This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer (raw, json) Hash identifier: gKUEpfUOaYTyt7Ai4zpmpP7CvL/7o0h7fqt1txaf0ek= Subject key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE66C5CAEFF78520F30504688D19C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201714 IP: 45.85.100.0/22 IP: 185.66.4.0/22 IP: 2a03:1ea0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:66:c5:ca:ef:f7:85:20:f3:05:04:68:8d:19:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e481909559480d248490d8e1d71c3c093b05fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:6f:20:8e:7f:44:84:02:be:58:c3:62:a4: ef:a7:7c:52:d0:f4:66:fa:f6:36:ff:22:69:0d:f1: ea:79:c9:76:82:99:31:d2:ba:e5:c5:24:d8:7a:bc: f6:73:cb:66:2e:8e:fe:bd:21:34:d3:53:30:f0:bb: 06:52:09:73:53:ac:c8:c8:e4:ae:3d:13:f4:39:21: 03:25:bd:01:da:02:78:72:6f:6a:14:5d:cf:70:82: 06:ac:f5:dc:f9:6a:26:22:59:18:05:69:f0:72:94: db:a2:bf:70:8b:e4:ac:8a:17:59:00:22:8c:34:4e: 51:67:0b:35:ed:d8:76:df:85:e9:b9:52:4b:c8:b0: 37:a4:cc:9d:f5:9c:7e:62:24:d8:af:a2:12:e9:30: cc:1f:13:32:4c:8e:79:4d:b3:ff:b1:76:0f:58:09: 46:3f:81:d5:97:32:1d:a3:03:7a:95:65:10:1f:cb: f4:58:95:60:06:bf:89:05:2c:80:75:f2:cf:14:fc: 65:9e:19:52:7e:7b:9e:06:91:32:f3:76:b1:e6:c7: 01:19:7c:62:e4:74:14:e3:f1:1e:6d:d4:7f:f9:04: 56:47:fb:35:b6:9f:38:05:62:cd:5c:32:f8:9a:e4: c1:c9:54:10:70:2b:1f:95:6e:04:c2:be:51:88:73: 66:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.100.0/22 185.66.4.0/22 IPv6: 2a03:1ea0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201714 Signature Algorithm: sha256WithRSAEncryption 7d:ef:2e:6a:69:ba:01:e8:d9:a8:ad:f4:36:23:85:dd:b3:a2: 30:d0:8e:3f:9d:d7:f9:f0:dd:f2:2d:62:90:b9:85:c9:8a:8b: de:40:c6:4a:c5:da:20:bf:ea:aa:1b:dc:8f:af:89:0a:55:57: 99:f3:fa:3f:0d:73:41:ce:39:e2:7f:27:26:6e:b6:d2:97:d2: fd:9f:23:c3:50:1e:90:f0:e6:e6:5d:d2:a6:20:fd:8e:6a:ae: 32:34:35:6a:04:3e:a7:91:5f:50:71:52:81:3d:35:1b:c1:e7: 4d:c4:f3:65:d5:3f:fd:10:06:90:26:14:57:42:e7:f2:18:d6: 28:74:eb:f9:21:82:f1:ff:5a:f6:d0:7a:d5:f2:b3:ba:a2:6a: 92:6e:57:68:c5:0c:f2:69:43:72:37:7d:d1:1b:41:d7:90:2d: e2:8e:7d:b7:cb:9c:7e:8a:ee:61:24:6e:fc:87:9d:ac:8d:36: b5:2c:3f:c1:48:75:4c:81:37:b2:c3:2c:b9:72:7b:a3:60:4c: b0:a5:6d:df:80:b4:fe:39:ec:02:04:27:77:9b:20:cc:3c:d5: e6:7b:2d:e4:2f:8d:03:bc:07:04:7c:36:47:c8:35:74:ac:e3: 15:ce:20:4b:2c:56:76:48:62:37:4a:6b:d2:f3:ca:93:9f:be: d1:8b:3f:80 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87mbFyu/3hSDzBQRojRnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQ4MTkwOTU1OTQ4MGQyNDg0OTBkOGUxZDcxYzNjMDkzYjA1ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwJvII5/RIQCvljDYqTvp3xS0PRm +vY2/yJpDfHqecl2gpkx0rrlxSTYerz2c8tmLo7+vSE001Mw8LsGUglzU6zIyOSu PRP0OSEDJb0B2gJ4cm9qFF3PcIIGrPXc+WomIlkYBWnwcpTbor9wi+SsihdZACKM NE5RZws17dh234XpuVJLyLA3pMyd9Zx+YiTYr6IS6TDMHxMyTI55TbP/sXYPWAlG P4HVlzIdowN6lWUQH8v0WJVgBr+JBSyAdfLPFPxlnhlSfnueBpEy83ax5scBGXxi 5HQU4/EebdR/+QRWR/s1tp84BWLNXDL4muTByVQQcCsflW4Ewr5RiHNm3wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFC5IGQlVlIDSSEkNjh1xw8CTsF/lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzdmMTZl YS0yNmQzLTQ1N2YtOTJjYi04N2JjNThmMzQ2NjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvN2YxNmVh LTI2ZDMtNDU3Zi05MmNiLTg3YmM1OGYzNDY2NS8xL0xrZ1pDVldVZ05KSVNRMk9I WEhEd0pPd1gtVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLVVkAwQCuUIEMA0EAgACMAcDBQMqAx6gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMT8jANBgkqhkiG9w0BAQsFAAOCAQEAfe8u amm6AejZqK30NiOF3bOiMNCOP53X+fDd8i1ikLmFyYqL3kDGSsXaIL/qqhvcj6+J ClVXmfP6Pw1zQc454n8nJm620pfS/Z8jw1AekPDm5l3SpiD9jmquMjQ1agQ+p5Ff UHFSgT01G8HnTcTzZdU//RAGkCYUV0Ln8hjWKHTr+SGC8f9a9tB61fKzuqJqkm5X aMUM8mlDcjd90RtB15At4o59t8ucforuYSRu/IedrI02tSw/wUh1TIE3ssMsuXJ7 o2BMsKVt34C0/jnsAgQnd5sgzDzV5nst5C+NA7wHBHw2R8g1dKzjFc4gSyxWdkhi N0pr0vPKk5++0Ys/gA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:56 2026 by rpki-client