This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer File: LkX41ix0LqB9y_jFfVjM9dKOPrk.cer (raw, json) Hash identifier: Sj6k5uJPI3oMLsM6nxJvvZXyVG8JitRKRG191y1WSzk= Subject key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA657DFC15B05DFA35CBFFE7FE449C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.208.173.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:57:df:c1:5b:05:df:a3:5c:bf:fe:7f:e4:49:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:be:b8:33:cd:89:1b:49:22:b6:9a:6a:e9: fb:10:62:6f:0c:6a:37:ba:68:4f:2e:ff:df:bf:68: f7:3d:26:03:27:35:c4:68:43:63:0d:37:35:f6:39: f0:92:e2:19:3c:83:af:5c:ec:0a:03:16:64:a8:6e: 35:e4:1b:db:78:7e:73:ba:8e:5c:49:9c:ea:6a:ba: f3:ce:91:f9:fc:41:06:81:12:ba:15:57:e7:a9:47: 5c:6a:af:69:7e:08:b4:42:f9:6e:bf:c7:7c:c6:e5: 41:77:89:37:73:ad:99:b0:58:28:47:4a:73:92:b9: 14:e8:15:b5:54:c3:0a:6f:37:59:e7:76:5a:70:25: 4b:8c:75:c6:7a:f4:4d:91:9a:1a:66:51:09:58:59: 94:2d:fa:03:d2:6b:14:26:82:42:5e:0f:ca:e6:85: 43:86:5f:b0:a1:42:e1:c7:e3:44:5f:6a:80:6a:0a: 1c:92:e1:4d:14:25:b4:e0:32:49:6f:46:4f:77:6e: 8e:d2:ee:2f:76:33:61:83:28:f7:84:4d:23:0e:a6: 18:38:2a:e8:b3:7e:db:bc:78:ac:91:38:f1:a9:c2: 1b:2e:b8:f8:24:55:15:4e:d4:e8:33:f3:a2:f2:5d: e6:61:cc:5e:ea:85:0b:41:cf:c3:5b:25:47:83:26: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.173.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:2f:04:a9:95:09:6b:ea:02:74:85:26:cb:4a:d8:e2:ea:63: f8:fd:d0:0d:74:0e:08:dd:8a:06:1d:32:28:3e:1a:4a:91:9a: 65:6e:20:4d:87:23:7d:2b:6d:f5:f0:01:c8:b6:a7:b7:6c:fc: 91:06:b8:d6:21:e2:31:9e:ed:89:88:6e:b2:19:4c:ba:23:a0: 21:fe:02:b0:87:73:c8:78:f4:18:d3:a1:f2:89:61:52:81:c8: 6d:f5:9c:87:46:32:5a:43:9b:6f:e3:dd:29:b1:f4:b1:ca:6c: 78:88:c9:bb:48:0e:81:e3:b3:06:16:29:d0:8a:b1:14:33:bd: 99:63:0b:a5:4c:f9:eb:57:4d:c3:d2:08:e5:56:b3:41:77:e5: 04:16:ea:0b:7d:34:5a:6f:3b:51:ec:8a:5c:16:32:27:59:84: ac:48:18:6b:94:65:f1:64:3e:b9:2b:a6:c4:da:b7:b8:6a:69: 4b:ea:11:5f:9c:27:28:31:1e:ff:0d:66:da:9a:33:f8:b0:30: 4d:f5:49:99:7e:5c:c2:db:35:22:9a:fc:4a:f6:13:61:e1:93: 68:57:2e:f9:1f:e1:6b:57:34:b2:52:31:8e:c9:45:82:aa:ac: 10:63:67:26:5e:96:4f:90:65:57:6b:ee:b1:61:c5:a1:c2:53: 3e:7c:69:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+plffwVsF36Ncv/5/5EnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQ1ZjhkNjJjNzQyZWEwN2RjYmY4YzU3ZDU4Y2NmNWQyOGUzZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS++uDPNiRtJIraaaun7EGJvDGo3 umhPLv/fv2j3PSYDJzXEaENjDTc19jnwkuIZPIOvXOwKAxZkqG415BvbeH5zuo5c SZzqarrzzpH5/EEGgRK6FVfnqUdcaq9pfgi0Qvluv8d8xuVBd4k3c62ZsFgoR0pz krkU6BW1VMMKbzdZ53ZacCVLjHXGevRNkZoaZlEJWFmULfoD0msUJoJCXg/K5oVD hl+woULhx+NEX2qAagockuFNFCW04DJJb0ZPd26O0u4vdjNhgyj3hE0jDqYYOCro s37bvHiskTjxqcIbLrj4JFUVTtToM/Oi8l3mYcxe6oULQc/DWyVHgyZRwQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFC5F+NYsdC6gfcv4xX1YzPXSjj65MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzMyNzc0 Mi04MTU2LTRmYTQtOWJkNS0yMTIwZmQwNTc1ZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvMzI3NzQy LTgxNTYtNGZhNC05YmQ1LTIxMjBmZDA1NzVmZi8xL0xrWDQxaXgwTHFCOXlfakZm VmpNOWRLT1Byay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9CtMA0GCSqGSIb3DQEBCwUAA4IBAQAMLwSp lQlr6gJ0hSbLStji6mP4/dANdA4I3YoGHTIoPhpKkZplbiBNhyN9K2318AHItqe3 bPyRBrjWIeIxnu2JiG6yGUy6I6Ah/gKwh3PIePQY06HyiWFSgcht9ZyHRjJaQ5tv 490psfSxymx4iMm7SA6B47MGFinQirEUM72ZYwulTPnrV03D0gjlVrNBd+UEFuoL fTRabztR7IpcFjInWYSsSBhrlGXxZD65K6bE2re4amlL6hFfnCcoMR7/DWbamjP4 sDBN9UmZflzC2zUimvxK9hNh4ZNoVy75H+FrVzSyUjGOyUWCqqwQY2cmXpZPkGVX a+6xYcWhwlM+fGlq -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:25 2026 by rpki-client