This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer File: LMJf8ykY8LSTBiWdSDr7njgaORU.cer (raw, json) Hash identifier: by6FuK7WR6rMLCkByq9M0khm8ZonBTomHPIVwy0aUEE= Subject key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F69804B84CD6F6E2B0ED32A3D1AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.158.172.0/22 IP: 2a03:b060::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:98:04:b8:4c:d6:f6:e2:b0:ed:32:a3:d1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cc25ff32918f0b49306259d483afb9e381a3915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:a8:66:71:16:2d:5b:2a:1f:5a:df:e0:b5: 83:fe:64:ff:16:ba:62:d3:83:86:5a:91:ca:9d:54: f7:67:2f:d5:0c:0c:ef:a2:4e:53:df:64:97:b1:aa: f7:32:c7:40:5e:39:ec:1a:4c:dc:7b:bf:cc:c4:bb: 90:55:85:40:3c:83:4a:e6:fe:28:1a:9f:6a:be:6c: 01:f8:7b:32:09:a1:02:30:38:a7:32:c3:d0:04:a1: 38:1c:8a:ff:e2:3f:64:62:9d:1f:42:7c:88:66:27: 6d:0f:30:82:3e:10:fe:3a:c6:3d:da:71:16:3d:73: cb:4f:7f:49:5e:c2:e6:5d:6b:fa:52:65:ea:b3:40: 6d:38:c0:4f:80:66:a0:a6:71:33:ea:b0:24:a0:92: 9e:c4:2c:ef:3a:96:99:81:a3:6d:97:a2:ad:88:9f: 8a:fa:5d:13:9c:ca:f6:52:07:e3:70:f5:a3:01:11: 6d:97:58:d8:25:09:fa:5e:e8:5e:93:18:bf:e3:9d: 26:e2:9d:8b:a0:c9:14:cc:81:fd:73:b6:87:e9:90: 17:ba:1d:82:6f:f0:6a:ff:c4:a2:7e:da:50:57:bf: cd:a8:1e:30:96:c1:e1:b2:1f:a3:f5:c2:d8:a0:e6: dc:2e:70:14:78:99:99:ea:26:61:15:83:21:f6:87: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.172.0/22 IPv6: 2a03:b060::/29 Signature Algorithm: sha256WithRSAEncryption 87:08:9d:a1:57:a1:ca:f0:01:40:d9:a2:b0:7b:d1:cd:b6:a1: 7a:c3:b6:63:4f:89:6f:b7:d2:40:30:82:14:c6:7d:2b:d2:75: 96:74:99:ec:5c:17:a2:94:36:a5:d3:a1:67:eb:1c:12:a4:3d: ff:20:6e:9d:7c:da:c8:d0:a9:d3:35:55:20:95:02:33:c9:57: 13:4b:60:00:15:8d:ec:bf:bb:8a:d4:6e:4f:22:89:1c:a2:0f: 7f:6a:46:26:27:d9:d6:22:e6:88:0e:ed:09:3a:f7:31:3e:c9: 6e:51:69:d9:36:15:2d:82:05:60:15:93:cf:67:fd:5d:0c:9b: 03:90:d5:ad:c1:91:d0:45:09:8c:f1:59:8e:95:01:83:5e:b3: 59:f2:82:ef:53:11:b3:02:39:e6:01:2f:8a:6a:d0:e1:44:47: a8:f4:2c:42:fc:3b:86:1a:84:93:f9:8a:f8:86:a8:e4:a7:36: 7a:8c:c0:02:7d:3f:5d:39:2d:8f:7c:71:bb:01:40:25:ba:7c: d9:b6:bd:aa:ef:ab:5f:37:d1:3b:dc:2b:4f:87:5f:97:8b:9a: a2:37:91:44:c1:ca:98:2c:f5:12:a0:35:23:69:9c:24:4a:2d: 97:8e:c7:4b:9f:ec:c8:92:33:04:c7:54:3a:16:bc:e9:6e:1c: 17:12:4c:4b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NPaYBLhM1vbisO0yo9GqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2MyNWZmMzI5MThmMGI0OTMwNjI1OWQ0ODNhZmI5ZTM4MWEzOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJOoZnEWLVsqH1rf4LWD/mT/Frpi 04OGWpHKnVT3Zy/VDAzvok5T32SXsar3MsdAXjnsGkzce7/MxLuQVYVAPINK5v4o Gp9qvmwB+HsyCaECMDinMsPQBKE4HIr/4j9kYp0fQnyIZidtDzCCPhD+OsY92nEW PXPLT39JXsLmXWv6UmXqs0BtOMBPgGagpnEz6rAkoJKexCzvOpaZgaNtl6KtiJ+K +l0TnMr2UgfjcPWjARFtl1jYJQn6Xuhekxi/450m4p2LoMkUzIH9c7aH6ZAXuh2C b/Bq/8SiftpQV7/NqB4wlsHhsh+j9cLYoObcLnAUeJmZ6iZhFYMh9ofxKwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFCzCX/MpGPC0kwYlnUg6+544GjkVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzEyNzdl Yy0xNTZhLTQ2YzQtOWYwMy1lMjU3NTFiM2ZmZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvMTI3N2Vj LTE1NmEtNDZjNC05ZjAzLWUyNTc1MWIzZmZkNS8xL0xNSmY4eWtZOExTVEJpV2RT RHI3bmpnYU9SVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ6sMA0EAgACMAcDBQMqA7BgMA0GCSqGSIb3 DQEBCwUAA4IBAQCHCJ2hV6HK8AFA2aKwe9HNtqF6w7ZjT4lvt9JAMIIUxn0r0nWW dJnsXBeilDal06Fn6xwSpD3/IG6dfNrI0KnTNVUglQIzyVcTS2AAFY3sv7uK1G5P Iokcog9/akYmJ9nWIuaIDu0JOvcxPsluUWnZNhUtggVgFZPPZ/1dDJsDkNWtwZHQ RQmM8VmOlQGDXrNZ8oLvUxGzAjnmAS+KatDhREeo9CxC/DuGGoST+Yr4hqjkpzZ6 jMACfT9dOS2PfHG7AUAlunzZtr2q76tfN9E73CtPh1+Xi5qiN5FEwcqYLPUSoDUj aZwkSi2XjsdLn+zIkjMEx1Q6FrzpbhwXEkxL -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:00 2026 by rpki-client