This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer File: lKOAb3QqvNXbEgT1KPTKbd6x6do.cer (raw, json) Hash identifier: U60zz8EUMrwIAsZgYoLljQu8B31eadmT+ptxUCpUtxk= Subject key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4BACE1A8D9097FEF63190EFFF8EDC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.41.232.0/22 IP: 2a01:5b60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ba:ce:1a:8d:90:97:fe:f6:31:90:ef:ff:8e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:b9:68:be:8e:c6:b7:30:e5:a3:7a:fa:fe: dc:01:63:65:ca:2f:42:18:70:3c:1d:90:fa:0f:e5: f3:e9:2c:bc:24:b6:75:af:6b:51:14:c7:01:07:46: ac:19:00:0d:33:d3:67:a2:0f:e9:b0:1b:d8:ed:65: a7:3e:eb:69:e1:02:4f:de:e2:02:92:78:d3:04:2f: 46:07:df:39:24:8c:dd:b9:08:97:ed:13:db:46:45: f9:cd:d3:84:e9:20:96:a3:37:5b:6d:3e:1c:39:df: 43:3b:e6:73:18:4f:4e:ec:bb:f4:ed:15:e8:a5:19: 08:45:5c:cd:fe:ae:09:e7:6c:72:e1:07:cb:31:ab: a7:7d:5d:48:38:ed:42:a1:98:de:af:43:fa:f2:dc: 0b:42:b1:77:fa:0a:70:e2:ee:54:7c:04:c4:12:7d: ca:a4:ca:db:17:e9:89:1a:d3:42:c4:4b:8f:0b:6a: 5e:31:c5:dc:44:35:b2:8e:55:7d:79:ae:04:04:05: ba:85:3c:d8:ab:21:ff:8e:db:36:33:5b:a2:2c:f1: 99:04:9c:71:11:79:1f:94:96:ef:b3:ef:8e:27:7a: dd:12:35:86:36:4b:39:ef:19:11:c2:a3:20:eb:81: a1:1d:e1:ff:57:e5:bb:c9:8e:d0:a6:31:ae:1f:a6: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.232.0/22 IPv6: 2a01:5b60::/32 Signature Algorithm: sha256WithRSAEncryption 8b:c1:1a:79:bc:84:f4:b6:af:d5:77:f4:0c:37:6a:b2:ce:17: 61:dc:d8:7f:5b:5f:02:a4:2a:2e:05:4e:28:d2:a2:9e:ba:67: 32:b8:d8:97:f5:b7:11:ff:06:c3:6b:90:6e:4a:77:5a:c2:b5: 96:97:53:3c:ba:db:e2:b2:cf:04:69:5b:7c:15:1c:63:ce:c8: 70:b1:70:b3:a2:1f:fd:82:92:a7:bc:de:34:60:77:07:7e:e5: 22:33:77:b2:83:ba:76:cd:e2:32:1a:cf:f5:6e:b7:50:ba:43: 4f:5e:13:86:e4:a4:6b:19:5e:06:67:af:60:57:f2:ae:e4:27: fa:a6:cf:45:be:c3:19:82:e9:ca:a3:64:e1:9f:bc:58:b9:44: 67:e6:3f:6c:99:7b:1a:2f:cc:d0:09:c9:4a:16:44:fa:42:54: 9d:53:7e:29:a2:9d:4a:34:da:a0:cd:b9:3f:59:0a:80:98:8d: 39:d2:44:8c:4d:61:d1:61:be:38:cb:26:9d:8e:af:06:e7:5a: 9a:0e:07:ae:2c:8c:4f:05:78:69:38:c8:db:8c:40:e9:e9:96: c8:4c:2f:5a:d3:53:6d:b7:7e:a4:34:13:62:ec:9f:b5:93:ed: f1:94:29:69:f6:23:c3:01:6c:fb:c3:4a:cb:9c:8f:66:b6:ec: 30:68:ca:80 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pLrOGo2Ql/72MZDv/47cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGEzODA2Zjc0MmFiY2Q1ZGIxMjA0ZjUyOGY0Y2E2ZGRlYjFlOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22O5aL6Oxrcw5aN6+v7cAWNlyi9C GHA8HZD6D+Xz6Sy8JLZ1r2tRFMcBB0asGQANM9Nnog/psBvY7WWnPutp4QJP3uIC knjTBC9GB985JIzduQiX7RPbRkX5zdOE6SCWozdbbT4cOd9DO+ZzGE9O7Lv07RXo pRkIRVzN/q4J52xy4QfLMaunfV1IOO1CoZjer0P68twLQrF3+gpw4u5UfATEEn3K pMrbF+mJGtNCxEuPC2peMcXcRDWyjlV9ea4EBAW6hTzYqyH/jts2M1uiLPGZBJxx EXkflJbvs++OJ3rdEjWGNks57xkRwqMg64GhHeH/V+W7yY7QpjGuH6bjMQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJSjgG90KrzV2xIE9Sj0ym3esenaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3L2M3YjUy NC1jNGQ5LTQxYTQtODhmYS1kOGJmNTIxYjI2YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYzdiNTI0 LWM0ZDktNDFhNC04OGZhLWQ4YmY1MjFiMjZiMC8xL2xLT0FiM1Fxdk5YYkVnVDFL UFRLYmQ2eDZkby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSnoMA0EAgACMAcDBQAqAVtgMA0GCSqGSIb3 DQEBCwUAA4IBAQCLwRp5vIT0tq/Vd/QMN2qyzhdh3Nh/W18CpCouBU4o0qKeumcy uNiX9bcR/wbDa5BuSndawrWWl1M8utviss8EaVt8FRxjzshwsXCzoh/9gpKnvN40 YHcHfuUiM3eyg7p2zeIyGs/1brdQukNPXhOG5KRrGV4GZ69gV/Ku5Cf6ps9FvsMZ gunKo2Thn7xYuURn5j9smXsaL8zQCclKFkT6QlSdU34pop1KNNqgzbk/WQqAmI05 0kSMTWHRYb44yyadjq8G51qaDgeuLIxPBXhpOMjbjEDp6ZbITC9a01Ntt36kNBNi 7J+1k+3xlClp9iPDAWz7w0rLnI9mtuwwaMqA -----END CERTIFICATE-----Generated at Sun Jan 11 20:09:59 2026 by rpki-client