This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer File: LVI5glUpDjKGgNboyAzZGPhkF4Q.cer (raw, json) Hash identifier: D7VEgWZrDmCkkGLcdfvPrRYwTCVx8UxyJDMyL/SxjRk= Subject key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3548CCD191F0AFB57C990861A36392 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.21.72.0/22 IP: 185.95.64.0/24 IP: 2a10:b200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:48:cc:d1:91:f0:af:b5:7c:99:08:61:a3:63:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d52398255290e328680d6e8c80cd918f8641784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:f0:b4:50:c1:fd:22:ba:03:fc:f0:81:6b: 71:6a:15:53:26:67:39:3b:5c:3b:f2:da:8e:a3:71: 4b:21:69:26:24:df:59:d3:67:99:51:86:b7:0c:db: e6:3d:ff:72:44:93:6d:4a:cc:4f:4e:a8:09:be:5e: 1c:a5:68:f2:d0:14:47:5c:31:df:3f:e1:75:79:de: 99:bb:a4:fb:8c:03:03:48:2b:77:e8:2f:ca:9d:56: 49:3d:87:f4:f2:7c:0b:ec:88:06:d4:7f:05:65:c8: 1a:b2:33:db:e1:e9:cd:7a:ca:98:77:cb:f8:d3:28: 66:a8:eb:f9:a7:fe:69:50:67:6d:3c:44:1a:c5:bb: 71:94:8a:6c:51:f1:bb:36:16:58:76:4e:49:34:d7: 4a:84:2d:9e:37:ce:95:b0:da:96:97:01:a9:0d:ab: 3d:80:d5:10:4e:9f:5e:36:85:75:b6:1c:05:19:5c: a3:62:c0:4c:a3:ed:23:b7:45:27:62:ca:62:aa:6c: dd:5a:50:22:f5:52:f1:1a:0a:a1:77:d6:e8:8d:6f: 13:40:78:b3:4f:9b:c1:83:c0:42:73:93:48:90:3a: 46:8c:50:b2:b8:26:54:62:77:68:60:e0:3a:5c:f9: d9:d4:2d:98:37:2b:23:f2:4e:66:10:cc:dc:67:8a: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.72.0/22 185.95.64.0/24 IPv6: 2a10:b200::/29 Signature Algorithm: sha256WithRSAEncryption 04:7d:10:cc:1c:79:a1:c6:11:72:32:6b:56:2c:af:b7:20:15: 2d:12:84:c6:50:b6:c4:ed:fd:01:f6:d7:cb:9a:c6:24:24:e1: b2:4a:36:ce:20:1c:c9:07:4e:0f:e2:20:eb:88:6f:41:44:fb: 5e:0d:c9:aa:65:79:15:95:b1:3c:fa:7a:87:c9:4d:f4:73:6d: 1c:e0:67:47:c6:3d:cc:e5:42:92:29:77:65:60:78:6c:b2:f2: 8c:e6:6c:09:2d:df:a5:7d:95:07:5f:30:27:2d:0e:8b:b5:e7: 7a:5a:18:6a:d9:c6:25:5d:54:7e:82:7e:15:91:df:5a:83:43: d5:87:85:51:e6:ed:e2:76:b4:e3:40:3a:ba:3d:2a:2d:a7:9d: 7d:a8:53:9e:5e:d0:9c:62:e5:b0:97:88:fa:06:31:98:b6:97: 7b:8e:cb:cc:19:2f:35:0c:38:c0:60:6b:1d:56:3c:a7:95:7b: 15:ee:55:23:4f:9c:25:1c:59:a2:97:50:b9:3e:8a:8a:c4:c9: 86:a6:20:35:c3:1b:6b:b2:cb:3d:6b:40:4b:8d:ce:79:a6:94: e9:14:32:3a:26:71:2d:d3:b6:df:f8:54:4b:70:87:2c:56:5a: bd:cb:79:cb:ab:f9:96:7e:55:04:e0:f2:2e:ce:9c:0f:72:35: 93:35:3b:1e -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt7NUjM0ZHwr7V8mQhho2OSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDUyMzk4MjU1MjkwZTMyODY4MGQ2ZThjODBjZDkxOGY4NjQxNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2vwtFDB/SK6A/zwgWtxahVTJmc5 O1w78tqOo3FLIWkmJN9Z02eZUYa3DNvmPf9yRJNtSsxPTqgJvl4cpWjy0BRHXDHf P+F1ed6Zu6T7jAMDSCt36C/KnVZJPYf08nwL7IgG1H8FZcgasjPb4enNesqYd8v4 0yhmqOv5p/5pUGdtPEQaxbtxlIpsUfG7NhZYdk5JNNdKhC2eN86VsNqWlwGpDas9 gNUQTp9eNoV1thwFGVyjYsBMo+0jt0UnYspiqmzdWlAi9VLxGgqhd9bojW8TQHiz T5vBg8BCc5NIkDpGjFCyuCZUYndoYOA6XPnZ1C2YNysj8k5mEMzcZ4oK6QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFC1SOYJVKQ4yhoDW6MgM2Rj4ZBeEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2L2ZjZDNj My1mNDk1LTRkMjEtYThiMC00OTA2MWZmZmQwMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvZmNkM2Mz LWY0OTUtNGQyMS1hOGIwLTQ5MDYxZmZmZDAyYS8xL0xWSTVnbFVwRGpLR2dOYm95 QXpaR1Boa0Y0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCWRVIAwQAuV9AMA0EAgACMAcDBQMqELIAMA0G CSqGSIb3DQEBCwUAA4IBAQAEfRDMHHmhxhFyMmtWLK+3IBUtEoTGULbE7f0B9tfL msYkJOGySjbOIBzJB04P4iDriG9BRPteDcmqZXkVlbE8+nqHyU30c20c4GdHxj3M 5UKSKXdlYHhssvKM5mwJLd+lfZUHXzAnLQ6Lted6Whhq2cYlXVR+gn4Vkd9ag0PV h4VR5u3idrTjQDq6PSotp519qFOeXtCcYuWwl4j6BjGYtpd7jsvMGS81DDjAYGsd VjynlXsV7lUjT5wlHFmil1C5PoqKxMmGpiA1wxtrsss9a0BLjc55ppTpFDI6JnEt 07bf+FRLcIcsVlq9y3nLq/mWflUE4PIuzpwPcjWTNTse -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:56 2026 by rpki-client