This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer (raw, json) Hash identifier: s2xJFSLIdKQF43we5aWFuWJrbzdjG5H7OXsjhBM3icg= Subject key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED752347C34E8EC9CC34A6CD0A71C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.174.11.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:75:23:47:c3:4e:8e:c9:cc:34:a6:cd:0a:71:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:87:bd:a6:1a:1f:45:48:60:e4:6c:bc:5a: f7:7e:8b:e1:a9:4d:e9:02:9e:26:b8:9e:da:d1:d6: a0:0d:25:7c:c9:49:a6:79:c1:65:b4:ad:2f:b8:83: 74:c7:e0:3d:a6:29:ac:5a:06:b7:ff:20:71:f4:76: dd:cb:85:7d:a3:56:0e:89:1c:55:cb:33:50:7f:7c: c5:01:b9:1f:02:f2:68:fa:00:ee:83:19:c2:c6:4e: 7f:29:06:5d:fe:9a:ce:7c:e2:f2:86:88:af:2b:1a: 0d:a1:5e:07:77:a5:30:28:65:8b:8f:5d:a7:88:89: 18:61:5b:34:a5:78:c9:f6:b5:a2:a6:3e:ea:d9:d8: ba:d1:1e:16:0c:79:85:d8:ca:d7:c1:77:67:b2:1d: a6:fd:6b:d7:83:54:06:c1:89:46:f0:d4:c2:52:26: b9:5e:27:4d:6c:71:1b:53:f3:44:6a:c6:c3:d7:ea: 68:c4:be:28:b8:b9:3f:49:69:e0:63:3b:94:b7:28: 42:c8:5b:d0:87:a4:93:37:10:79:0d:4e:d5:88:fe: 3d:83:23:f0:89:75:08:3c:e2:52:7c:76:b1:64:d9: 0a:2d:a6:fc:22:16:76:36:e6:5c:4c:e2:45:3c:24: 96:4c:53:3b:00:41:16:18:22:d7:a4:69:2d:bc:7d: 5d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.174.11.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a8:3d:d7:90:9e:24:16:7a:b1:43:72:6f:76:61:48:40:47: 49:6b:b6:75:2c:34:44:5c:60:6d:b9:25:d5:72:63:4c:78:95: 35:fa:aa:bd:ed:d0:69:c6:47:d8:24:45:b1:6e:2e:67:bc:b1: 74:86:d9:63:ad:fa:62:a7:8e:a4:39:82:8d:d4:10:54:08:0a: bf:14:2b:3e:99:64:75:44:c9:4d:c5:e5:01:90:6e:e4:b9:7c: af:7a:1b:79:24:6b:b6:31:3a:65:76:bd:68:67:3f:83:8a:cd: a6:f5:5a:89:2c:67:2a:24:e7:86:6a:d7:7d:ce:b3:fb:17:2f: f6:ae:b3:01:75:15:fa:01:37:2c:36:1a:ef:21:65:bd:51:87: dc:b2:86:4e:66:63:6d:fb:e1:99:87:63:3f:ac:d5:5f:fb:6b: d5:cd:18:d0:54:7f:f3:ac:2e:01:01:47:e2:99:ad:39:b5:66: de:19:43:f4:27:79:37:32:2a:8c:88:b5:8f:f5:1e:67:71:c7: 6d:0f:bb:76:bf:a5:7c:58:e9:03:19:bc:d3:2c:65:ee:8d:7f: b3:b7:61:58:fb:fd:95:4d:49:d1:f1:69:ce:6c:e1:1a:2b:c4: 95:0d:8a:08:4a:7e:75:fa:1d:4d:e3:a1:b9:07:ec:17:99:2e: 8a:fd:3c:05 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87XUjR8NOjsnMNKbNCnHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDU4YjZiZTljNmMwMzNiM2IxMjZmMjc3ZDAyYmMwNTQ0OTlmY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkGHvaYaH0VIYORsvFr3fovhqU3p Ap4muJ7a0dagDSV8yUmmecFltK0vuIN0x+A9pimsWga3/yBx9Hbdy4V9o1YOiRxV yzNQf3zFAbkfAvJo+gDugxnCxk5/KQZd/prOfOLyhoivKxoNoV4Hd6UwKGWLj12n iIkYYVs0pXjJ9rWipj7q2di60R4WDHmF2MrXwXdnsh2m/WvXg1QGwYlG8NTCUia5 XidNbHEbU/NEasbD1+poxL4ouLk/SWngYzuUtyhCyFvQh6STNxB5DU7ViP49gyPw iXUIPOJSfHaxZNkKLab8IhZ2NuZcTOJFPCSWTFM7AEEWGCLXpGktvH1d3QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFC1Ytr6cbAM7OxJvJ30CvAVEmfz7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzM3OThk Mi0yOGYyLTRiMTgtYTE3Yy1jYjg2ZGIzNTA5MzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvMzc5OGQy LTI4ZjItNGIxOC1hMTdjLWNiODZkYjM1MDkzMS8xL0xWaTJ2cHhzQXpzN0VtOG5m UUs4QlVTWl9Qcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwq4LMA0GCSqGSIb3DQEBCwUAA4IBAQBBqD3X kJ4kFnqxQ3JvdmFIQEdJa7Z1LDREXGBtuSXVcmNMeJU1+qq97dBpxkfYJEWxbi5n vLF0htljrfpip46kOYKN1BBUCAq/FCs+mWR1RMlNxeUBkG7kuXyveht5JGu2MTpl dr1oZz+Dis2m9VqJLGcqJOeGatd9zrP7Fy/2rrMBdRX6ATcsNhrvIWW9UYfcsoZO ZmNt++GZh2M/rNVf+2vVzRjQVH/zrC4BAUfima05tWbeGUP0J3k3MiqMiLWP9R5n ccdtD7t2v6V8WOkDGbzTLGXujX+zt2FY+/2VTUnR8WnObOEaK8SVDYoISn51+h1N 46G5B+wXmS6K/TwF -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:09 2026 by rpki-client