This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer File: lzvsM65zjJiViBnGwTuzNe40q0w.cer (raw, json) Hash identifier: v+G0xiIXdxGLuSa9ajM47UD7TvD7UhiUJgdf38Caemo= Subject key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11685D6B27DE5D5E19997C7B224846 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209723 IP: 2.59.200.0/22 IP: 5.183.60.0/22 IP: 85.209.4.0/22 IP: 88.218.148.0/22 IP: 147.78.224.0/22 IP: 2a09:ac80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:68:5d:6b:27:de:5d:5e:19:99:7c:7b:22:48:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=973bec33ae738c98958819c6c13bb335ee34ab4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:f7:b2:4a:0a:de:98:5b:47:86:fb:4b:1f: cf:f5:04:fa:ec:59:d6:95:b5:67:1a:7a:8e:08:2a: f3:d1:b8:bb:d4:de:98:d3:29:f4:3f:12:2b:78:e9: c5:92:b0:6a:d7:01:1a:0e:20:77:c1:c4:31:28:a7: f4:05:2b:49:86:71:63:b3:0c:f6:f6:1c:c6:ab:23: 81:09:50:f3:94:11:c6:99:a9:ee:b9:6b:e5:16:7c: 10:1f:07:80:ec:89:86:40:c1:c6:f3:6e:9c:1d:3a: 60:6f:cc:6d:e3:70:b7:22:9d:ec:30:7a:6b:48:07: e7:4f:d3:eb:87:25:c6:18:b3:81:b6:a8:f6:b9:94: 06:ff:3d:81:79:da:de:b4:9d:c4:67:88:01:37:06: 30:93:e3:17:c1:69:d0:c0:71:5e:04:a2:51:08:7d: 15:9c:16:79:66:c3:11:73:ec:73:af:0c:9d:f2:75: 36:6a:81:15:04:a3:6f:a6:64:69:5c:da:80:4b:19: 29:86:ab:58:2a:2e:75:e9:77:53:30:30:3e:5f:5c: e0:08:1b:1d:fd:a9:93:74:4f:7c:1e:fb:f1:00:1b: 12:8b:d5:d6:93:0c:f7:b6:89:e1:78:6f:71:f8:a8: 6a:62:5d:22:0f:44:12:13:f8:d8:4a:bc:3e:17:94: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.200.0/22 5.183.60.0/22 85.209.4.0/22 88.218.148.0/22 147.78.224.0/22 IPv6: 2a09:ac80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209723 Signature Algorithm: sha256WithRSAEncryption 9d:84:b5:12:be:8a:8e:26:bf:fc:7d:34:e0:58:af:1b:fd:c4: 98:53:52:5e:35:66:d9:e4:78:88:62:49:20:06:0b:9b:ff:8f: 11:ff:74:16:e4:62:11:b7:85:d1:a6:57:70:bd:0d:e9:e7:13: f1:7e:dc:1f:2d:54:82:26:8f:51:68:96:1a:8f:43:a6:0e:e0: 57:13:3a:62:f4:28:f6:01:75:17:c7:2f:fe:ce:d8:43:cd:d2: 04:99:5b:73:ac:5a:45:d0:c9:86:92:d6:2e:3a:26:69:bd:9d: c7:78:c6:bf:e5:b1:e5:49:48:a1:bf:49:0a:f9:49:17:dd:df: 88:29:a6:13:fb:a7:b0:e5:18:1b:92:77:7e:6a:41:08:8d:5f: 59:24:17:f4:d5:e7:73:ad:53:68:e3:ec:b0:82:d4:fe:44:cb: 8e:af:8e:0b:e1:ca:3c:5d:dd:1a:07:67:a2:da:b5:de:a4:a2: e4:f1:de:f8:9c:ca:fc:3f:5f:67:b8:6e:db:68:7c:50:4b:79: 09:44:0a:12:95:07:ea:b4:cb:c4:2f:d1:76:3c:95:5a:cb:ae: 0d:3b:28:eb:cb:22:7c:c9:ff:4b:b0:c7:35:08:21:71:b8:fa: be:fa:e7:fb:32:af:5a:e6:e7:f8:f4:c6:88:29:5f:b4:7b:1b: d6:c8:44:6e -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8EWhdayfeXV4ZmXx7IkhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzNiZWMzM2FlNzM4Yzk4OTU4ODE5YzZjMTNiYjMzNWVlMzRhYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHL3skoK3phbR4b7Sx/P9QT67FnW lbVnGnqOCCrz0bi71N6Y0yn0PxIreOnFkrBq1wEaDiB3wcQxKKf0BStJhnFjswz2 9hzGqyOBCVDzlBHGmanuuWvlFnwQHweA7ImGQMHG826cHTpgb8xt43C3Ip3sMHpr SAfnT9PrhyXGGLOBtqj2uZQG/z2BedretJ3EZ4gBNwYwk+MXwWnQwHFeBKJRCH0V nBZ5ZsMRc+xzrwyd8nU2aoEVBKNvpmRpXNqASxkphqtYKi516XdTMDA+X1zgCBsd /amTdE98HvvxABsSi9XWkwz3tonheG9x+KhqYl0iD0QSE/jYSrw+F5QskQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFJc77DOuc4yYlYgZxsE7szXuNKtMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzJmNDYw NS0zNTZhLTRhZjYtYjE1ZC1jNDJmOWFiZjE0NzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMmY0NjA1 LTM1NmEtNGFmNi1iMTVkLWM0MmY5YWJmMTQ3Ny8xL2x6dnNNNjV6akppVmlCbkd3 VHV6TmU0MHEwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCAjvIAwQCBbc8AwQCVdEEAwQCWNqUAwQCk07g MA0EAgACMAcDBQMqCayAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzOzANBgkq hkiG9w0BAQsFAAOCAQEAnYS1Er6Kjia//H004FivG/3EmFNSXjVm2eR4iGJJIAYL m/+PEf90FuRiEbeF0aZXcL0N6ecT8X7cHy1UgiaPUWiWGo9Dpg7gVxM6YvQo9gF1 F8cv/s7YQ83SBJlbc6xaRdDJhpLWLjomab2dx3jGv+Wx5UlIob9JCvlJF93fiCmm E/unsOUYG5J3fmpBCI1fWSQX9NXnc61TaOPssILU/kTLjq+OC+HKPF3dGgdnotq1 3qSi5PHe+JzK/D9fZ7hu22h8UEt5CUQKEpUH6rTLxC/RdjyVWsuuDTso68sifMn/ S7DHNQghcbj6vvrn+zKvWubn+PTGiClftHsb1shEbg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:18:10 2026 by rpki-client