This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer (raw, json) Hash identifier: rqJxakqSEyLZtoUxAVGIHbs4SjUOSLdb19KF3iwCQZo= Subject key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79105A4E924BACEA174CEBE005C2CD23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.66.196.0/22 IP: 2a03:21e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5a:4e:92:4b:ac:ea:17:4c:eb:e0:05:c2:cd:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:dc:66:c5:e1:5a:8c:f7:b3:50:0c:f5:7d: 58:d3:92:a5:d9:d2:03:c3:8f:e7:ac:ae:1f:02:29: cf:32:fa:de:c7:74:4f:42:b2:af:60:38:52:a5:74: 87:73:15:8e:43:20:3c:96:5c:e9:de:cb:34:b2:f8: f2:6d:ec:8f:10:a3:29:39:21:7e:e0:35:15:6b:59: 34:b9:70:bc:fc:47:e8:7a:97:dd:29:e9:5e:28:80: 1a:f0:79:1a:53:b0:c5:d2:04:da:03:99:23:92:8d: a1:71:f8:80:f0:8f:f6:42:3b:9d:39:39:96:7e:ca: e6:f9:f1:b2:e2:cf:9b:f0:e4:83:25:ac:cb:07:3b: 3e:e9:5e:48:e0:b8:e0:27:b0:cb:1e:33:ab:df:f6: 41:c1:82:17:e9:97:2a:40:70:5f:a9:6b:6f:d9:bc: 7b:d7:35:44:6f:ea:5e:d8:21:8c:e6:4d:23:d9:6b: 32:17:ca:70:da:c6:6c:23:3a:19:f3:64:c5:16:54: f3:95:ee:be:78:c0:3e:9a:f2:2e:09:33:27:1c:fd: 8d:dd:79:16:9e:2a:e8:12:03:9c:74:06:c0:90:88: 14:b6:39:37:e6:d3:9c:77:36:91:8d:a2:89:50:f5: 1f:a4:72:c7:13:c9:87:a7:e4:23:f4:7b:74:4e:7f: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.196.0/22 IPv6: 2a03:21e0::/32 Signature Algorithm: sha256WithRSAEncryption 9f:e8:c9:88:c0:ef:c5:12:2c:a5:1a:6d:84:da:35:b2:3e:97: ca:cb:93:11:79:4c:e3:f9:c4:ef:9a:f7:e4:cb:8b:00:81:06: df:cd:0a:1f:e6:10:20:bc:82:ff:53:b6:4a:db:74:a9:d7:b7: d6:9a:74:9d:f6:74:16:f9:c7:95:0a:10:34:81:df:f6:ab:23: 50:1a:de:0a:73:15:5e:3e:a0:26:91:b9:ca:2c:a6:18:4b:57: 23:2a:30:37:2e:96:c2:54:8c:d2:98:10:19:14:29:71:2d:72: a2:6f:7a:0a:c5:62:b1:ef:70:a7:a4:23:d6:32:e4:51:07:b6: 74:33:aa:51:48:c7:c5:66:7e:db:6d:0e:67:6e:05:6e:b4:00: ef:fe:f6:c8:13:7f:5f:c1:f2:fa:fd:ea:f1:af:b3:5f:54:5f: cf:93:e3:a3:f6:2d:c6:1a:3b:83:d9:6f:ec:00:a5:f4:be:07: 3d:71:01:04:01:5a:ab:df:57:85:99:ed:06:40:fb:d7:8c:6d: cf:5a:eb:25:79:86:11:e1:04:70:e2:ad:5b:29:77:46:25:8d: 9b:0c:51:98:2f:8e:8d:35:93:59:00:a7:7a:30:5a:b8:24:c3: b1:cb:2c:37:0f:60:34:1f:69:38:8e:79:f3:c3:fd:3e:85:2b: e6:aa:d6:26 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EFpOkkus6hdM6+AFws0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTQ2MWZiZWUxYzA2ZTNlYWZhYzBmMmY5NTI1M2NhODYwM2FjY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+ncZsXhWoz3s1AM9X1Y05Kl2dID w4/nrK4fAinPMvrex3RPQrKvYDhSpXSHcxWOQyA8llzp3ss0svjybeyPEKMpOSF+ 4DUVa1k0uXC8/EfoepfdKeleKIAa8HkaU7DF0gTaA5kjko2hcfiA8I/2QjudOTmW fsrm+fGy4s+b8OSDJazLBzs+6V5I4LjgJ7DLHjOr3/ZBwYIX6ZcqQHBfqWtv2bx7 1zVEb+pe2CGM5k0j2WsyF8pw2sZsIzoZ82TFFlTzle6+eMA+mvIuCTMnHP2N3XkW niroEgOcdAbAkIgUtjk35tOcdzaRjaKJUPUfpHLHE8mHp+Qj9Ht0Tn+viQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJVGH77hwG4+r6wPL5UlPKhgOszyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2U1Y2U4 Zi01ZWEwLTQ3OWYtOTNlOS04OWQ1YzYwZjUwMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZTVjZThm LTVlYTAtNDc5Zi05M2U5LTg5ZDVjNjBmNTAxZi8xL2xVWWZ2dUhBYmo2dnJBOHZs U1U4cUdBNnpQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuULEMA0EAgACMAcDBQAqAyHgMA0GCSqGSIb3 DQEBCwUAA4IBAQCf6MmIwO/FEiylGm2E2jWyPpfKy5MReUzj+cTvmvfky4sAgQbf zQof5hAgvIL/U7ZK23Sp17fWmnSd9nQW+ceVChA0gd/2qyNQGt4KcxVePqAmkbnK LKYYS1cjKjA3LpbCVIzSmBAZFClxLXKib3oKxWKx73CnpCPWMuRRB7Z0M6pRSMfF Zn7bbQ5nbgVutADv/vbIE39fwfL6/erxr7NfVF/Pk+Oj9i3GGjuD2W/sAKX0vgc9 cQEEAVqr31eFme0GQPvXjG3PWusleYYR4QRw4q1bKXdGJY2bDFGYL46NNZNZAKd6 MFq4JMOxyyw3D2A0H2k4jnnzw/0+hSvmqtYm -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:09 2026 by rpki-client