjExMTU1ZjZmYi8xL2xpdlhhbHlzS0Q3T0NnLU9x eXlYQWhRQi00ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAMBAIAATAGAwQGVcsAMBQEAgACMA4DBQMqAgoQAwUDKgNgwDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJ6EzANBgkqhkiG9w0BAQsFAAOCAQEAo45g dA3ztctqv4TJDWkSsl90fLH2uY6UwCQ9NQW0K5JMQUuEjk7G/AxxW5tFcA1chVXK gAqCmaF2crozQQx3HUhJMTEQkUePyHcSOFVI1p6U/cq1x31LM2rcPVplrTSGHc8a Pl4IsLYR0DFQ1Yxveej6+5t/qT/6x2DXezlDI+cp0LvZkG2RUuZvwqcDjdewQUqc n/pPA3TKqERiHgORFNWptzpx1np7g2fBhdrpY1PeAAliWitEZx5YORidRsbi97sj 4i0s46xoDipHH5mfWrcdyInatFhTJV5plDvljXMn1mxB8G4H2ulXPgaUWPydk+Jj smGsELw1qOlQjDQgaw== -----END CERTIFICATE-----Generated at Wed Jan 21 22:26:00 2026 by rpki-client