This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer File: lsvPLpV8qNlCRyp7AEQoWybbayI.cer (raw, json) Hash identifier: K84yOusZ2Nk47HNQFnv99Fzip2Ke+qhosd5OG9TFY64= Subject key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12CFD407318699CBE2A9ED234CE705 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58256 IP: 37.143.144.0/21 IP: 91.108.128.0/19 IP: 185.42.212.0/22 IP: 185.83.28.0/22 IP: 185.83.184.0/22 IP: 2a01:5840::/32 IP: 2a03:6ae0::/32 IP: 2a03:6d60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cf:d4:07:31:86:99:cb:e2:a9:ed:23:4c:e7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:0f:4f:cb:dd:a5:ef:11:a1:3d:6c:77:1f: 02:c9:55:2e:e6:8e:de:45:6b:a7:f6:ab:17:d3:c0: e7:75:32:af:1e:b5:38:8c:70:28:07:8a:a1:19:8b: d0:57:1d:94:1b:07:89:ca:ec:59:ce:34:c4:62:bd: e7:9b:28:e5:0d:9f:e6:d7:10:3b:9c:ab:22:8e:46: 9a:f0:4c:09:48:95:50:c2:99:d1:c7:82:b1:69:30: 54:0b:1f:3d:66:a4:ea:d8:6b:d0:fb:8b:47:c5:7e: 3f:83:9e:46:b2:87:b5:dd:ae:a3:b1:be:0f:99:67: df:44:be:44:c2:3b:34:f0:21:a5:bb:25:72:2a:a9: dd:e8:d9:43:dd:e3:3b:21:ae:f4:c7:fe:7e:a1:82: 6b:c0:94:08:e2:c1:69:69:fa:fc:e4:4c:db:02:08: ef:26:ff:79:ce:33:b2:40:9f:3f:91:86:59:d5:6e: ec:63:6d:b3:d9:4f:b9:d5:e6:b2:ae:8c:3b:6c:ef: dd:7c:a9:a6:69:8f:15:e6:f1:58:d4:81:8e:22:09: b9:32:6d:7c:55:be:64:02:01:dd:18:38:7e:6a:7e: 26:ef:91:d3:55:4e:fa:1e:c0:96:82:01:1d:e0:34: a4:fe:ee:31:50:b4:ba:49:49:3c:34:6b:df:68:19: cf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.144.0/21 91.108.128.0/19 185.42.212.0/22 185.83.28.0/22 185.83.184.0/22 IPv6: 2a01:5840::/32 2a03:6ae0::/32 2a03:6d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58256 Signature Algorithm: sha256WithRSAEncryption ac:99:0b:3a:90:36:81:97:43:d2:c4:34:47:47:e5:fe:b8:71: 00:48:57:3c:33:64:6d:35:3c:87:f6:b4:68:81:0d:e0:b4:78: 36:ed:6f:be:3c:23:c8:06:92:fd:10:da:40:cb:29:f5:d2:60: ac:f8:63:eb:93:ab:15:55:fd:00:9c:be:b5:a6:22:66:c9:a7: 5b:bd:37:a9:1b:cf:ad:5a:2e:3b:41:b9:5f:e7:23:81:2c:ba: 2c:43:8c:48:f3:16:e3:17:c1:8d:a7:db:76:3e:4d:37:82:f0: e0:6c:13:92:ae:7b:45:9e:b6:ea:71:3f:d4:96:05:d4:46:43: 30:1a:da:09:30:0f:d1:cd:77:d0:9f:63:a4:44:e1:ae:1e:33: 39:3f:df:46:0a:db:77:96:17:cc:f2:b4:24:d8:99:a4:b5:27: 82:cb:39:6c:24:15:fd:3f:b7:80:3d:cd:37:d4:94:74:0b:72: a1:50:42:1b:6f:b4:14:01:16:28:07:f1:79:24:51:29:55:83: b8:2b:a0:5e:cd:19:1f:39:1e:46:a1:3b:89:54:51:d5:f1:78: 7e:2f:ed:c1:43:92:71:c9:c5:15:12:26:4a:4b:5f:71:19:b1: e8:3d:1e:fa:de:ea:31:dd:33:c3:dd:db:35:f8:8c:dd:e3:e5: c7:7c:75:cb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt8Es/UBzGGmcviqe0jTOcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmNiY2YyZTk1N2NhOGQ5NDI0NzJhN2IwMDQ0Mjg1YjI2ZGI2YjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF4PT8vdpe8RoT1sdx8CyVUu5o7e RWun9qsX08DndTKvHrU4jHAoB4qhGYvQVx2UGweJyuxZzjTEYr3nmyjlDZ/m1xA7 nKsijkaa8EwJSJVQwpnRx4KxaTBUCx89ZqTq2GvQ+4tHxX4/g55Gsoe13a6jsb4P mWffRL5Ewjs08CGluyVyKqnd6NlD3eM7Ia70x/5+oYJrwJQI4sFpafr85EzbAgjv Jv95zjOyQJ8/kYZZ1W7sY22z2U+51eayrow7bO/dfKmmaY8V5vFY1IGOIgm5Mm18 Vb5kAgHdGDh+an4m75HTVU76HsCWggEd4DSk/u4xULS6SUk8NGvfaBnPPwIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFJbLzy6VfKjZQkcqewBEKFsm22siMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzFiNjBl OS1iNmUwLTQ4OTAtOWRlMS0xM2I0MzEzNDJhYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMWI2MGU5 LWI2ZTAtNDg5MC05ZGUxLTEzYjQzMTM0MmFiOC8xL2xzdlBMcFY4cU5sQ1J5cDdB RVFvV3liYmF5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAkBAIAATAeAwQDJY+QAwQFW2yAAwQCuSrUAwQCuVMcAwQCuVO4 MBsEAgACMBUDBQAqAVhAAwUAKgNq4AMFACoDbWAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOOQMA0GCSqGSIb3DQEBCwUAA4IBAQCsmQs6kDaBl0PSxDRHR+X+uHEA SFc8M2RtNTyH9rRogQ3gtHg27W++PCPIBpL9ENpAyyn10mCs+GPrk6sVVf0AnL61 piJmyadbvTepG8+tWi47Qblf5yOBLLosQ4xI8xbjF8GNp9t2Pk03gvDgbBOSrntF nrbqcT/UlgXURkMwGtoJMA/RzXfQn2OkROGuHjM5P99GCtt3lhfM8rQk2JmktSeC yzlsJBX9P7eAPc031JR0C3KhUEIbb7QUARYoB/F5JFEpVYO4K6BezRkfOR5GoTuJ VFHV8Xh+L+3BQ5JxycUVEiZKS19xGbHoPR763uox3TPD3ds1+Izd4+XHfHXL -----END CERTIFICATE-----Generated at Tue Jan 27 01:17:45 2026 by rpki-client