This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer File: lkM1Vj2bb54-KN42jYWYi8FBNx4.cer (raw, json) Hash identifier: JWszxSdiypIak3I4wRyygTV8GxVZIyDeQXUUb5d0npM= Subject key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A222031FEC9D8EB2D70DF74E9339CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206608 IP: 93.115.3.0/24 IP: 185.180.80.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:22:03:1f:ec:9d:8e:b2:d7:0d:f7:4e:93:39:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=964335563d9b6f9e3e28de368d85988bc141371e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:ff:fb:49:19:34:b1:0e:73:10:91:b0:26: 61:30:c1:2a:c5:a8:2d:f0:41:27:bc:6a:4a:b3:94: 78:9c:06:6a:ac:2b:70:c9:e6:bb:38:a9:de:3f:b1: 75:49:99:04:fc:c4:33:41:1f:b9:fc:68:0a:cf:28: 71:fa:02:11:68:d7:07:65:36:1d:9f:f5:2d:4a:da: 6c:9e:93:df:f6:56:d9:1a:bf:4e:2f:18:a1:e8:28: 0f:f0:58:b3:3e:3e:76:db:21:d5:5a:87:f9:45:02: fa:e6:86:b8:ca:b7:88:68:d1:d9:94:ad:b0:be:73: b3:99:0f:b0:d2:ea:5c:c6:45:5c:90:38:44:a8:b9: d0:5c:46:9c:be:50:a5:da:4f:eb:e3:a7:08:69:fb: ef:a7:8a:62:99:dd:4f:f4:d6:1f:6a:32:a1:c0:67: d8:14:b2:14:9b:ec:47:88:e9:c4:00:22:86:5e:8a: d5:0c:d2:b4:55:ed:4a:6a:69:0f:9d:c8:4b:17:eb: e4:4e:9a:37:3b:81:de:8b:df:29:41:fd:23:2e:13: 55:4e:e5:df:59:e7:d7:75:b8:17:6f:c5:3d:62:a7: a4:8d:66:a7:ee:8d:e9:d1:f2:79:aa:0b:9e:72:41: b4:a1:95:20:8b:3e:35:e8:a3:67:a0:c5:cb:b7:73: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.115.3.0/24 185.180.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206608 Signature Algorithm: sha256WithRSAEncryption 7e:26:a1:03:15:e1:af:58:6c:ba:60:45:14:5c:ff:09:bf:d5: 5b:e0:12:a5:f4:98:41:ca:0a:3d:59:31:e0:4c:0d:b3:6c:c9: a2:47:a4:1c:36:1f:21:95:cf:06:7c:3d:0b:51:8e:9e:c0:f2: c1:9e:88:39:c4:f4:99:e1:87:76:a7:5e:84:ba:74:3e:7e:9c: 50:ae:59:c8:a0:d7:0b:b9:ea:ec:d5:03:f1:92:9c:5e:07:cc: 0b:d1:db:b6:aa:ff:e5:1e:7b:c9:96:67:a4:f7:53:15:25:86: 53:e2:ad:34:23:9a:6b:99:65:4e:4e:50:c3:96:fe:6a:97:52: a5:39:4b:9e:8d:c5:0b:3a:1d:3d:c5:af:7e:36:2e:a2:67:67: 5c:b7:1a:8b:ab:9f:58:c4:a8:4d:a3:bd:f2:eb:6e:c5:f4:69: 6e:31:df:71:3a:42:7b:73:76:7e:fb:32:0f:25:6c:93:bb:98: ec:a5:85:91:c7:1f:01:29:78:8a:02:16:2a:63:ce:43:15:c6: 61:f8:3d:37:34:88:25:a0:a8:f0:b5:d1:36:4e:df:6f:1e:d9: 89:69:72:ef:47:55:7b:72:c0:d0:ca:4d:3a:48:6a:da:aa:07: 33:3a:ed:16:f6:9d:f1:86:be:b9:0a:6d:43:18:c0:e9:c1:9d: f3:f7:f1:0c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4oiIDH+ydjrLXDfdOkznLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjQzMzU1NjNkOWI2ZjllM2UyOGRlMzY4ZDg1OTg4YmMxNDEzNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/H/+0kZNLEOcxCRsCZhMMEqxagt 8EEnvGpKs5R4nAZqrCtwyea7OKneP7F1SZkE/MQzQR+5/GgKzyhx+gIRaNcHZTYd n/UtStpsnpPf9lbZGr9OLxih6CgP8FizPj522yHVWof5RQL65oa4yreIaNHZlK2w vnOzmQ+w0upcxkVckDhEqLnQXEacvlCl2k/r46cIafvvp4pimd1P9NYfajKhwGfY FLIUm+xHiOnEACKGXorVDNK0Ve1KamkPnchLF+vkTpo3O4Hei98pQf0jLhNVTuXf WefXdbgXb8U9YqekjWan7o3p0fJ5qgueckG0oZUgiz416KNnoMXLt3OV5wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFJZDNVY9m2+ePijeNo2FmIvBQTceMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzE4NmE5 My04ZTkzLTQ2NTItOTI4OS03ZWQ1MWNhNWFmNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMTg2YTkz LThlOTMtNDY1Mi05Mjg5LTdlZDUxY2E1YWY1MS8xL2xrTTFWajJiYjU0LUtONDJq WVdZaThGQk54NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAXXMDAwQCubRQMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMnEDANBgkqhkiG9w0BAQsFAAOCAQEAfiahAxXhr1hsumBFFFz/Cb/V W+ASpfSYQcoKPVkx4EwNs2zJokekHDYfIZXPBnw9C1GOnsDywZ6IOcT0meGHdqde hLp0Pn6cUK5ZyKDXC7nq7NUD8ZKcXgfMC9Hbtqr/5R57yZZnpPdTFSWGU+KtNCOa a5llTk5Qw5b+apdSpTlLno3FCzodPcWvfjYuomdnXLcai6ufWMSoTaO98utuxfRp bjHfcTpCe3N2fvsyDyVsk7uY7KWFkccfASl4igIWKmPOQxXGYfg9NzSIJaCo8LXR Nk7fbx7ZiWly70dVe3LA0MpNOkhq2qoHMzrtFvad8Ya+uQptQxjA6cGd8/fxDA== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:28 2026 by rpki-client