This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer File: LYFCGstXhBVGXs3sRYHoleu_vH8.cer (raw, json) Hash identifier: GhJWNTiSwmYf0hzAYKk2OMzmH83eXlqVXiqG1UmOdc8= Subject key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD738CF4D908A86EEBAB9775F9DDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215566 IP: 109.175.218.0/24 IP: 109.175.222.0/24 IP: 109.175.241.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d7:38:cf:4d:90:8a:86:ee:ba:b9:77:5f:9d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d81421acb578415465ecdec4581e895ebbfbc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:94:82:63:e7:a6:9c:8d:d2:08:28:d2:b9: 6d:c8:7e:b8:76:2e:6c:65:7b:84:31:5c:1f:7f:d0: 62:7f:05:e8:de:b2:0a:6c:75:63:59:fd:0a:9b:ad: 47:3e:b8:de:32:29:9f:9a:c9:0e:c5:bd:61:e7:72: 1a:4f:d9:a2:7e:19:1f:e1:b0:f9:f2:9c:36:43:f9: cb:8a:c7:ee:bf:19:55:aa:e4:39:19:92:4b:e0:8c: 6f:a2:cc:6b:2c:6a:3d:0a:25:73:8a:41:57:81:2d: ad:e9:8c:fa:11:55:9a:52:26:52:ce:1a:dc:af:87: c0:eb:c8:7e:f2:ea:5b:4c:e9:d6:62:d1:32:b9:0e: 1a:f0:f6:63:ce:e4:28:c8:21:b3:94:3b:88:86:a4: 07:a5:c8:e6:c6:69:20:76:a9:1d:21:4f:bd:b2:f9: 9b:c8:44:0d:8b:f7:ba:cf:d5:74:e9:c9:5a:ca:76: 4f:53:69:e1:40:d1:a1:71:50:d0:b4:16:5f:c1:f3: 67:35:9e:3b:a3:5d:e1:9b:f1:8a:0e:04:d2:63:e2: 20:a1:2f:c6:d8:90:37:a4:51:f4:23:3d:57:b6:c8: 0a:46:c4:5d:a1:0d:1b:d3:dc:4d:81:82:db:27:0c: 7e:45:c3:bc:db:76:46:62:50:5e:ef:47:1b:6d:93: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.218.0/24 109.175.222.0/24 109.175.241.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215566 Signature Algorithm: sha256WithRSAEncryption 71:1a:b9:bd:b6:36:f8:58:f1:1e:26:27:29:8d:5b:8c:20:b3: 27:06:d8:13:82:af:ce:24:eb:75:79:b1:ae:ad:f9:7b:ac:6a: f1:4b:91:11:ef:ea:fc:bb:ed:7d:e6:c3:58:8d:de:dc:c1:c7: cf:d1:2d:1d:89:1c:47:54:cf:e7:66:41:ad:0d:89:39:6f:5c: 1b:4c:bc:de:cf:b5:63:ff:8f:ba:46:7c:de:19:05:20:52:4f: 7a:5a:b7:2b:49:28:b9:82:69:98:8f:07:20:56:1b:00:29:2d: 5c:9b:ed:57:d6:50:71:75:3e:ae:e5:a2:ca:11:04:a4:7a:c4: 45:f2:92:7e:20:c6:f6:4f:78:a7:24:d7:d2:3d:93:18:12:8a: 51:b0:4f:7c:56:c8:21:77:d4:4a:15:84:b5:e9:31:3f:5e:70: 1e:4e:80:84:2b:7c:93:4c:83:0b:29:9c:a0:71:0e:e9:be:55: e2:d7:89:22:73:cf:31:f6:55:49:d4:51:61:86:0e:0e:6d:5c: 0f:c2:b7:87:3e:cd:d7:cd:3b:b7:03:56:bb:9d:f1:02:a5:36: 3a:80:ed:20:a7:ea:7c:98:e9:b7:2b:6a:c4:1e:f1:1f:a3:cf: 66:8b:96:d0:f5:37:e3:f4:3a:cd:c5:b3:e5:5a:00:84:a0:76: 05:33:58:38 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt9ytc4z02Qiobuurl3X53fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDgxNDIxYWNiNTc4NDE1NDY1ZWNkZWM0NTgxZTg5NWViYmZiYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSeUgmPnppyN0ggo0rltyH64di5s ZXuEMVwff9BifwXo3rIKbHVjWf0Km61HPrjeMimfmskOxb1h53IaT9mifhkf4bD5 8pw2Q/nLisfuvxlVquQ5GZJL4IxvosxrLGo9CiVzikFXgS2t6Yz6EVWaUiZSzhrc r4fA68h+8upbTOnWYtEyuQ4a8PZjzuQoyCGzlDuIhqQHpcjmxmkgdqkdIU+9svmb yEQNi/e6z9V06claynZPU2nhQNGhcVDQtBZfwfNnNZ47o13hm/GKDgTSY+IgoS/G 2JA3pFH0Iz1XtsgKRsRdoQ0b09xNgYLbJwx+RcO823ZGYlBe70cbbZNirwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFC2BQhrLV4QVRl7N7EWB6JXrv7x/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzNiMWQ1 YS1mY2M2LTRhZTMtYTJjOC05ODRlZWMzZjdhM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvM2IxZDVh LWZjYzYtNGFlMy1hMmM4LTk4NGVlYzNmN2EzZS8xL0xZRkNHc3RYaEJWR1hzM3NS WUhvbGV1X3ZIOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAba/aAwQAba/eAwQAba/xMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwNKDjANBgkqhkiG9w0BAQsFAAOCAQEAcRq5vbY2+FjxHiYn KY1bjCCzJwbYE4KvziTrdXmxrq35e6xq8UuREe/q/LvtfebDWI3e3MHHz9EtHYkc R1TP52ZBrQ2JOW9cG0y83s+1Y/+PukZ83hkFIFJPelq3K0kouYJpmI8HIFYbACkt XJvtV9ZQcXU+ruWiyhEEpHrERfKSfiDG9k94pyTX0j2TGBKKUbBPfFbIIXfUShWE tekxP15wHk6AhCt8k0yDCymcoHEO6b5V4teJInPPMfZVSdRRYYYODm1cD8K3hz7N 1807twNWu53xAqU2OoDtIKfqfJjptytqxB7xH6PPZouW0PU34/Q6zcWz5VoAhKB2 BTNYOA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:53 2026 by rpki-client