This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer (raw, json) Hash identifier: Afburs3KaRmtw6WWPVTOXo/ym+S2xBEETMcVu2Zqcq4= Subject key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB0334B5082AE3F473F49037091002 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210506 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:03:34:b5:08:2a:e3:f4:73:f4:90:37:09:10:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=960e68c8389b09dc345464a400af276568e7f96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:0e:c3:77:1f:d9:12:dd:39:54:70:41:3d: d2:57:33:1f:3d:b7:68:59:0d:0f:bd:b3:5f:1f:7a: 0b:28:3c:2e:5c:af:fd:55:44:be:bd:ff:46:fa:9c: 94:b5:50:13:3b:95:f3:0d:81:6e:88:05:91:6d:82: 72:a8:d4:c6:fb:e3:59:27:e0:17:e4:8a:9e:84:79: 27:eb:8e:40:24:15:98:ad:22:22:75:9d:d7:49:1a: 8b:05:c4:0b:41:b7:03:e7:80:64:12:a8:5e:ad:86: 19:a5:19:5b:b3:2e:95:49:47:00:6a:fa:6c:49:70: 9e:b7:8d:15:c8:0c:db:90:e7:68:a6:19:d1:2a:ee: 7b:66:11:5c:09:aa:13:ab:0a:21:fc:ab:bc:eb:a7: 10:0f:4a:15:d7:84:97:5c:4a:04:c9:2f:9b:85:5f: 12:6c:02:0c:2d:04:f5:3a:d2:d2:0e:f3:de:48:c2: d7:3a:6e:b3:f6:31:31:4d:87:a2:3d:18:89:32:fc: a4:57:7a:29:59:3b:fd:5f:35:72:dc:2f:78:36:af: 7e:04:ed:8c:b4:3d:98:dc:72:09:ae:aa:82:33:50: b4:dd:8a:b2:6f:21:8d:e9:50:30:be:7d:a8:dd:0b: a6:46:e6:e8:cb:30:dd:cb:d0:1f:86:16:e4:3e:a7: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210506 Signature Algorithm: sha256WithRSAEncryption 9d:fa:89:7d:92:ae:0b:b7:19:3d:df:21:a6:1c:12:09:55:04: d5:0a:5b:0a:0f:0f:3c:8c:83:b3:0b:fc:76:15:24:13:72:d0: eb:19:bb:5c:6f:8c:5f:b9:b4:9a:22:6f:2c:bb:be:eb:55:84: 2c:0a:3c:e6:56:c2:fa:93:e3:70:ad:07:70:61:b1:9f:ca:0d: c3:d4:e8:b0:37:ff:36:91:c4:95:97:bf:43:ed:6b:41:c4:f4: d4:34:aa:06:82:09:10:c2:d9:7b:ea:dd:90:3b:b1:93:27:22: 72:fb:81:0a:2b:e1:2f:94:9b:11:b1:5f:46:b6:b2:0b:ff:be: 71:7d:5d:93:13:c7:98:5f:28:34:3b:18:d9:b9:c6:91:cd:14: 4f:31:a0:4d:34:34:73:d3:be:a9:e6:78:32:25:ae:a4:7a:6c: 74:82:8b:55:1b:4b:66:25:6e:3a:8f:97:ac:74:36:e8:c5:5d: 50:37:d0:b8:03:44:cb:7e:67:e6:7c:39:48:36:cb:52:0f:d2: ac:0a:51:14:c6:9a:ea:92:de:64:4c:e3:53:e3:4c:41:33:30: 6d:88:b7:be:16:2b:1d:8e:f2:07:2f:d7:7d:26:79:41:42:8d: a8:81:84:cf:07:ed:54:20:eb:27:25:9b:7d:03:98:29:1d:49: 19:bd:a6:4e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt26wM0tQgq4/Rz9JA3CRACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjBlNjhjODM4OWIwOWRjMzQ1NDY0YTQwMGFmMjc2NTY4ZTdmOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlcOw3cf2RLdOVRwQT3SVzMfPbdo WQ0PvbNfH3oLKDwuXK/9VUS+vf9G+pyUtVATO5XzDYFuiAWRbYJyqNTG++NZJ+AX 5IqehHkn645AJBWYrSIidZ3XSRqLBcQLQbcD54BkEqherYYZpRlbsy6VSUcAavps SXCet40VyAzbkOdophnRKu57ZhFcCaoTqwoh/Ku866cQD0oV14SXXEoEyS+bhV8S bAIMLQT1OtLSDvPeSMLXOm6z9jExTYeiPRiJMvykV3opWTv9XzVy3C94Nq9+BO2M tD2Y3HIJrqqCM1C03YqybyGN6VAwvn2o3QumRuboyzDdy9AfhhbkPqcJnwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJYOaMg4mwncNFRkpACvJ2Vo5/lqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzdiZDhm My00NzUzLTQyY2QtOGZmMy02MzMzMTg2NTg5YTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvN2JkOGYz LTQ3NTMtNDJjZC04ZmYzLTYzMzMxODY1ODlhOS8xL2xnNW95RGliQ2R3MFZHU2tB SzhuWldqbi1Xby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM2SjANBgkqhkiG9w0BAQsFAAOCAQEAnfqJfZKuC7cZ Pd8hphwSCVUE1QpbCg8PPIyDswv8dhUkE3LQ6xm7XG+MX7m0miJvLLu+61WELAo8 5lbC+pPjcK0HcGGxn8oNw9TosDf/NpHElZe/Q+1rQcT01DSqBoIJEMLZe+rdkDux kycicvuBCivhL5SbEbFfRrayC/++cX1dkxPHmF8oNDsY2bnGkc0UTzGgTTQ0c9O+ qeZ4MiWupHpsdIKLVRtLZiVuOo+XrHQ26MVdUDfQuANEy35n5nw5SDbLUg/SrApR FMaa6pLeZEzjU+NMQTMwbYi3vhYrHY7yBy/XfSZ5QUKNqIGEzwftVCDrJyWbfQOY KR1JGb2mTg== -----END CERTIFICATE-----Generated at Mon Jan 12 03:00:27 2026 by rpki-client