This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer File: LkvU7cop1Ocr6GztC3rWUsfSYck.cer (raw, json) Hash identifier: VYgCd7BNHlkUq+hnrQGPrr1OUtXPIaE4AZOgFanrcsg= Subject key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE28C86B97133FE116A70C9044403 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.93.228.0/22 IP: 193.19.224.0/22 IP: 2a02:fe80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e2:8c:86:b9:71:33:fe:11:6a:70:c9:04:44:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:3b:e0:94:e8:02:7a:ed:8c:81:32:79:3e: 0f:b7:38:ba:0f:bb:35:ea:6c:a5:f2:b3:46:24:f3: 6e:1e:25:eb:1b:9f:8e:b8:45:be:e4:67:9e:be:fd: b7:1c:c8:42:c0:2c:a3:8e:8c:0f:70:6d:6e:a9:6b: 63:f0:df:0c:bc:d8:0e:61:b0:de:58:00:60:83:ee: 73:ce:89:bf:03:fb:b0:5e:46:fa:84:24:a1:10:0b: 9e:f1:97:16:54:70:92:10:de:7f:6a:95:c1:d2:91: e7:6c:7a:94:0f:db:13:f8:34:fb:d4:64:7d:a9:d2: 95:04:d3:b5:ac:52:13:60:6e:22:74:61:1d:1e:0b: 06:48:11:7d:3b:35:b0:e0:26:45:28:16:72:49:68: 60:c8:cc:69:ec:31:10:6d:78:fd:fa:b8:12:97:c5: d2:b6:6a:92:17:6f:c8:4a:d2:21:c1:26:b5:f6:25: cf:3b:bf:a7:37:b0:f6:37:be:7b:f4:e7:f5:41:d1: 83:7c:2d:fb:99:50:4d:15:ae:e1:a2:fd:3f:eb:33: 00:71:b6:0a:4e:9e:5f:35:79:1d:b3:49:ee:d0:d4: b5:4a:83:7f:cf:6b:5e:77:9a:c4:24:1c:6a:ed:57: dd:ca:84:0a:99:b0:d0:5d:8f:19:29:35:a0:3a:63: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.228.0/22 193.19.224.0/22 IPv6: 2a02:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 27:ae:f5:6f:9f:95:36:93:66:86:ef:d6:1f:db:08:f6:df:e4: 66:73:01:eb:2d:5f:7b:c9:6a:f8:72:94:98:e0:44:d4:fb:1c: d4:80:cf:ca:88:68:23:63:60:87:ad:37:57:ac:b3:85:cb:17: f3:c3:6a:77:be:a1:63:55:01:27:76:ea:79:84:78:b8:62:1b: 60:19:bb:d0:f4:71:3f:05:c3:ea:47:79:79:04:ab:2f:47:02: bc:d5:18:2d:c4:a2:c6:54:b7:0c:d7:89:51:41:5a:9f:2d:42: e4:a0:31:fa:92:e2:81:01:92:65:ae:96:80:20:d6:2b:a7:60: 9e:ee:35:aa:be:18:28:e1:0f:0b:ec:f6:25:b9:1e:18:b3:d7: 78:88:c7:3f:ec:b5:2d:2e:ee:f3:3c:13:86:74:f2:39:bf:61: 6b:f0:90:2b:89:c6:15:0f:0c:de:54:58:0c:db:dc:6b:cf:47: 54:67:17:20:13:8f:5f:db:f4:4f:d2:76:ea:ab:cc:af:74:51: e9:73:e5:9f:45:5c:1c:26:5f:95:25:81:60:3d:c0:8d:61:b2: b5:22:7f:f1:df:bc:6c:bf:20:93:2c:f7:86:9a:64:f1:c6:c4: e4:56:6b:4c:bb:f5:6c:f5:88:2c:7c:a8:df:23:e4:27:01:1f: 3e:ff:25:8b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9WuKMhrlxM/4RanDJBEQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTRiZDRlZGNhMjlkNGU3MmJlODZjZWQwYjdhZDY1MmM3ZDI2MWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3s74JToAnrtjIEyeT4Ptzi6D7s1 6myl8rNGJPNuHiXrG5+OuEW+5Geevv23HMhCwCyjjowPcG1uqWtj8N8MvNgOYbDe WABgg+5zzom/A/uwXkb6hCShEAue8ZcWVHCSEN5/apXB0pHnbHqUD9sT+DT71GR9 qdKVBNO1rFITYG4idGEdHgsGSBF9OzWw4CZFKBZySWhgyMxp7DEQbXj9+rgSl8XS tmqSF2/IStIhwSa19iXPO7+nN7D2N7579Of1QdGDfC37mVBNFa7hov0/6zMAcbYK Tp5fNXkds0nu0NS1SoN/z2ted5rEJBxq7VfdyoQKmbDQXY8ZKTWgOmPVVQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFC5L1O3KKdTnK+hs7Qt61lLH0mHJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3L2E1M2Ji Ni02NmMwLTQ4NjEtYjI4OC0yYTYzNzJlMDU0ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvYTUzYmI2 LTY2YzAtNDg2MS1iMjg4LTJhNjM3MmUwNTRkMi8xL0xrdlU3Y29wMU9jcjZHenRD M3JXVXNmU1ljay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuV3kAwQCwRPgMA0EAgACMAcDBQMqAv6AMA0G CSqGSIb3DQEBCwUAA4IBAQAnrvVvn5U2k2aG79Yf2wj23+RmcwHrLV97yWr4cpSY 4ETU+xzUgM/KiGgjY2CHrTdXrLOFyxfzw2p3vqFjVQEndup5hHi4YhtgGbvQ9HE/ BcPqR3l5BKsvRwK81RgtxKLGVLcM14lRQVqfLULkoDH6kuKBAZJlrpaAINYrp2Ce 7jWqvhgo4Q8L7PYluR4Ys9d4iMc/7LUtLu7zPBOGdPI5v2Fr8JAricYVDwzeVFgM 29xrz0dUZxcgE49f2/RP0nbqq8yvdFHpc+WfRVwcJl+VJYFgPcCNYbK1In/x37xs vyCTLPeGmmTxxsTkVmtMu/Vs9YgsfKjfI+QnAR8+/yWL -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:05 2026 by rpki-client