This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer File: lvMFpB83TbAVgTN3CNHHnr6nlxw.cer (raw, json) Hash identifier: wMaB3WJ6ayML94Rb/dUTXNjQvaMSyHT6LLd4rDanX/c= Subject key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3634FF25F783322B3E8F1C269CC100 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5581 AS: 57340 AS: 60613 AS: 61057 AS: 200899 IP: 185.83.252.0/22 IP: 185.226.0.0/22 IP: 185.229.24.0/22 IP: 185.229.72.0/22 IP: 185.230.56.0/22 IP: 185.230.252.0/22 IP: 185.231.156.0/22 IP: 185.232.120.0/22 IP: 185.250.252.0/22 IP: 2a05:a100::/29 IP: 2a0d:5c80::/29 IP: 2a0d:5d80::/29 IP: 2a0d:5e80::/29 IP: 2a0d:5f80::/29 IP: 2a0d:6180::/29 IP: 2a0d:6780::/29 IP: 2a0f:6440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:34:ff:25:f7:83:32:2b:3e:8f:1c:26:9c:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96f305a41f374db01581337708d1c79ebea7971c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:23:7d:4e:65:ab:f3:f4:1b:f1:b7:37:19: d8:f1:61:e2:55:ef:ee:cd:d5:50:b1:dd:a9:8f:08: a2:7c:e1:10:57:36:7e:d6:05:c8:ad:35:31:84:f5: a4:64:f5:78:fd:17:bd:34:c7:2f:62:54:83:57:87: 45:08:b9:b4:bd:a7:c7:6f:93:6a:02:72:ae:6a:14: 55:36:5f:7d:c5:8e:e7:a8:59:d1:ff:2b:02:04:d9: e6:22:27:19:36:4d:9b:b2:54:2e:b1:96:54:9b:72: fc:11:1e:f6:00:de:e1:8f:99:b1:e3:a6:62:30:5f: 79:3e:ba:8d:02:19:8c:c5:3f:b7:1f:fe:42:76:f9: ba:09:a3:71:8e:c0:31:0e:2e:83:fc:d9:58:c5:64: 30:89:cf:7e:a5:92:80:db:46:80:fd:c7:bc:8d:35: a5:3a:df:ff:d3:db:48:1f:70:de:39:bf:49:0b:ec: 45:1b:b8:8a:ef:7b:06:cb:a7:0d:46:a2:d4:c5:9e: 7d:b3:a2:76:87:ef:4e:22:2b:3e:ad:fe:b9:99:f4: ae:45:ec:35:29:71:d0:a4:0a:68:c5:b5:23:46:f8: 59:d3:82:25:d8:61:33:73:37:c5:3e:fb:9b:f1:28: 95:85:8c:be:af:61:ee:7f:09:b5:04:8d:5c:77:90: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.252.0/22 185.226.0.0/22 185.229.24.0/22 185.229.72.0/22 185.230.56.0/22 185.230.252.0/22 185.231.156.0/22 185.232.120.0/22 185.250.252.0/22 IPv6: 2a05:a100::/29 2a0d:5c80::/29 2a0d:5d80::/29 2a0d:5e80::/29 2a0d:5f80::/29 2a0d:6180::/29 2a0d:6780::/29 2a0f:6440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5581 57340 60613 61057 200899 Signature Algorithm: sha256WithRSAEncryption 80:1b:12:2d:1b:5e:34:68:b4:a7:38:1e:66:49:8f:72:41:0c: 01:d0:2f:38:28:53:4f:be:87:1d:20:74:8d:8d:35:de:cf:31: 8f:b1:e9:06:fd:19:9e:b0:5f:25:89:ce:49:73:bd:58:64:28: f2:b5:85:c3:cb:32:38:56:c6:db:69:2a:36:8e:a9:98:c5:b4: 49:dd:40:1d:41:46:20:fd:88:41:86:dd:ff:6e:ff:e7:95:b8: 58:d7:8d:a9:86:aa:77:22:9e:72:93:8b:ae:cd:8f:49:ae:60: c4:9f:d0:1a:94:ad:45:82:f5:de:d7:97:bc:42:9c:9b:75:dd: 60:45:15:69:6d:f8:3e:af:9c:cf:1f:3f:dc:30:76:b4:d8:4b: 0a:c8:40:12:ba:e0:5a:69:1c:4a:57:42:e2:45:31:7e:10:75: a2:15:f8:7f:03:73:7f:97:75:23:5c:ad:ce:41:31:d2:7e:31: f0:f1:5b:38:2e:53:1d:ed:c4:40:11:ae:4b:af:f1:2e:79:27: ee:b7:71:a0:d6:f7:b9:a4:7f:88:b0:ae:8a:fa:52:47:61:00: 36:a4:0a:0b:75:b2:28:d7:7d:48:37:a6:90:3e:1b:50:1f:9a: 1c:a6:4d:2e:08:b6:6f:8f:31:fa:14:e1:e1:ff:87:56:24:26: c3:23:85:32 -----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgISAZt7NjT/JfeDMis+jxwmnMEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmYzMDVhNDFmMzc0ZGIwMTU4MTMzNzcwOGQxYzc5ZWJlYTc5NzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q0jfU5lq/P0G/G3NxnY8WHiVe/u zdVQsd2pjwiifOEQVzZ+1gXIrTUxhPWkZPV4/Re9NMcvYlSDV4dFCLm0vafHb5Nq AnKuahRVNl99xY7nqFnR/ysCBNnmIicZNk2bslQusZZUm3L8ER72AN7hj5mx46Zi MF95PrqNAhmMxT+3H/5Cdvm6CaNxjsAxDi6D/NlYxWQwic9+pZKA20aA/ce8jTWl Ot//09tIH3DeOb9JC+xFG7iK73sGy6cNRqLUxZ59s6J2h+9OIis+rf65mfSuRew1 KXHQpApoxbUjRvhZ04Il2GEzczfFPvub8SiVhYy+r2Hufwm1BI1cd5ByfQIDAQAB o4IDJTCCAyEwHQYDVR0OBBYEFJbzBaQfN02wFYEzdwjRx56+p5ccMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzMxMDhh My01YjVkLTQ4ZDItODUzYi1mMTJiNmFjNWEyYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMzEwOGEz LTViNWQtNDhkMi04NTNiLWYxMmI2YWM1YTJiMi8xL2x2TUZwQjgzVGJBVmdUTjND TkhIbnI2bmx4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGQBggrBgEF BQcBBwEB/wSBgDB+MDwEAgABMDYDBAK5U/wDBAK54gADBAK55RgDBAK55UgDBAK5 5jgDBAK55vwDBAK555wDBAK56HgDBAK5+vwwPgQCAAIwOAMFAyoFoQADBQMqDVyA AwUDKg1dgAMFAyoNXoADBQMqDV+AAwUDKg1hgAMFAyoNZ4ADBQMqD2RAMC0GCCsG AQUFBwEIAQH/BB4wHKAaMBgCAhXNAgMA3/wCAwDsxQIDAO6BAgMDEMMwDQYJKoZI hvcNAQELBQADggEBAIAbEi0bXjRotKc4HmZJj3JBDAHQLzgoU0++hx0gdI2NNd7P MY+x6Qb9GZ6wXyWJzklzvVhkKPK1hcPLMjhWxttpKjaOqZjFtEndQB1BRiD9iEGG 3f9u/+eVuFjXjamGqncinnKTi67Nj0muYMSf0BqUrUWC9d7Xl7xCnJt13WBFFWlt +D6vnM8fP9wwdrTYSwrIQBK64FppHEpXQuJFMX4QdaIV+H8Dc3+XdSNcrc5BMdJ+ MfDxWzguUx3txEARrkuv8S55J+63caDW97mkf4iwror6UkdhADakCgt1sijXfUg3 ppA+G1AfmhymTS4Itm+PMfoU4eH/h1YkJsMjhTI= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:59 2026 by rpki-client