This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer File: lkyqlAOgjTc7kLcQpW0-roE5T_A.cer (raw, json) Hash identifier: /5YuAJV3V38bLHTmDnhdVrN7pxjsYxA9tYSYiiuoU/w= Subject key identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC94428C7A618A9BAEB4AC33A57A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49774 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c9:44:28:c7:a6:18:a9:ba:eb:4a:c3:3a:57:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=964caa9403a08d373b90b710a56d3eae81394ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:30:15:7e:fa:de:85:08:2b:85:ef:37:4c: 1a:1d:91:c4:33:17:e6:66:aa:ae:b4:02:60:8f:78: 86:0b:c5:18:3d:2d:3d:1f:c8:28:ff:0a:53:b4:21: fa:14:05:3a:b0:25:81:ae:60:2c:ce:85:e8:c1:b6: 0c:9e:cb:60:3e:3e:19:a8:8f:92:83:4c:2d:65:c1: c4:64:25:84:34:8b:a1:9a:b0:14:7f:a6:58:85:2a: 4b:65:13:e7:91:1e:95:0b:cc:ea:a2:5a:e1:47:1e: 51:90:ba:7a:0a:f0:be:61:8d:ea:02:19:46:8c:0e: 1f:da:89:ac:fc:04:cb:18:33:d6:c5:71:41:74:98: f8:f7:9e:f7:19:6d:da:c9:e7:bf:4a:87:df:59:c0: e5:0c:1f:0b:4c:79:90:21:34:9c:80:69:65:8c:7c: 5d:fa:29:6b:97:3d:27:b8:41:01:7d:86:38:74:40: 0f:75:a5:84:7b:a3:d5:c6:58:b6:0f:49:68:0d:91: 07:b2:7e:f5:00:e3:6d:d1:86:3c:25:9a:16:c9:5a: ed:26:4d:c6:ee:78:ce:a5:c5:ac:ff:4e:5e:6a:37: ed:7e:1a:7d:0d:7e:e4:3a:30:18:49:df:0c:05:64: af:28:67:df:5c:59:e9:d1:31:96:37:c7:72:fe:1d: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49774 Signature Algorithm: sha256WithRSAEncryption 75:6d:47:93:0a:9f:f4:28:20:4d:64:75:7a:b1:29:63:50:cc: 76:3d:ad:e7:d9:aa:69:f6:81:98:3e:ab:b5:27:76:69:e1:d6: 74:3d:19:91:29:ce:ef:3d:d2:2d:1d:8c:7b:99:82:fd:58:11: 0d:2c:0f:9f:ce:82:6e:00:a6:04:28:b8:d2:fc:df:c6:7c:d3: dd:cb:09:c7:7c:e6:56:34:a9:9f:1a:68:0f:04:b1:fd:25:de: c1:3f:c0:66:61:9c:b1:bd:a8:2b:f0:e4:71:f0:75:9b:8e:58: bc:09:bd:86:a4:f4:74:9d:cb:d1:f3:9f:75:07:22:12:87:64: d3:87:9e:4c:b7:27:5b:f5:8a:c0:fa:03:91:bd:f1:41:08:24: 59:56:a5:02:36:11:85:9a:93:a0:7a:22:8f:25:f1:5c:ac:d4: 80:0a:93:3d:24:0e:9b:34:44:f7:04:4f:ae:b2:dc:cf:54:db: 54:8f:23:49:42:41:9f:af:1d:f1:ba:35:55:11:dc:6a:5f:b9: 4a:b6:40:db:43:5b:9c:ae:f5:0b:d0:ed:f4:dc:df:91:3b:f2: 0c:af:b8:bc:f9:d8:0e:6a:cc:74:e3:34:78:48:bd:10:fc:9f: 26:65:f1:04:71:4d:18:4c:d8:0a:37:31:d1:9d:16:3b:e5:73: 76:fd:06:a4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yslEKMemGKm660rDOleiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjRjYWE5NDAzYTA4ZDM3M2I5MGI3MTBhNTZkM2VhZTgxMzk0ZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaIwFX763oUIK4XvN0waHZHEMxfm ZqqutAJgj3iGC8UYPS09H8go/wpTtCH6FAU6sCWBrmAszoXowbYMnstgPj4ZqI+S g0wtZcHEZCWENIuhmrAUf6ZYhSpLZRPnkR6VC8zqolrhRx5RkLp6CvC+YY3qAhlG jA4f2oms/ATLGDPWxXFBdJj49573GW3ayee/SoffWcDlDB8LTHmQITScgGlljHxd +ilrlz0nuEEBfYY4dEAPdaWEe6PVxli2D0loDZEHsn71AONt0YY8JZoWyVrtJk3G 7njOpcWs/05eajftfhp9DX7kOjAYSd8MBWSvKGffXFnp0TGWN8dy/h0EAQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJZMqpQDoI03O5C3EKVtPq6BOU/wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzZiMGRj OS1jMWI5LTRmYWUtYWNkOS02YmZmMWMwZTY4YWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvNmIwZGM5 LWMxYjktNGZhZS1hY2Q5LTZiZmYxYzBlNjhhZS8xL2xreXFsQU9nalRjN2tMY1Fw VzAtcm9FNVRfQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDCbjANBgkqhkiG9w0BAQsFAAOCAQEAdW1Hkwqf9Cgg TWR1erEpY1DMdj2t59mqafaBmD6rtSd2aeHWdD0ZkSnO7z3SLR2Me5mC/VgRDSwP n86CbgCmBCi40vzfxnzT3csJx3zmVjSpnxpoDwSx/SXewT/AZmGcsb2oK/DkcfB1 m45YvAm9hqT0dJ3L0fOfdQciEodk04eeTLcnW/WKwPoDkb3xQQgkWValAjYRhZqT oHoijyXxXKzUgAqTPSQOmzRE9wRPrrLcz1TbVI8jSUJBn68d8bo1VRHcal+5SrZA 20NbnK71C9Dt9NzfkTvyDK+4vPnYDmrMdOM0eEi9EPyfJmXxBHFNGEzYCjcx0Z0W O+Vzdv0GpA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:08 2026 by rpki-client