This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer (raw, json) Hash identifier: dC2OmsdDnik63LMmc0vyLOC17ercCD7t1ayDBZP/k48= Subject key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15889A518982D6914D1CE58860048F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24634 IP: 80.81.144.0/20 IP: 92.62.160.0/20 IP: 141.105.80.0/20 IP: 185.3.20.0/22 IP: 195.112.192.0/19 IP: 212.28.224.0/19 IP: 2a00:16e8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:88:9a:51:89:82:d6:91:4d:1c:e5:88:60:04:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1620890f700f012b0ba60172314e3c85919513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:6f:c8:7e:39:e9:0f:40:13:73:bf:8b:b3: b6:82:b9:2d:ae:56:61:c4:cd:f8:07:c8:5e:6d:17: 7b:e0:43:02:7c:dc:ae:80:05:f5:c9:fe:79:36:f7: b8:10:7c:be:48:e8:be:30:8b:ae:39:9f:82:f3:98: 98:04:f0:5b:bd:dc:e1:d0:45:8e:c1:ea:68:e1:f1: c8:7d:01:55:90:3d:d0:7f:52:6f:4b:6e:31:3a:59: bd:17:b6:40:61:ac:47:02:46:78:dc:e3:03:06:0c: 77:12:66:36:ab:97:f4:da:ee:d6:82:c6:e2:7b:f9: f2:90:43:e6:5d:ba:7f:55:de:ce:b5:40:23:a9:a8: 23:58:d8:8f:39:05:4b:f4:bd:6a:e8:79:3f:51:35: fc:79:2c:c7:2b:c2:48:7f:76:02:e9:cb:3f:60:a1: 9b:87:ba:0d:0e:97:8d:b2:31:42:d9:d4:4c:f2:8d: 2f:a2:c0:86:13:0c:0b:1b:89:d6:fc:e6:74:57:3e: 61:38:48:97:72:e5:5c:82:ba:a2:21:6a:8f:42:4a: 74:3e:5a:c7:9b:83:bb:18:85:dc:17:30:93:df:4b: a3:00:f7:a2:66:ba:92:fe:2c:34:51:36:10:22:a3: c2:61:d4:53:6b:d9:f6:a2:f8:75:29:2e:cf:8f:43: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.144.0/20 92.62.160.0/20 141.105.80.0/20 185.3.20.0/22 195.112.192.0/19 212.28.224.0/19 IPv6: 2a00:16e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24634 Signature Algorithm: sha256WithRSAEncryption 14:8f:ba:60:1d:da:b9:9e:2f:fe:aa:b2:83:cf:f3:82:93:4d: 8a:ea:a7:de:36:4d:33:cc:a9:1f:82:c5:1f:64:bf:35:70:b4: a3:86:af:48:54:a3:f6:4d:7b:4a:09:8e:24:13:bf:d1:89:33: 0f:00:33:81:c5:92:3d:b4:1f:9d:86:a5:85:9c:d2:3c:e8:45: cd:6f:e5:d6:7c:a7:64:6c:01:2e:d4:83:99:0c:d9:10:ce:25: 28:e1:8e:da:04:d4:6f:1a:53:64:b4:36:a3:39:84:bf:49:07: a4:8d:5a:76:02:5f:64:9c:1e:e9:bb:ed:f9:30:d8:b2:2d:94: 69:8c:85:17:51:4b:b1:76:8d:33:8b:25:71:6d:e7:15:4f:c9: da:42:63:69:18:66:98:1b:d2:d4:db:76:96:a1:ba:79:66:17: 5f:06:3e:61:51:ac:fd:78:ad:88:85:54:d7:3f:57:f2:43:0b: 4d:0e:18:c7:37:11:19:09:1d:ee:f1:7c:40:61:9a:3b:77:9f: a0:76:38:b8:d6:38:82:e7:36:60:2d:f1:0f:46:a5:6c:77:5e: 55:ad:83:b1:8b:b4:2b:a7:69:39:eb:08:78:a9:f7:da:01:56: cd:0e:2d:6a:e0:39:0a:ac:22:d5:49:3b:2b:58:6d:17:e7:de: a8:04:bd:32 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt/FYiaUYmC1pFNHOWIYASPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTE2MjA4OTBmNzAwZjAxMmIwYmE2MDE3MjMxNGUzYzg1OTE5NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDVvyH456Q9AE3O/i7O2grktrlZh xM34B8hebRd74EMCfNyugAX1yf55Nve4EHy+SOi+MIuuOZ+C85iYBPBbvdzh0EWO wepo4fHIfQFVkD3Qf1JvS24xOlm9F7ZAYaxHAkZ43OMDBgx3EmY2q5f02u7Wgsbi e/nykEPmXbp/Vd7OtUAjqagjWNiPOQVL9L1q6Hk/UTX8eSzHK8JIf3YC6cs/YKGb h7oNDpeNsjFC2dRM8o0vosCGEwwLG4nW/OZ0Vz5hOEiXcuVcgrqiIWqPQkp0PlrH m4O7GIXcFzCT30ujAPeiZrqS/iw0UTYQIqPCYdRTa9n2ovh1KS7Pj0NQ9wIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFC4WIIkPcA8BKwumAXIxTjyFkZUTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzgyMTE1 Mi05ZjEzLTRjMDktOWRjZC00NWJiYjIzYTE1ZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvODIxMTUy LTlmMTMtNGMwOS05ZGNkLTQ1YmJiMjNhMTVkOC8xL0xoWWdpUTl3RHdFckM2WUJj akZPUElXUmxSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQEUFGQAwQEXD6gAwQEjWlQAwQCuQMUAwQFw3DA AwQF1BzgMA0EAgACMAcDBQAqABboMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmA6 MA0GCSqGSIb3DQEBCwUAA4IBAQAUj7pgHdq5ni/+qrKDz/OCk02K6qfeNk0zzKkf gsUfZL81cLSjhq9IVKP2TXtKCY4kE7/RiTMPADOBxZI9tB+dhqWFnNI86EXNb+XW fKdkbAEu1IOZDNkQziUo4Y7aBNRvGlNktDajOYS/SQekjVp2Al9knB7pu+35MNiy LZRpjIUXUUuxdo0ziyVxbecVT8naQmNpGGaYG9LU23aWobp5ZhdfBj5hUaz9eK2I hVTXP1fyQwtNDhjHNxEZCR3u8XxAYZo7d5+gdji41jiC5zZgLfEPRqVsd15VrYOx i7Qrp2k56wh4qffaAVbNDi1q4DkKrCLVSTsrWG0X596oBL0y -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:48 2026 by rpki-client