This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer (raw, json) Hash identifier: pLXlVqE9ot14BHLepwPuOxgXtb/h/kXU4FTeN+Ions8= Subject key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4EF3876AC70977869935E6AB22745 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.36.179.0/24 IP: 193.36.185.0/24 IP: 193.36.187.0/24 IP: 193.36.227.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ef:38:76:ac:70:97:78:69:93:5e:6a:b2:27:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:24:45:b6:fe:13:09:54:37:74:ff:01:1b:e1: cc:e2:ee:3f:f5:c8:1a:1a:60:47:e0:97:cf:cd:85: 54:4c:0a:b6:cb:2e:e0:29:de:f2:0d:5b:33:5d:f6: 04:37:1b:f8:1f:78:f7:2f:1a:90:f4:ba:09:b8:49: 99:64:c5:4b:34:db:e7:87:9c:3b:6d:a3:a9:71:58: 0b:b3:82:17:09:ad:1e:bb:a4:bf:56:7a:c4:a9:1c: 71:8b:36:91:a3:7a:6d:93:a0:8f:ad:9c:d0:c3:96: 66:46:03:75:7b:e3:c3:76:e3:bc:4c:71:c0:7a:89: 1f:b9:58:f1:1c:6f:b6:3c:8d:1f:31:25:db:ef:f7: 5e:48:45:c2:94:1b:fa:92:7d:c3:3c:5b:cb:15:1e: ff:83:0e:a5:2f:20:4a:cb:86:ab:da:fa:df:27:13: 14:b2:22:9f:81:27:60:45:f2:d7:be:76:30:a3:c9: 95:c7:c4:77:9e:95:ff:a0:02:47:46:16:82:47:c2: 65:8d:b8:67:82:81:68:87:75:00:da:24:2a:d5:33: a5:14:b8:ca:83:0e:9b:d6:3c:30:8b:c5:d0:77:3c: 06:11:06:a5:b6:d8:f1:e5:94:93:63:7c:1f:67:2e: 05:46:de:53:56:cd:19:c3:8d:27:c0:1b:be:02:fa: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.179.0/24 193.36.185.0/24 193.36.187.0/24 193.36.227.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:41:37:05:e9:2c:48:e7:fb:f7:29:b6:d8:01:dd:65:3c:d4: 27:cc:40:ac:1c:67:a0:77:4b:f7:e4:49:58:78:a3:ff:65:a9: 00:b1:ce:50:4f:f3:57:99:21:3a:cd:c8:d2:57:fe:3b:4d:05: 49:d7:82:76:45:df:bc:02:9a:94:13:b2:11:6d:ae:07:7f:57: db:fa:22:e7:a6:33:e7:f4:8b:60:0d:dc:c3:96:fc:9b:c4:31: 15:e0:99:9f:b4:6d:8e:b1:d5:65:0f:72:74:f8:b4:10:3c:e9: 41:8a:a9:82:75:34:b0:25:7f:b3:f3:e8:e2:05:79:2f:68:08: 8a:be:8a:09:72:eb:b2:38:c7:b0:d1:19:02:69:34:70:90:92: 21:99:d1:2a:93:70:0c:58:13:48:d7:6e:26:41:48:82:f5:52: 83:34:02:d9:67:4a:2b:2b:bb:61:ce:a7:10:a4:ed:14:9e:d9: 8c:64:2f:17:fa:bc:d3:6d:8d:ff:67:19:dd:35:09:87:11:74: db:3b:54:32:ea:21:9c:2c:bb:ce:9e:ef:30:b8:85:30:1b:ee: c7:23:89:5b:ff:e4:8d:b9:28:8f:dc:a5:66:8b:08:45:a1:fb: 81:6c:1f:e4:98:48:3c:ec:be:e5:3d:50:8b:c7:28:aa:6f:71: fa:07:3f:d8 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt7pO84dqxwl3hpk15qsidFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjA4ZGYxNjVkNDk3ZDdhOWI5OWUwZTcxZjE1YmEwN2QxODQ2MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSRFtv4TCVQ3dP8BG+HM4u4/9cga GmBH4JfPzYVUTAq2yy7gKd7yDVszXfYENxv4H3j3LxqQ9LoJuEmZZMVLNNvnh5w7 baOpcVgLs4IXCa0eu6S/VnrEqRxxizaRo3ptk6CPrZzQw5ZmRgN1e+PDduO8THHA eokfuVjxHG+2PI0fMSXb7/deSEXClBv6kn3DPFvLFR7/gw6lLyBKy4ar2vrfJxMU siKfgSdgRfLXvnYwo8mVx8R3npX/oAJHRhaCR8JljbhngoFoh3UA2iQq1TOlFLjK gw6b1jwwi8XQdzwGEQalttjx5ZSTY3wfZy4FRt5TVs0Zw40nwBu+AvrRvQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFC8I3xZdSX16m5ng5x8VugfRhGFaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzhkMDM2 MC1mYmMyLTQ2ZWItOWFjMi1jYWMzZTQyYWUwM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvOGQwMzYw LWZiYzItNDZlYi05YWMyLWNhYzNlNDJhZTAzZi8xL0x3amZGbDFKZlhxYm1lRG5I eFc2QjlHRVlWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAwSSzAwQAwSS5AwQAwSS7AwQAwSTjMA0GCSqG SIb3DQEBCwUAA4IBAQBbQTcF6SxI5/v3KbbYAd1lPNQnzECsHGegd0v35ElYeKP/ ZakAsc5QT/NXmSE6zcjSV/47TQVJ14J2Rd+8ApqUE7IRba4Hf1fb+iLnpjPn9Itg DdzDlvybxDEV4JmftG2OsdVlD3J0+LQQPOlBiqmCdTSwJX+z8+jiBXkvaAiKvooJ cuuyOMew0RkCaTRwkJIhmdEqk3AMWBNI124mQUiC9VKDNALZZ0orK7thzqcQpO0U ntmMZC8X+rzTbY3/ZxndNQmHEXTbO1Qy6iGcLLvOnu8wuIUwG+7HI4lb/+SNuSiP 3KVmiwhFofuBbB/kmEg87L7lPVCLxyiqb3H6Bz/Y -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:28 2026 by rpki-client