This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer File: lvLaL6G8jtLyvGtwOovxU0D5fPo.cer (raw, json) Hash identifier: Ljbf5P+uye8IjVm+3Yq8jkjoHloeLfL2DplamtAnUKY= Subject key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F09F5289B6D6673F500936B078F42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197645 IP: 91.223.212.0/24 IP: 2001:67c:2130::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:09:f5:28:9b:6d:66:73:f5:00:93:6b:07:8f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:53:b7:32:e1:10:be:b8:21:1b:12:5e:01: 99:8e:85:75:97:55:c6:ed:d7:e3:78:42:22:9d:56: e9:5f:6b:f5:bd:be:a7:a1:b7:ba:55:53:b4:57:40: a6:b0:6b:d3:6e:9b:5b:5b:2e:c5:f9:0b:44:a2:7b: 89:08:c1:36:6d:73:c1:ed:80:55:33:3c:92:5d:1b: 45:28:cc:72:86:0c:41:58:c7:56:d0:71:e4:d2:c6: 8c:5a:1f:36:a3:34:54:92:4d:01:5b:db:97:81:57: a3:4f:f0:33:34:17:03:6d:78:40:a7:e0:dd:f4:c4: 18:c6:6c:40:c8:68:0a:52:b6:a8:28:42:0c:f8:41: bc:fb:54:f1:55:ac:ae:76:32:fe:f4:af:8a:05:a3: 47:88:57:47:bc:28:e2:e4:12:73:3c:66:a2:9c:b8: 77:61:26:54:ad:54:1b:f8:31:1d:c5:40:30:98:a1: cf:99:f3:fc:dd:7c:fd:3a:74:a1:da:a1:9e:dd:7c: 9d:c6:f9:9e:80:bf:45:f5:8a:f3:eb:69:03:ab:f4: 75:93:26:90:cf:5a:38:fa:5a:76:23:10:e8:e1:18: e8:21:e6:e8:1e:e9:c7:9a:0f:6c:87:94:c9:02:0a: 1d:5b:dd:ae:1f:96:61:73:30:8b:e0:0c:0e:e1:34: 92:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.212.0/24 IPv6: 2001:67c:2130::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197645 Signature Algorithm: sha256WithRSAEncryption a2:96:4c:ec:14:8d:31:80:9a:c5:d0:ba:68:b2:00:2c:5a:29: d4:d3:9a:b2:e8:b1:4e:59:ee:c6:a4:01:a7:ae:14:d8:00:46: 53:3d:d2:04:5b:f6:93:ea:49:67:06:43:9f:78:35:f2:0b:6d: 4a:9b:75:c5:c9:08:c6:c8:70:dc:14:e8:76:e2:75:47:aa:df: eb:d4:04:66:95:94:45:37:73:c2:90:5a:19:f6:dd:fc:59:8a: a7:20:99:21:0e:eb:19:76:34:3f:16:d8:b3:d6:68:c5:39:b4: 98:11:09:75:4e:70:95:a4:cb:ea:87:53:96:89:16:be:3d:3f: b8:7b:b6:33:c0:53:cd:09:16:28:4c:73:e9:48:a0:fa:d6:75: ea:3c:d9:4e:31:60:c9:3d:fb:7d:b1:8b:7b:7c:88:23:16:29: fd:ed:96:a6:48:c0:86:d9:24:e5:03:e4:55:e8:55:cf:fa:c1: d1:98:4c:45:10:24:df:ab:3a:4c:a4:46:da:eb:3e:88:5a:2b: ae:42:13:8e:7e:59:b8:8f:b7:6c:ac:0b:20:5a:8e:36:7c:b7: 63:90:a3:23:5d:d2:44:f9:2b:43:58:bf:20:2a:3f:e0:28:1f: 81:95:b5:3f:4f:d5:1c:bd:69:1d:60:8a:63:28:28:d8:40:25: 83:ca:4f:d8 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt5fwn1KJttZnP1AJNrB49CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmYyZGEyZmExYmM4ZWQyZjJiYzZiNzAzYThiZjE1MzQwZjk3Y2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUBTtzLhEL64IRsSXgGZjoV1l1XG 7dfjeEIinVbpX2v1vb6nobe6VVO0V0CmsGvTbptbWy7F+QtEonuJCME2bXPB7YBV MzySXRtFKMxyhgxBWMdW0HHk0saMWh82ozRUkk0BW9uXgVejT/AzNBcDbXhAp+Dd 9MQYxmxAyGgKUraoKEIM+EG8+1TxVayudjL+9K+KBaNHiFdHvCji5BJzPGainLh3 YSZUrVQb+DEdxUAwmKHPmfP83Xz9OnSh2qGe3XydxvmegL9F9Yrz62kDq/R1kyaQ z1o4+lp2IxDo4RjoIeboHunHmg9sh5TJAgodW92uH5ZhczCL4AwO4TSSEQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFJby2i+hvI7S8rxrcDqL8VNA+Xz6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2ZjNDY5 MC0wODBmLTQwMTgtODlhMS05M2I0ZmU1MTU3ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvZmM0Njkw LTA4MGYtNDAxOC04OWExLTkzYjRmZTUxNTdlYy8xL2x2TGFMNkc4anRMeXZHdHdP b3Z4VTBENWZQby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9/UMA8EAgACMAkDBwAgAQZ8ITAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwQNMA0GCSqGSIb3DQEBCwUAA4IBAQCilkzsFI0x gJrF0LposgAsWinU05qy6LFOWe7GpAGnrhTYAEZTPdIEW/aT6klnBkOfeDXyC21K m3XFyQjGyHDcFOh24nVHqt/r1ARmlZRFN3PCkFoZ9t38WYqnIJkhDusZdjQ/Ftiz 1mjFObSYEQl1TnCVpMvqh1OWiRa+PT+4e7YzwFPNCRYoTHPpSKD61nXqPNlOMWDJ Pft9sYt7fIgjFin97ZamSMCG2STlA+RV6FXP+sHRmExFECTfqzpMpEba6z6IWiuu QhOOflm4j7dsrAsgWo42fLdjkKMjXdJE+StDWL8gKj/gKB+BlbU/T9UcvWkdYIpj KCjYQCWDyk/Y -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:07 2026 by rpki-client