This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer (raw, json) Hash identifier: WoSyJUBkfCCuUEs8eYdNbW04fTvtxW33ZHGSkDO24yE= Subject key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6EE246AE8D6BE7EFE30523FC70F5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.235.139.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ee:24:6a:e8:d6:be:7e:fe:30:52:3f:c7:0f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:16:b9:04:a6:06:00:c8:0d:91:d2:d3:aa: c5:32:63:d8:ad:9a:4c:a6:fa:9f:c4:a1:3d:e4:4f: d5:55:7e:2e:dc:5d:cf:16:0d:54:62:f2:98:34:a4: bf:00:dc:7e:23:70:ae:c9:69:1b:77:9d:b6:b7:35: ef:4c:ba:f2:f9:d1:62:5a:34:5b:b8:08:ea:2a:2d: fa:03:d9:00:ee:8a:dd:18:e3:e3:c4:92:59:57:28: cc:ab:15:c3:a5:c6:49:37:6e:a3:d2:ec:a8:11:21: 47:f0:54:1b:1c:cb:be:e2:2d:ee:3a:8d:ff:55:e1: 87:67:41:b1:34:03:05:47:1d:75:b4:c8:90:9d:54: 4b:dd:e5:7d:a7:56:ac:b0:f8:51:19:91:42:70:4f: 33:80:be:32:07:f5:5c:10:4d:33:9a:f5:9b:bb:c2: 21:41:eb:bb:1b:c2:c6:c2:5f:71:a1:4b:ca:9b:cb: b5:29:de:c5:24:f8:21:fd:d9:cf:06:b1:6d:96:bd: f5:7e:6f:cd:f9:b9:44:87:33:2d:05:08:ab:93:0d: f6:58:ea:55:7a:6e:5b:60:d0:70:f2:24:ca:f4:41: 34:99:26:41:8f:56:81:a8:d0:c6:38:fb:7d:d7:43: 3e:73:8e:72:38:56:b1:d1:57:91:a9:28:14:91:fc: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.139.0/24 Signature Algorithm: sha256WithRSAEncryption 50:8b:0a:fb:4f:e2:2f:6f:bd:92:1c:08:ab:82:9b:b1:0d:ad: 1d:1f:6d:b1:12:37:bf:30:20:85:0e:66:0a:85:73:4d:2f:bd: e6:e6:cb:ff:7b:1d:23:f7:29:11:74:66:59:a8:8d:3e:49:c4: fb:72:dc:4e:17:67:75:50:ca:ed:34:5d:0a:bc:6f:57:e1:6c: 47:6c:3a:d0:fa:dd:80:30:ac:b5:91:58:cc:24:d4:4a:bf:30: 9d:af:a5:91:7a:61:f2:31:51:11:d4:36:6f:b3:20:ea:63:3c: 52:9e:cf:b1:c2:8e:4b:f3:af:b9:1d:1f:cd:07:b6:72:c1:3b: c3:ba:b4:12:4e:6f:ee:75:b2:ef:d8:db:e8:de:d7:0d:ac:44: f4:0e:2d:1c:b4:cf:cf:9a:d9:46:f0:76:9e:a7:74:21:02:98: 5f:9f:1f:99:3f:2d:af:85:3d:4d:de:35:34:b5:35:c7:c5:a5: 08:35:67:e1:6d:8d:bc:97:66:40:1c:d0:c3:c3:7a:e3:65:f0: 84:ac:d0:46:32:f3:86:00:6f:8a:6b:e4:4d:b6:bc:2f:d6:07: 7c:43:15:7a:94:23:bf:28:9c:ce:f3:dc:f9:fd:cf:6f:42:6f: 2b:1f:6d:75:fa:5b:b4:04:11:aa:f4:eb:13:95:6b:fb:25:5d: cb:b6:c6:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pu4kaujWvn7+MFI/xw9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWNiMThjN2VjZTZiZGRjOTU3MGYzN2ZmNzg2NjBiNThlNmMyMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb4WuQSmBgDIDZHS06rFMmPYrZpM pvqfxKE95E/VVX4u3F3PFg1UYvKYNKS/ANx+I3CuyWkbd522tzXvTLry+dFiWjRb uAjqKi36A9kA7ordGOPjxJJZVyjMqxXDpcZJN26j0uyoESFH8FQbHMu+4i3uOo3/ VeGHZ0GxNAMFRx11tMiQnVRL3eV9p1assPhRGZFCcE8zgL4yB/VcEE0zmvWbu8Ih Qeu7G8LGwl9xoUvKm8u1Kd7FJPgh/dnPBrFtlr31fm/N+blEhzMtBQirkw32WOpV em5bYNBw8iTK9EE0mSZBj1aBqNDGOPt910M+c45yOFax0VeRqSgUkfyMOQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJXLGMfs5r3clXDzf/eGYLWObCBEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzhmNGEy Yi00OTJjLTQzMzEtODRmOC0wMjZlMGE0Y2NhYWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvOGY0YTJi LTQ5MmMtNDMzMS04NGY4LTAyNmUwYTRjY2FhYS8xL2xjc1l4LXptdmR5VmNQTl85 NFpndFk1c0lFUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+uLMA0GCSqGSIb3DQEBCwUAA4IBAQBQiwr7 T+Ivb72SHAirgpuxDa0dH22xEje/MCCFDmYKhXNNL73m5sv/ex0j9ykRdGZZqI0+ ScT7ctxOF2d1UMrtNF0KvG9X4WxHbDrQ+t2AMKy1kVjMJNRKvzCdr6WRemHyMVER 1DZvsyDqYzxSns+xwo5L86+5HR/NB7ZywTvDurQSTm/udbLv2Nvo3tcNrET0Di0c tM/PmtlG8Haep3QhAphfnx+ZPy2vhT1N3jU0tTXHxaUINWfhbY28l2ZAHNDDw3rj ZfCErNBGMvOGAG+Ka+RNtrwv1gd8QxV6lCO/KJzO89z5/c9vQm8rH211+lu0BBGq 9OsTlWv7JV3LtsbZ -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:36 2026 by rpki-client