This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer File: rLVLzEkpGh8yt86tTylogtBTFJI.cer (raw, json) Hash identifier: mLw8Fk/EBpbT5c8APdhMIElk+vh9ZqJsLcI8h7QZaHU= Subject key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA522C0BA123CA1EA287CC3DEE12511 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59554 IP: 5.178.112.0/21 IP: 185.105.76.0/22 IP: 2a01:9b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:22:c0:ba:12:3c:a1:ea:28:7c:c3:de:e1:25:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acb54bcc49291a1f32b7cead4f296882d0531492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:3f:3a:7b:85:64:0a:6d:a3:c1:e2:77:17: 45:8d:78:f3:68:e8:c4:10:53:ff:35:6a:6f:55:20: d5:5e:4a:36:c3:54:b4:d8:7e:63:85:c2:b3:87:55: 77:bc:25:77:a8:ef:bb:3d:75:f4:c5:3a:44:89:32: f3:23:a8:7c:d8:8c:a3:78:5c:a0:96:61:e0:a7:7c: 4b:f9:cf:37:8c:62:87:af:e2:2d:78:a3:11:1b:af: ad:9f:1c:f4:3a:1b:3d:cc:a5:c4:c6:c0:53:05:32: c0:54:17:99:8a:77:ab:fd:39:6f:08:b9:05:d3:1e: fd:a6:6c:28:36:9d:53:45:55:c1:92:dd:3c:9c:7e: 1d:17:36:f8:55:d2:08:5a:e2:ad:10:eb:93:b9:2e: 0d:2b:58:6f:fd:3c:8b:19:26:3a:c7:85:37:0f:35: 6d:89:29:7e:cf:cb:b3:08:e7:f3:18:96:be:39:52: 4b:59:f7:9b:68:af:2e:3a:aa:b5:a1:ef:01:8c:e4: 25:b7:f9:02:ac:fb:36:74:25:61:33:af:b4:94:22: 8a:86:8b:ed:e7:dd:0c:e4:1e:91:92:68:03:7e:02: eb:72:24:7b:a3:33:e9:40:ce:be:ff:6f:84:f2:df: 79:fb:ea:47:2b:69:05:7c:ac:9f:24:91:09:c1:7b: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.112.0/21 185.105.76.0/22 IPv6: 2a01:9b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59554 Signature Algorithm: sha256WithRSAEncryption 40:bc:0f:30:3c:b2:84:57:96:6f:b9:0d:06:dd:e9:2b:7b:c4: f0:50:33:53:47:9d:35:a0:9e:33:87:01:40:95:d9:38:b5:2d: c7:57:50:37:ab:c1:3d:dd:e2:8c:c3:f9:d3:90:8b:bc:db:50: 86:32:89:45:33:2e:dd:fd:0c:28:db:e0:e9:1a:fc:0c:46:08: 0f:25:83:d4:64:9d:78:c8:47:e9:39:9f:fd:0f:fa:bb:d1:75: 68:93:3d:f9:6a:46:6e:a7:1b:c4:4a:37:31:b3:30:99:bc:27: dd:3b:d2:44:e3:02:db:28:f7:e3:87:8f:1d:f5:63:f9:fa:30: f6:5f:41:b2:4b:3f:12:ef:a2:0c:bc:9f:d4:3b:7e:e2:9c:ab: fe:c6:2e:62:ea:1a:99:e0:ba:6a:f2:2b:4f:6f:4c:4e:7b:b7: d5:8b:c1:9d:dd:81:cb:a2:cb:5b:89:f5:a5:29:42:56:66:eb: 24:6b:8f:0f:8b:b4:8a:ce:50:bc:da:23:67:16:88:b0:86:7e: 55:f1:f3:6a:a3:d0:47:e1:11:07:2b:1f:9b:28:23:2f:b6:2d: da:28:43:1b:90:40:f9:9c:1f:92:e5:e8:09:96:a0:8b:d0:30: ad:af:60:2f:3c:ed:91:de:be:b3:38:96:66:9c:29:c3:04:86: de:02:0b:a6 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pSLAuhI8oeoofMPe4SURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2I1NGJjYzQ5MjkxYTFmMzJiN2NlYWQ0ZjI5Njg4MmQwNTMxNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr44/OnuFZApto8HidxdFjXjzaOjE EFP/NWpvVSDVXko2w1S02H5jhcKzh1V3vCV3qO+7PXX0xTpEiTLzI6h82IyjeFyg lmHgp3xL+c83jGKHr+IteKMRG6+tnxz0Ohs9zKXExsBTBTLAVBeZiner/TlvCLkF 0x79pmwoNp1TRVXBkt08nH4dFzb4VdIIWuKtEOuTuS4NK1hv/TyLGSY6x4U3DzVt iSl+z8uzCOfzGJa+OVJLWfebaK8uOqq1oe8BjOQlt/kCrPs2dCVhM6+0lCKKhovt 590M5B6RkmgDfgLrciR7ozPpQM6+/2+E8t95++pHK2kFfKyfJJEJwXsPKwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKy1S8xJKRofMrfOrU8paILQUxSSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1L2NkMmJk ZC1kM2M0LTRkNjAtYjA5Ni1hZjNhNjg1ZDU3OWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvY2QyYmRk LWQzYzQtNGQ2MC1iMDk2LWFmM2E2ODVkNTc5Zi8xL3JMVkx6RWtwR2g4eXQ4NnRU eWxvZ3RCVEZKSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDBbJwAwQCuWlMMA0EAgACMAcDBQAqAZtAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDoojANBgkqhkiG9w0BAQsFAAOCAQEAQLwP MDyyhFeWb7kNBt3pK3vE8FAzU0edNaCeM4cBQJXZOLUtx1dQN6vBPd3ijMP505CL vNtQhjKJRTMu3f0MKNvg6Rr8DEYIDyWD1GSdeMhH6Tmf/Q/6u9F1aJM9+WpGbqcb xEo3MbMwmbwn3TvSROMC2yj344ePHfVj+fow9l9Bsks/Eu+iDLyf1Dt+4pyr/sYu YuoameC6avIrT29MTnu31YvBnd2By6LLW4n1pSlCVmbrJGuPD4u0is5QvNojZxaI sIZ+VfHzaqPQR+ERBysfmygjL7Yt2ihDG5BA+ZwfkuXoCZagi9Awra9gLzztkd6+ sziWZpwpwwSG3gILpg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:43 2026 by rpki-client