This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer (raw, json) Hash identifier: +Zpa0VtvzwCjeDax9N4m96iFdOZn2ccPVAuGhM1Hvbk= Subject key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A587CD2EBE616CD4D4436A24A655937A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 06 Nov 2025 09:26:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 9098 AS: 30788 IP: 5.181.14.0/23 IP: 45.82.80.0/22 IP: 45.145.52.0/22 IP: 45.150.48.0/22 IP: 45.159.180.0/24 IP: 45.159.182.0/23 IP: 94.199.7.0/24 IP: 194.34.244.0/22 IP: 2a06:7840::/29 IP: 2a07:5340::/29 IP: 2a07:d940::/29 IP: 2a07:f600::/29 IP: 2a09:3900::/29 IP: 2a09:3c80::/29 IP: 2a09:cb00::/29 IP: 2a0a:f8c0::/29 IP: 2a0b:2a80::/29 IP: 2a0b:2d80::/29 IP: 2a0c:7b80::/29 IP: 2a0c:c180::/29 IP: 2a0d:4440::/29 IP: 2a0d:fb40::/29 IP: 2a0f:f00::/29 IP: 2a0f:4bc0::/29 IP: 2a0f:5080::/29 IP: 2a0f:59c0::/29 IP: 2a0f:8440::/29 IP: 2a0f:a380::/29 IP: 2a0f:e100::/29 IP: 2a0f:ff80::/29 IP: 2a11:1780::/29 IP: 2a11:2540::/29 IP: 2a11:3840::/29 IP: 2a11:3e40::/29 IP: 2a11:4100::/29 IP: 2a11:52c0::/29 IP: 2a11:5480::/29 IP: 2a11:6640::/29 IP: 2a11:7780::/29 IP: 2a11:78c0::/29 IP: 2a11:8d80::/29 IP: 2a11:8ec0::/29 IP: 2a11:fe00::/29 IP: 2a12:c0::/29 IP: 2a12:19c0::/29 IP: 2a12:23c0::/29 IP: 2a12:2940::/29 IP: 2a12:2bc0::/29 IP: 2a12:3400::/29 IP: 2a12:3540::/29 IP: 2a12:3940::/29 IP: 2a12:4340::/29 IP: 2a12:5640::/29 IP: 2a12:b580::/29 IP: 2a12:e580::/29 IP: 2a13:5200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:7c:d2:eb:e6:16:cd:4d:44:36:a2:4a:65:59:37:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 6 09:26:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:7d:94:c5:a9:4a:ea:0d:5f:b9:2c:db:85: 12:91:e6:f9:4f:73:e0:e4:97:7e:ce:e1:e5:a3:6c: d0:44:5d:41:06:d7:3c:22:af:e8:dc:93:e1:6c:00: 7e:50:dd:f8:89:df:db:5d:1d:c9:ff:de:bf:ea:83: 6a:48:cd:18:f5:ec:0e:5d:bd:40:9d:01:5e:36:0c: db:97:ee:3e:75:d4:37:1d:a3:2e:7e:ad:82:4f:c5: 55:5c:80:c4:1b:26:d5:c2:1a:3f:67:b2:7a:8b:1a: 7b:ad:13:b3:c7:9c:0d:a7:61:57:c7:9c:8f:62:16: 87:9f:c5:1b:20:e7:5a:ea:ab:1d:bd:3f:e3:79:a7: e6:e6:18:1c:8f:39:80:25:23:68:5b:18:7a:03:96: 7b:85:cb:68:2e:d5:e4:fe:fd:9c:75:b0:f4:62:04: 00:c4:4a:58:06:b4:87:52:36:5f:85:4f:d1:64:db: 95:7d:c1:ef:42:48:44:d0:c7:84:0e:9f:99:24:ec: 32:ab:e9:f3:7f:07:1e:bd:a8:6f:9b:5a:91:cc:7d: 73:79:90:97:03:07:b5:64:9e:ee:94:0e:7c:10:2b: ad:5a:b6:ee:12:a5:f6:b4:2d:14:aa:96:fd:1b:51: d7:c1:09:ca:fa:ef:8f:c3:10:ec:7f:7b:75:99:96: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.14.0/23 45.82.80.0/22 45.145.52.0/22 45.150.48.0/22 45.159.180.0/24 45.159.182.0/23 94.199.7.0/24 194.34.244.0/22 IPv6: 2a06:7840::/29 2a07:5340::/29 2a07:d940::/29 2a07:f600::/29 2a09:3900::/29 2a09:3c80::/29 2a09:cb00::/29 2a0a:f8c0::/29 2a0b:2a80::/29 2a0b:2d80::/29 2a0c:7b80::/29 2a0c:c180::/29 2a0d:4440::/29 2a0d:fb40::/29 2a0f:f00::/29 2a0f:4bc0::/29 2a0f:5080::/29 2a0f:59c0::/29 2a0f:8440::/29 2a0f:a380::/29 2a0f:e100::/29 2a0f:ff80::/29 2a11:1780::/29 2a11:2540::/29 2a11:3840::/29 2a11:3e40::/29 2a11:4100::/29 2a11:52c0::/29 2a11:5480::/29 2a11:6640::/29 2a11:7780::/29 2a11:78c0::/29 2a11:8d80::/29 2a11:8ec0::/29 2a11:fe00::/29 2a12:c0::/29 2a12:19c0::/29 2a12:23c0::/29 2a12:2940::/29 2a12:2bc0::/29 2a12:3400::/29 2a12:3540::/29 2a12:3940::/29 2a12:4340::/29 2a12:5640::/29 2a12:b580::/29 2a12:e580::/29 2a13:5200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9098 30788 Signature Algorithm: sha256WithRSAEncryption 1e:5c:95:e6:d5:97:2a:ce:8f:0d:04:4a:72:32:3c:be:ce:f8: 4b:2c:d0:cb:55:9f:4b:90:c0:65:b5:8e:2e:96:bb:67:33:80: 6b:c4:01:a1:ed:c9:6c:ff:5c:0d:f5:ce:20:5d:20:6c:e2:db: 5e:95:dc:88:b7:62:7a:36:0b:1e:83:84:1c:20:00:8a:96:2a: 9d:ea:ae:fd:e5:2c:03:22:ad:e0:0f:a3:d0:b7:c5:9b:fd:13: 76:9e:42:1f:1f:cd:a0:40:90:d5:c9:c5:fd:4b:0a:54:ba:75: f7:89:0a:98:37:90:7d:83:40:91:af:93:66:2f:15:ef:d4:33: aa:28:91:6f:80:27:5b:91:5c:8b:95:2d:a2:ec:87:e7:f5:74: 08:63:91:f3:04:21:36:b7:ed:96:60:dd:1d:8d:2c:40:16:eb: e6:bc:69:d3:5c:e5:39:ba:26:b6:32:ce:94:24:0a:f8:55:c1: 75:8d:99:23:71:3a:12:bb:7b:99:85:24:d3:9f:40:27:9f:48: 52:00:b5:de:7a:fc:7e:49:9f:01:b6:c2:ea:9f:b2:57:0c:7d: 34:e1:2d:3c:c7:ed:2a:ab:26:5d:d0:17:ad:65:ce:a2:db:8f: 58:1e:71:8e:ba:b9:02:0b:00:ec:a5:35:a3:9e:19:3f:08:92: d6:3d:a8:5e -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgISAZpYfNLr5hbNTUQ2okplWTejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA2MDkyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTExNjRhOWI1MDEzZDYyZjA1MTM0NGY2ZGY5MWYxM2JjN2VjYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSd9lMWpSuoNX7ks24USkeb5T3Pg 5Jd+zuHlo2zQRF1BBtc8Iq/o3JPhbAB+UN34id/bXR3J/96/6oNqSM0Y9ewOXb1A nQFeNgzbl+4+ddQ3HaMufq2CT8VVXIDEGybVwho/Z7J6ixp7rROzx5wNp2FXx5yP YhaHn8UbIOda6qsdvT/jeafm5hgcjzmAJSNoWxh6A5Z7hctoLtXk/v2cdbD0YgQA xEpYBrSHUjZfhU/RZNuVfcHvQkhE0MeEDp+ZJOwyq+nzfwcevahvm1qRzH1zeZCX Awe1ZJ7ulA58ECutWrbuEqX2tC0Uqpb9G1HXwQnK+u+PwxDsf3t1mZbEJQIDAQAB o4IELzCCBCswHQYDVR0OBBYEFC4RZKm1AT1i8FE0T235HxO8fssPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2ZiNDY5 Ni02NzhmLTRkNDUtYTA5MS1mZDdmMTdiYjFhNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZmI0Njk2 LTY3OGYtNGQ0NS1hMDkxLWZkN2YxN2JiMWE1Yy8xL0xoRmtxYlVCUFdMd1VUUlBi ZmtmRTd4LXl3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBqQYIKwYB BQUHAQcBAf8EggGYMIIBlDA2BAIAATAwAwQBBbUOAwQCLVJQAwQCLZE0AwQCLZYw AwQALZ+0AwQBLZ+2AwQAXscHAwQCwiL0MIIBWAQCAAIwggFQAwUDKgZ4QAMFAyoH U0ADBQMqB9lAAwUDKgf2AAMFAyoJOQADBQMqCTyAAwUDKgnLAAMFAyoK+MADBQMq CyqAAwUDKgstgAMFAyoMe4ADBQMqDMGAAwUDKg1EQAMFAyoN+0ADBQMqDw8AAwUD Kg9LwAMFAyoPUIADBQMqD1nAAwUDKg+EQAMFAyoPo4ADBQMqD+EAAwUDKg//gAMF AyoRF4ADBQMqESVAAwUDKhE4QAMFAyoRPkADBQMqEUEAAwUDKhFSwAMFAyoRVIAD BQMqEWZAAwUDKhF3gAMFAyoReMADBQMqEY2AAwUDKhGOwAMFAyoR/gADBQMqEgDA AwUDKhIZwAMFAyoSI8ADBQMqEilAAwUDKhIrwAMFAyoSNAADBQMqEjVAAwUDKhI5 QAMFAyoSQ0ADBQMqElZAAwUDKhK1gAMFAyoS5YADBQMqE1IAMB0GCCsGAQUFBwEI AQH/BA4wDKAKMAgCAiOKAgJ4RDANBgkqhkiG9w0BAQsFAAOCAQEAHlyV5tWXKs6P DQRKcjI8vs74SyzQy1WfS5DAZbWOLpa7ZzOAa8QBoe3JbP9cDfXOIF0gbOLbXpXc iLdiejYLHoOEHCAAipYqnequ/eUsAyKt4A+j0LfFm/0Tdp5CHx/NoECQ1cnF/UsK VLp194kKmDeQfYNAka+TZi8V79QzqiiRb4AnW5Fci5UtouyH5/V0CGOR8wQhNrft lmDdHY0sQBbr5rxp01zlObomtjLOlCQK+FXBdY2ZI3E6Ert7mYUk059AJ59IUgC1 3nr8fkmfAbbC6p+yVwx9NOEtPMftKqsmXdAXrWXOotuPWB5xjrq5AgsA7KU1o54Z PwiS1j2oXg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:02:52 2025 by rpki-client