This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer File: LxF62jy5UVptim3MFfKwsafZvh0.cer (raw, json) Hash identifier: mUG1mdDNVB2oqmnqS1DCFDJqlrzByNmmIzSx+gWsLl8= Subject key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFE5328B6A08CB9779E4833059CDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61357 IP: 141.93.0.0/16 IP: 193.187.124.0/22 IP: 2a0d:f0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fe:53:28:b6:a0:8c:b9:77:9e:48:33:05:9c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:12:1e:45:a0:33:d1:7e:57:31:1d:85:7f: 3f:81:6c:2e:78:34:7f:b9:31:e3:41:39:9a:76:66: 0c:e1:40:f1:b2:d5:d5:77:96:5f:61:fa:06:62:d9: 71:61:fc:02:b8:9f:99:1a:9c:e4:8b:c1:9f:3b:46: 27:52:11:95:53:5d:4f:c1:1f:dd:34:50:b8:55:ee: 50:d0:7b:eb:1b:0c:d9:30:7e:45:32:cf:3e:0e:02: f2:1f:03:14:0a:d4:ec:a1:d6:cf:22:96:95:16:28: 6e:9c:bf:c3:5f:19:4a:b9:5c:b3:de:8a:37:02:85: 42:21:7f:ae:ff:37:48:fa:b4:3b:41:69:5e:f7:f3: f8:c3:31:36:4f:3e:5f:be:df:ee:f0:98:58:01:fd: 73:b6:33:ad:97:2c:58:05:73:14:69:77:2d:34:17: b8:68:36:46:95:6d:a4:18:e5:ac:37:5e:9a:d7:46: db:5c:a3:58:29:fd:aa:f9:ec:43:98:11:33:36:1d: a9:f8:e5:40:34:37:93:ea:b5:6b:20:70:18:2d:5e: 23:cb:1e:75:06:c7:09:3a:22:21:9b:49:b3:a1:d8: 4d:a3:8e:8a:c8:c1:7c:a8:ce:e8:3a:8a:98:12:6a: 0f:4e:8d:07:58:45:42:61:c6:aa:42:fe:a1:cd:30: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.93.0.0/16 193.187.124.0/22 IPv6: 2a0d:f0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61357 Signature Algorithm: sha256WithRSAEncryption 2c:9b:6b:98:cc:ce:52:ae:91:1a:cc:72:eb:74:b1:cf:de:ea: 28:dd:d9:57:31:2d:f0:5f:af:98:ad:24:3b:23:7e:86:ca:7f: cb:97:26:2f:5f:9f:4e:06:ee:91:3d:16:13:a4:dc:47:ba:3b: f6:e5:5e:39:f1:d3:81:52:80:cf:0c:e6:bc:c9:b4:b0:72:c9: 22:e5:4b:97:85:67:48:12:12:0f:8c:78:93:43:8b:4b:0a:53: 22:23:08:26:1a:e0:71:b4:fc:45:27:27:1a:ca:4e:46:d7:a1: 6a:24:0a:c8:27:c5:a6:72:0a:98:d8:94:10:f4:47:dd:2d:36: e8:0b:20:b2:19:d6:7c:c8:a5:f4:58:8a:13:8d:49:ad:f9:be: a6:23:99:9b:70:70:a0:fe:1a:c3:25:31:44:97:fa:ee:4b:e3: 7e:28:7f:3a:bc:1a:ef:10:2f:c8:97:72:9c:e1:27:2a:ab:f6: 26:34:9b:08:18:6d:e6:a3:ce:37:31:11:6a:0f:01:d2:7f:94: 24:5b:ed:9f:2b:c9:ad:96:b7:36:2d:d0:05:15:51:29:b0:32: 03:24:a9:dc:26:02:d2:5a:57:49:f5:65:65:ab:25:06:e8:2c: 2e:d4:6b:20:0a:28:8b:44:af:11:ae:7a:16:3d:59:9a:52:95: 71:64:36:9f -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5fv5TKLagjLl3nkgzBZzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjExN2FkYTNjYjk1MTVhNmQ4YTZkY2MxNWYyYjBiMWE3ZDliZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu4SHkWgM9F+VzEdhX8/gWwueDR/ uTHjQTmadmYM4UDxstXVd5ZfYfoGYtlxYfwCuJ+ZGpzki8GfO0YnUhGVU11PwR/d NFC4Ve5Q0HvrGwzZMH5FMs8+DgLyHwMUCtTsodbPIpaVFihunL/DXxlKuVyz3oo3 AoVCIX+u/zdI+rQ7QWle9/P4wzE2Tz5fvt/u8JhYAf1ztjOtlyxYBXMUaXctNBe4 aDZGlW2kGOWsN16a10bbXKNYKf2q+exDmBEzNh2p+OVANDeT6rVrIHAYLV4jyx51 BscJOiIhm0mzodhNo46KyMF8qM7oOoqYEmoPTo0HWEVCYcaqQv6hzTDDzwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFC8Reto8uVFabYptzBXysLGn2b4dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2VmZjQ0 ZC0yNGZkLTQzODQtOTUwNy03YTAzNGQxNzBiODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZWZmNDRk LTI0ZmQtNDM4NC05NTA3LTdhMDM0ZDE3MGI4NS8xL0x4RjYyank1VVZwdGltM01G Zkt3c2FmWnZoMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjARBAIAATALAwMAjV0DBALBu3wwDQQCAAIwBwMFAyoN8MAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAO+tMA0GCSqGSIb3DQEBCwUAA4IBAQAsm2uY zM5SrpEazHLrdLHP3uoo3dlXMS3wX6+YrSQ7I36Gyn/LlyYvX59OBu6RPRYTpNxH ujv25V458dOBUoDPDOa8ybSwcski5UuXhWdIEhIPjHiTQ4tLClMiIwgmGuBxtPxF Jycayk5G16FqJArIJ8WmcgqY2JQQ9EfdLTboCyCyGdZ8yKX0WIoTjUmt+b6mI5mb cHCg/hrDJTFEl/ruS+N+KH86vBrvEC/Il3Kc4Scqq/YmNJsIGG3mo843MRFqDwHS f5QkW+2fK8mtlrc2LdAFFVEpsDIDJKncJgLSWldJ9WVlqyUG6Cwu1GsgCiiLRK8R rnoWPVmaUpVxZDaf -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:07 2026 by rpki-client