This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer (raw, json) Hash identifier: qOFJB2bgqynlk6XLlBiUJe1KkSSZKg43FORXXreAaPI= Subject key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759326F18786F9BE51E2F5A6DC5DCC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41465 IP: 89.19.192.0 -- 89.19.206.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:32:6f:18:78:6f:9b:e5:1e:2f:5a:6d:c5:dc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96b8121d556df453456553dcb45c4143f4cdd213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:70:ac:08:89:60:e6:e7:ed:c1:99:b5:62: 4a:e6:56:f9:2c:aa:5b:9f:d9:5c:60:40:30:fe:10: 0e:1e:f4:71:38:c3:be:b7:a4:8e:c2:b9:95:54:8c: 94:35:c7:97:ca:0d:44:6e:29:7b:3b:81:13:a4:11: a0:ae:2a:0d:a9:76:67:8f:21:28:04:d3:8d:5d:22: 44:07:d4:f2:02:5b:69:93:1a:af:0e:57:a5:dc:f0: 98:fe:14:fa:1c:93:df:9d:e4:73:30:36:03:91:94: 18:2a:75:4c:24:fd:3b:fb:ed:f1:d8:c9:95:99:cb: 7a:e6:a3:29:29:80:18:8e:c5:cb:a7:28:59:33:7e: 62:1f:89:85:df:8a:35:63:9a:18:81:e0:9b:5d:54: 2f:b2:67:96:a0:24:a8:69:9c:5f:0b:f6:29:e1:4c: d4:6e:33:b4:e9:d1:23:94:59:25:04:21:38:2a:2a: 33:b4:04:0c:0c:e6:1e:8d:6e:d1:d5:11:32:9d:66: 66:0c:be:28:fb:a8:88:e4:a5:2e:1d:89:84:aa:e8: 79:59:dc:a5:30:f3:dc:e7:30:4b:57:9e:a0:23:7e: dc:4b:d1:f7:01:90:0b:d7:f9:39:44:28:b9:d7:f8: fe:67:5b:32:79:8b:43:4b:20:0b:00:5d:2b:f6:dd: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.192.0-89.19.206.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41465 Signature Algorithm: sha256WithRSAEncryption 1b:bd:79:75:c1:7f:8f:79:af:fa:da:2b:7d:65:02:25:ec:2a: 38:04:d2:73:ef:75:79:04:71:b0:11:3b:72:86:0e:08:8d:93: 1a:9f:44:8a:d1:93:25:e1:e9:95:a2:c3:1d:ec:79:ac:65:14: 73:3a:35:36:6d:d3:51:1d:56:02:5f:7f:35:43:55:64:4a:87: 96:cd:04:c0:02:fa:46:31:48:00:3c:ce:ed:d2:e7:d7:e0:97: eb:8d:cf:90:38:3e:a6:d5:05:21:56:0b:c5:b2:54:e8:d4:df: d2:94:97:93:a1:2f:b9:46:40:66:21:34:ba:26:a4:b0:56:d0: 72:c6:6f:5d:70:29:5a:50:3f:e4:72:bf:6c:d1:24:cf:c5:07: 63:80:90:ee:bc:60:24:9f:5c:6b:f9:fd:d5:d9:56:cd:99:c7: ee:42:e7:b0:9a:2b:0d:64:ab:98:ae:a4:60:5e:ce:9d:93:3a: 10:1b:5d:15:18:5a:da:df:65:6b:64:35:3d:59:b9:e0:4d:47: cf:be:53:b1:14:8a:d2:ad:4c:c0:32:1c:bb:c4:79:42:d5:2c: e1:05:12:18:65:9a:d8:37:62:26:ed:00:30:91:79:18:cd:28: ed:2a:9c:b8:04:a8:5c:e3:97:88:34:03:ea:cf:86:c8:bd:f5: e6:e5:72:e4 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt3WTJvGHhvm+UeL1ptxdzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmI4MTIxZDU1NmRmNDUzNDU2NTUzZGNiNDVjNDE0M2Y0Y2RkMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws1wrAiJYObn7cGZtWJK5lb5LKpb n9lcYEAw/hAOHvRxOMO+t6SOwrmVVIyUNceXyg1Ebil7O4ETpBGgrioNqXZnjyEo BNONXSJEB9TyAltpkxqvDlel3PCY/hT6HJPfneRzMDYDkZQYKnVMJP07++3x2MmV mct65qMpKYAYjsXLpyhZM35iH4mF34o1Y5oYgeCbXVQvsmeWoCSoaZxfC/Yp4UzU bjO06dEjlFklBCE4KioztAQMDOYejW7R1REynWZmDL4o+6iI5KUuHYmEquh5Wdyl MPPc5zBLV56gI37cS9H3AZAL1/k5RCi51/j+Z1syeYtDSyALAF0r9t1vqQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFJa4Eh1VbfRTRWVT3LRcQUP0zdITMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2Q2NjVl Ni1mOTVkLTQzNDctODU2NS1kNGY1MzE3YzU4MzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvZDY2NWU2 LWY5NWQtNDM0Ny04NTY1LWQ0ZjUzMTdjNTgzMC8xL2xyZ1NIVlZ0OUZORlpWUGN0 RnhCUV9UTjBoTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAZZE8ADBABZE84wGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAKH5MA0GCSqGSIb3DQEBCwUAA4IBAQAbvXl1wX+Pea/62it9ZQIl 7Co4BNJz73V5BHGwETtyhg4IjZMan0SK0ZMl4emVosMd7HmsZRRzOjU2bdNRHVYC X381Q1VkSoeWzQTAAvpGMUgAPM7t0ufX4Jfrjc+QOD6m1QUhVgvFslTo1N/SlJeT oS+5RkBmITS6JqSwVtByxm9dcClaUD/kcr9s0STPxQdjgJDuvGAkn1xr+f3V2VbN mcfuQuewmisNZKuYrqRgXs6dkzoQG10VGFra32VrZDU9WbngTUfPvlOxFIrSrUzA Mhy7xHlC1SzhBRIYZZrYN2Im7QAwkXkYzSjtKpy4BKhc45eINAPqz4bIvfXm5XLk -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:47 2026 by rpki-client