This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer File: lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer (raw, json) Hash identifier: Qzd/XAHAvth+3m8x0EH1UiPAynhqJR8SRFNlq/tkE6I= Subject key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCACE0761198EEE1073200F6C64E0E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199553 AS: 207996 AS: 209898 AS: 212959 AS: 213081 IP: 91.194.139.0/24 IP: 147.78.194.0/23 IP: 185.203.114.0/23 IP: 2a09:2940::/29 IP: 2a0a:e5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ce:07:61:19:8e:ee:10:73:20:0f:6c:64:e0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96bfc5a172654dd6009db1d82d92ffaf71234120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:8c:d5:f9:84:24:61:e3:80:80:ad:04:84: 76:ef:90:24:fa:8c:df:20:2d:2b:5f:96:3a:19:66: f9:9d:ae:2a:04:26:ae:ab:52:0e:04:5e:24:db:cc: 49:7a:db:6a:de:1b:49:8d:2d:fb:f5:1c:8d:a9:91: 0e:eb:71:6e:aa:38:05:2b:98:9a:51:53:5c:83:30: ca:ad:67:9b:b4:b1:55:9a:d8:e1:7d:a6:98:b0:fb: 18:90:43:25:58:67:2c:83:e2:de:6b:ae:e8:58:d2: 2a:14:05:77:a0:b7:4b:4e:54:cf:a3:20:93:46:a5: 81:d1:57:b1:49:e6:95:b0:b8:ce:e5:d3:66:c0:fb: 35:26:d7:e9:2c:14:00:58:e4:6c:a4:dd:77:f7:e5: 8d:09:d5:92:93:20:51:2e:97:f0:96:18:c0:23:25: dd:76:33:d1:18:27:fb:27:95:75:ec:cf:84:43:10: 3c:1d:fa:56:1c:51:5a:37:bf:36:cf:41:03:2e:87: 05:93:ad:f0:53:cb:fc:2b:28:1f:5f:62:e4:64:9e: b9:ca:59:3d:8f:73:c4:e3:97:9a:40:ff:3e:c8:ce: 92:5d:12:85:71:29:92:8a:21:84:59:c7:f1:ef:51: f1:68:1d:b3:95:29:a9:c8:29:a5:23:77:6a:bd:18: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.139.0/24 147.78.194.0/23 185.203.114.0/23 IPv6: 2a09:2940::/29 2a0a:e5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199553 207996 209898 212959 213081 Signature Algorithm: sha256WithRSAEncryption 7c:0d:96:e3:1a:e6:b1:2e:02:fe:b2:89:52:5e:4e:bb:16:76: fc:98:c1:90:79:16:c3:36:9d:ee:f5:be:9e:16:15:6a:3e:bc: 3e:3b:5d:04:9f:ea:02:32:82:05:6f:64:5f:b5:72:8d:60:80: cc:1a:3a:d6:3f:73:56:db:c6:d0:eb:b3:cc:60:86:68:a8:b7: e8:1d:15:ef:fa:1a:91:03:cb:2d:1c:15:de:35:fe:1f:4c:a7: f7:66:87:0e:c7:72:ba:12:31:c5:60:6c:4b:40:cb:fe:a6:15: bd:87:8f:9e:91:70:36:79:ae:54:25:97:43:87:48:62:2b:0c: 21:66:e1:2a:79:a1:7e:e8:6f:08:eb:f6:b1:f7:9d:bc:ea:9a: 19:34:41:1f:b4:6a:50:ba:10:bd:39:ee:6e:6c:1d:ef:30:ef: 04:f5:94:b6:ea:7e:96:c1:12:79:58:1c:dd:d6:f6:c0:86:b6: b1:60:a6:20:1b:22:89:03:89:6f:9d:66:b4:26:55:fa:ae:20: 78:6d:a6:9f:06:e0:3b:5e:f5:b8:56:f7:77:89:bf:85:13:9c: ab:29:a5:4f:19:95:3e:66:51:59:25:fd:2c:47:a6:c0:22:be: 55:2f:37:12:78:db:9a:b5:ae:c6:7a:44:de:f7:b1:58:da:0f: 32:0b:57:bb -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt9ys4HYRmO7hBzIA9sZODnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmJmYzVhMTcyNjU0ZGQ2MDA5ZGIxZDgyZDkyZmZhZjcxMjM0MTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkaM1fmEJGHjgICtBIR275Ak+ozf IC0rX5Y6GWb5na4qBCauq1IOBF4k28xJettq3htJjS379RyNqZEO63FuqjgFK5ia UVNcgzDKrWebtLFVmtjhfaaYsPsYkEMlWGcsg+Lea67oWNIqFAV3oLdLTlTPoyCT RqWB0VexSeaVsLjO5dNmwPs1JtfpLBQAWORspN139+WNCdWSkyBRLpfwlhjAIyXd djPRGCf7J5V17M+EQxA8HfpWHFFaN782z0EDLocFk63wU8v8KygfX2LkZJ65ylk9 j3PE45eaQP8+yM6SXRKFcSmSiiGEWcfx71HxaB2zlSmpyCmlI3dqvRhK3wIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFJa/xaFyZU3WAJ2x2C2S/69xI0EgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzM2MzBj Yi1lYmVjLTRkODYtYjEyYi1iZmZiNzU3YzMxMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvMzYzMGNi LWViZWMtNGQ4Ni1iMTJiLWJmZmI3NTdjMzEzNC8xL2xyX0ZvWEpsVGRZQW5iSFlM WkxfcjNFalFTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQAW8KLAwQBk07CAwQBuctyMBQEAgACMA4DBQMq CSlAAwUDKgrlwDAuBggrBgEFBQcBCAEB/wQfMB2gGzAZAgMDC4ECAwMsfAIDAzPq AgMDP98CAwNAWTANBgkqhkiG9w0BAQsFAAOCAQEAfA2W4xrmsS4C/rKJUl5OuxZ2 /JjBkHkWwzad7vW+nhYVaj68PjtdBJ/qAjKCBW9kX7VyjWCAzBo61j9zVtvG0Ouz zGCGaKi36B0V7/oakQPLLRwV3jX+H0yn92aHDsdyuhIxxWBsS0DL/qYVvYePnpFw NnmuVCWXQ4dIYisMIWbhKnmhfuhvCOv2sfedvOqaGTRBH7RqULoQvTnubmwd7zDv BPWUtup+lsESeVgc3db2wIa2sWCmIBsiiQOJb51mtCZV+q4geG2mnwbgO171uFb3 d4m/hROcqymlTxmVPmZRWSX9LEemwCK+VS83EnjbmrWuxnpE3vexWNoPMgtXuw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:02 2026 by rpki-client