This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer File: LwvxBgr5ORfa-1aagMzsnbCKdsU.cer (raw, json) Hash identifier: m96O1JKHVmgqLAWSbEX3QlpKRH4BBzkRU56fUC87enE= Subject key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED68775E2A95406C98DDCB54B6B6B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211722 IP: 2001:67c:2970::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:68:77:5e:2a:95:40:6c:98:dd:cb:54:b6:b6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:ba:73:cf:96:2b:13:37:0c:63:78:86:84: b8:10:63:77:14:21:2f:fe:21:b7:6b:4c:36:5f:40: 1b:fc:c0:e6:7a:18:c5:14:53:97:90:b1:07:35:e3: 4f:40:d4:2c:fe:62:0a:05:8a:5b:31:de:e6:c0:67: b1:bf:ff:52:92:a2:de:13:1f:b8:5b:f9:07:32:28: 56:e9:07:de:04:7a:2a:ac:86:22:d9:47:cb:81:58: 93:0e:63:1c:d4:21:ad:e5:fb:4c:8a:07:26:85:92: b7:0b:a3:19:47:6c:ff:e7:ba:8a:5d:b4:12:66:99: af:ae:de:4e:c0:1a:e5:04:db:c9:60:4c:27:f8:05: 20:3e:67:cb:6d:84:47:65:1f:5f:77:a8:69:5f:c2: df:56:0e:15:49:74:9e:e7:44:9a:09:6f:af:d6:f9: 54:25:40:84:34:ce:25:7b:8f:13:ef:e8:10:78:b4: 45:38:99:c8:a2:5f:72:00:ba:e5:86:09:0c:50:2d: 2c:8a:4b:11:73:2b:f4:47:64:83:f4:b3:bb:31:47: ca:8e:2d:23:e2:af:43:92:0c:67:32:a5:d5:34:58: db:b7:a6:c2:f4:e2:29:46:1a:b8:41:e0:99:e1:4c: 7a:f4:fc:46:0a:12:9e:24:9e:8b:c4:75:e3:32:f2: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2970::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211722 Signature Algorithm: sha256WithRSAEncryption 93:2a:33:8b:19:25:30:19:85:f4:b3:6c:f9:97:04:71:92:7b: 09:76:6c:49:05:a3:8a:ab:0e:88:c2:6f:7e:c1:8a:47:26:53: 47:4d:f6:1d:e6:72:26:e8:6f:b0:d1:2b:f3:46:3c:ff:dd:04: 15:99:06:85:55:a7:41:69:32:fe:43:b1:d4:fa:da:6c:15:12: d9:8a:06:d0:41:cb:e2:3b:f9:45:1c:a3:41:c9:e0:51:a8:68: c6:f7:3a:97:0d:b4:41:d2:ca:e1:64:e5:48:c9:cc:10:e4:d2: 79:c7:7d:e6:11:2a:ad:8a:e3:29:e9:d8:5b:e1:3c:43:fa:a1: 77:13:c2:6b:a3:95:37:4e:0d:57:3a:b3:b9:59:8c:33:35:bb: cc:50:64:8f:cc:a8:96:fa:1a:6b:32:d8:5a:aa:ff:f7:22:b0: 25:95:39:bb:8c:95:21:69:ad:19:a4:fd:f3:9c:a9:93:1c:9e: 55:55:b2:1d:ad:1b:24:04:bb:4c:40:71:88:e4:18:18:bb:66: e8:ad:0f:58:3f:d0:9f:29:68:87:c2:3f:9c:2c:96:3b:a6:8f: e1:14:b5:01:e5:9b:25:3c:40:2f:b0:56:0f:d7:2e:f9:24:20: dd:9c:f8:3f:68:f3:d4:24:d4:9f:ba:6b:18:1d:8c:0b:cc:95: 7c:1b:16:1a -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt87Wh3XiqVQGyY3ctUtrayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjBiZjEwNjBhZjkzOTE3ZGFmYjU2OWE4MGNjZWM5ZGIwOGE3NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8u6c8+WKxM3DGN4hoS4EGN3FCEv /iG3a0w2X0Ab/MDmehjFFFOXkLEHNeNPQNQs/mIKBYpbMd7mwGexv/9SkqLeEx+4 W/kHMihW6QfeBHoqrIYi2UfLgViTDmMc1CGt5ftMigcmhZK3C6MZR2z/57qKXbQS Zpmvrt5OwBrlBNvJYEwn+AUgPmfLbYRHZR9fd6hpX8LfVg4VSXSe50SaCW+v1vlU JUCENM4le48T7+gQeLRFOJnIol9yALrlhgkMUC0siksRcyv0R2SD9LO7MUfKji0j 4q9DkgxnMqXVNFjbt6bC9OIpRhq4QeCZ4Ux69PxGChKeJJ6LxHXjMvL28QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFC8L8QYK+TkX2vtWmoDM7J2winbFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzczZjcz OS04MWI4LTQ1MTEtODFhMS1iM2ExNjgwMzIwYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNzNmNzM5 LTgxYjgtNDUxMS04MWExLWIzYTE2ODAzMjBhZC8xL0x3dnhCZ3I1T1JmYS0xYWFn TXpzbmJDS2RzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfClwMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM7CjANBgkqhkiG9w0BAQsFAAOCAQEAkyozixklMBmF9LNs+ZcEcZJ7CXZs SQWjiqsOiMJvfsGKRyZTR032HeZyJuhvsNEr80Y8/90EFZkGhVWnQWky/kOx1Pra bBUS2YoG0EHL4jv5RRyjQcngUahoxvc6lw20QdLK4WTlSMnMEOTSecd95hEqrYrj KenYW+E8Q/qhdxPCa6OVN04NVzqzuVmMMzW7zFBkj8yolvoaazLYWqr/9yKwJZU5 u4yVIWmtGaT985ypkxyeVVWyHa0bJAS7TEBxiOQYGLtm6K0PWD/Qnyloh8I/nCyW O6aP4RS1AeWbJTxAL7BWD9cu+SQg3Zz4P2jz1CTUn7prGB2MC8yVfBsWGg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:10 2026 by rpki-client