This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer File: lvGXfPF_5OHeLxYpPGafRNW9dDM.cer (raw, json) Hash identifier: JZSzc0vwaADb6L9Xdtc+BDGsDJpFV/K3jJ7wlNhpa1M= Subject key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B37652530B783ACBC45214D78140B23C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 16:15:34 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 58347 IP: 91.103.142.0/24 IP: 130.49.144.0/23 IP: 193.135.12.0/24 IP: 2a13:1ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:65:25:30:b7:83:ac:bc:45:21:4d:78:14:0b:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 16:15:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:35:67:f3:fb:f0:8c:46:32:56:c0:fe:7f: ed:bf:7d:1f:08:7c:b5:97:44:13:8a:45:19:51:6e: 1d:ca:36:48:4c:51:f7:5b:b4:04:17:9d:7c:97:3b: 4c:3c:df:60:0c:fb:de:83:5e:d6:da:0d:cb:9a:3d: 7b:76:29:dd:14:0d:1d:f7:ff:dd:13:d6:b2:88:a5: a8:e7:cb:97:e7:ac:2f:ea:16:98:9f:07:d3:31:88: 87:88:e2:ac:76:b3:5b:1e:a8:02:00:91:1c:25:77: 35:09:97:73:dd:68:9c:30:45:49:d5:cb:2c:44:f0: 79:cd:c4:18:33:b4:0e:3b:31:cf:df:73:6c:71:15: 9d:5c:fa:cf:de:87:0b:5c:84:1a:c0:ea:1b:fe:82: b6:77:bb:53:4c:c9:ca:b3:d7:94:80:4c:0a:95:bc: e7:cb:b2:1f:fd:09:20:cf:a7:5a:6e:84:8c:da:ac: 7d:68:4f:4c:e7:a0:9a:a9:8f:48:7d:11:72:12:3b: de:f9:47:c7:99:f7:df:46:6c:5b:e2:0d:59:f6:7f: bf:bc:89:c5:36:49:39:c8:6c:d5:1c:9b:d9:f8:85: 3a:a5:c6:10:1a:9e:6d:8c:48:e7:b5:ee:e7:dd:bd: 43:e2:bc:e8:df:13:26:9d:67:3e:f0:08:7a:0f:68: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.142.0/24 130.49.144.0/23 193.135.12.0/24 IPv6: 2a13:1ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58347 Signature Algorithm: sha256WithRSAEncryption 19:73:0e:bc:cd:8d:70:75:01:83:e2:ed:99:d5:29:91:3c:53: 1f:41:a2:65:27:96:e0:e4:1e:4d:0e:65:c9:11:4c:6f:e8:e7: 9d:f5:f6:50:59:13:59:0e:a2:e3:dd:f7:6d:3c:d5:46:b7:e1: d6:43:05:85:b3:8c:a1:1c:60:d3:52:b6:21:a6:69:06:53:ec: 7b:5b:f3:f8:13:97:e4:98:02:7e:30:b3:22:44:e5:73:c8:89: e5:cb:e0:d2:3b:2e:b2:76:14:9b:a3:c0:5c:7c:71:62:e6:cc: f6:2b:7c:50:82:45:ae:85:b7:79:f4:95:14:02:83:66:31:2e: c7:1b:55:70:c0:a4:5f:6f:cb:43:dd:39:5b:2b:8e:00:9d:35: 5c:1f:46:07:bc:25:cb:76:4f:9a:f6:0e:66:a9:f4:a6:2c:12: 62:43:17:cc:ad:73:c0:a7:3c:5d:0e:e9:7e:36:33:f5:bf:c5: d7:f9:8a:33:47:90:da:3f:b8:59:1b:ff:82:2c:0d:61:d2:4d: ff:e7:cc:c4:63:6f:b3:5f:57:de:fd:e6:b8:9b:0f:31:19:b6: 04:da:43:53:cd:7a:ae:9b:c5:2c:19:c1:3a:52:b7:44:13:83: c6:a4:42:5e:82:2b:0b:79:e3:bd:26:ea:fe:1c:1f:81:76:65: 7e:7e:3e:b6 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZs3ZSUwt4OsvEUhTXgUCyPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MTYxNTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmYxOTc3Y2YxN2ZlNGUxZGUyZjE2MjkzYzY2OWY0NGQ1YmQ3NDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtak1Z/P78IxGMlbA/n/tv30fCHy1 l0QTikUZUW4dyjZITFH3W7QEF518lztMPN9gDPveg17W2g3Lmj17dindFA0d9//d E9ayiKWo58uX56wv6haYnwfTMYiHiOKsdrNbHqgCAJEcJXc1CZdz3WicMEVJ1css RPB5zcQYM7QOOzHP33NscRWdXPrP3ocLXIQawOob/oK2d7tTTMnKs9eUgEwKlbzn y7If/Qkgz6daboSM2qx9aE9M56CaqY9IfRFyEjve+UfHmfffRmxb4g1Z9n+/vInF Nkk5yGzVHJvZ+IU6pcYQGp5tjEjnte7n3b1D4rzo3xMmnWc+8Ah6D2jZ0wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFJbxl3zxf+Th3i8WKTxmn0TVvXQzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzI0YTQ3 ZC02YTRkLTRlMTUtYTIzOC03NzQwYjNkNjkwNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMjRhNDdk LTZhNGQtNGUxNS1hMjM4LTc3NDBiM2Q2OTA1ZS8xL2x2R1hmUEZfNU9IZUx4WXBQ R2FmUk5XOWRETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW2eOAwQBgjGQAwQAwYcMMA0EAgACMAcDBQMq ExrAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDj6zANBgkqhkiG9w0BAQsFAAOC AQEAGXMOvM2NcHUBg+LtmdUpkTxTH0GiZSeW4OQeTQ5lyRFMb+jnnfX2UFkTWQ6i 4933bTzVRrfh1kMFhbOMoRxg01K2IaZpBlPse1vz+BOX5JgCfjCzIkTlc8iJ5cvg 0jsusnYUm6PAXHxxYubM9it8UIJFroW3efSVFAKDZjEuxxtVcMCkX2/LQ905WyuO AJ01XB9GB7wly3ZPmvYOZqn0piwSYkMXzK1zwKc8XQ7pfjYz9b/F1/mKM0eQ2j+4 WRv/giwNYdJN/+fMxGNvs19X3v3muJsPMRm2BNpDU816rpvFLBnBOlK3RBODxqRC XoIrC3njvSbq/hwfgXZlfn4+tg== -----END CERTIFICATE-----Generated at Fri Dec 26 12:15:43 2025 by rpki-client