This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer File: lCKVhDGvU0e_2A41UD3bSOcc9NY.cer (raw, json) Hash identifier: n149DELOSYYbBmgzXUMv5VAtAXjqk7ejFV3FPFie4ck= Subject key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36B309D1AA673A7551AA70BAE9A137 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61206 IP: 193.169.213.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b3:09:d1:aa:67:3a:75:51:aa:70:ba:e9:a1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:96:af:ec:48:8d:c3:fb:bc:fa:ea:96:77: e6:04:e3:d7:84:af:42:f6:dd:b8:00:95:c4:73:c3: 1f:ef:37:9a:4b:f4:d2:dc:54:44:5d:89:ef:ea:06: 78:7f:2f:5a:a1:81:80:13:bb:3e:d6:33:74:37:75: 09:ed:77:29:11:15:a8:65:64:cd:7e:38:4d:e4:9d: f5:40:91:29:a4:71:1a:86:76:18:ed:9a:e2:7b:dc: b4:69:18:b5:6f:c2:18:1b:dd:2e:17:41:5e:b3:d4: b8:4f:72:92:7b:4a:69:53:ec:a5:1a:dd:cd:10:16: ad:8c:83:79:d3:5e:63:5e:92:c7:70:15:be:bc:2e: 36:d0:09:40:75:d5:23:8b:0c:9f:06:20:a4:b2:4b: c0:17:30:bf:38:09:bb:bf:3f:8a:64:6e:dd:3d:d8: 59:bd:56:ad:ce:aa:f0:d0:79:e0:b9:a3:2b:2c:a5: 7d:86:fa:d4:54:ed:0b:11:a2:55:98:23:a4:74:2e: 17:67:c1:76:fa:61:a2:de:f6:d9:21:09:65:48:37: 12:e2:e5:7d:ba:4f:88:3c:28:a0:a7:f0:9e:a8:d1: 0b:66:96:21:c5:0a:23:a3:e3:fe:a2:b3:e1:d6:e3: 02:81:68:b0:20:13:27:c7:d9:e9:ee:e9:5e:b6:cd: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.213.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61206 Signature Algorithm: sha256WithRSAEncryption 80:cb:d7:79:bd:92:03:29:99:ed:0b:07:cb:d2:9c:d0:f4:06: 70:07:c4:e2:c6:d9:ec:55:da:1f:d2:de:03:25:e7:e4:f8:00: 75:f0:27:aa:c2:fb:08:84:ba:a2:2a:18:9e:c7:e5:92:3b:05: ab:c1:b2:de:24:13:c5:da:af:92:9e:33:76:eb:5d:d5:09:3e: 6b:72:de:ca:c0:34:cc:85:01:e5:36:08:a0:6d:98:28:d9:c1: 72:fa:99:09:01:06:e9:d7:d5:03:96:49:ed:61:ce:d8:4b:47: db:a4:a2:de:ff:d9:86:57:a5:85:ed:85:5d:13:27:6b:77:18: 55:93:a7:07:96:78:f5:8d:bf:db:b0:29:18:c9:a2:0c:e0:0c: e4:a7:4f:9f:98:ea:91:ca:b1:bf:43:66:b2:63:92:87:5b:3f: bb:88:2c:50:28:9d:87:7b:af:bc:cd:f0:4b:79:38:86:c2:64: a3:33:e5:32:09:c2:9e:88:b4:23:35:60:c7:ca:a4:b6:65:1c: ba:f1:4e:e2:9f:5c:72:2f:22:49:1b:cd:8d:85:6c:de:55:82: cb:cf:9e:01:6f:fa:03:ae:fe:99:f9:84:9e:bf:b7:ea:57:56: 7f:a8:00:64:f1:91:d9:5a:60:c7:a5:c9:99:aa:66:1c:fb:be: f4:41:a2:36 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NrMJ0apnOnVRqnC66aE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDIyOTU4NDMxYWY1MzQ3YmZkODBlMzU1MDNkZGI0OGU3MWNmNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXGWr+xIjcP7vPrqlnfmBOPXhK9C 9t24AJXEc8Mf7zeaS/TS3FREXYnv6gZ4fy9aoYGAE7s+1jN0N3UJ7XcpERWoZWTN fjhN5J31QJEppHEahnYY7Zrie9y0aRi1b8IYG90uF0Fes9S4T3KSe0ppU+ylGt3N EBatjIN5015jXpLHcBW+vC420AlAddUjiwyfBiCkskvAFzC/OAm7vz+KZG7dPdhZ vVatzqrw0HnguaMrLKV9hvrUVO0LEaJVmCOkdC4XZ8F2+mGi3vbZIQllSDcS4uV9 uk+IPCigp/CeqNELZpYhxQojo+P+orPh1uMCgWiwIBMnx9np7ulets02OwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJQilYQxr1NHv9gONVA920jnHPTWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzc1NTQ2 OC0yYWNjLTRlOWItYTVlYS1lOGEwODNmNTZhY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNzU1NDY4 LTJhY2MtNGU5Yi1hNWVhLWU4YTA4M2Y1NmFjZS8xL2xDS1ZoREd2VTBlXzJBNDFV RDNiU09jYzlOWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwanVMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDvFjANBgkqhkiG9w0BAQsFAAOCAQEAgMvXeb2SAymZ7QsHy9Kc0PQGcAfE4sbZ 7FXaH9LeAyXn5PgAdfAnqsL7CIS6oioYnsflkjsFq8Gy3iQTxdqvkp4zdutd1Qk+ a3LeysA0zIUB5TYIoG2YKNnBcvqZCQEG6dfVA5ZJ7WHO2EtH26Si3v/Zhlelhe2F XRMna3cYVZOnB5Z49Y2/27ApGMmiDOAM5KdPn5jqkcqxv0NmsmOSh1s/u4gsUCid h3uvvM3wS3k4hsJkozPlMgnCnoi0IzVgx8qktmUcuvFO4p9cci8iSRvNjYVs3lWC y8+eAW/6A67+mfmEnr+36ldWf6gAZPGR2Vpgx6XJmapmHPu+9EGiNg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:40 2026 by rpki-client