This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer File: lmAVV4yUjzG_dKHh__1_o-NGAgY.cer (raw, json) Hash identifier: J2Z1refm1lsqs/0bBXpmbf1gy5oQhhAwEPvGOh6xnZU= Subject key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED26B9BA4A2D0F724F8528C96FFAA2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44909 IP: 195.66.124.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:26:b9:ba:4a:2d:0f:72:4f:85:28:c9:6f:fa:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=966015578c948f31bf74a1e1fffd7fa3e3460206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:98:7e:41:27:d6:41:8d:cc:34:63:9e:3d: 33:4a:7b:2a:cd:58:d3:cd:fa:24:36:9c:f3:98:77: 3a:26:4c:21:b3:1b:d0:e9:a0:34:f1:3e:27:a7:bb: 12:8a:7e:69:6d:bb:51:94:29:5b:7a:cf:e4:e4:b5: 53:c6:fa:ef:31:6a:24:8f:43:e9:bd:20:29:03:c1: f9:28:5e:00:08:59:90:ae:95:8b:dc:4e:f6:b2:cb: e3:84:60:c5:fe:1e:27:2f:57:d4:c3:71:a0:e1:49: 81:63:94:e0:21:df:fc:40:1c:c1:18:bd:3a:ea:46: 11:a2:b9:3e:84:22:da:e1:e0:a4:c5:5c:95:a2:43: a6:03:d9:9a:a3:2c:b4:67:e6:48:d0:c8:0e:42:98: c1:e8:ca:48:2c:4c:c2:bb:ad:2a:4e:3a:04:2e:32: 31:ae:44:12:8c:e4:0f:27:d8:bb:71:f3:dd:0b:c1: 92:22:38:08:aa:d0:85:54:b8:be:2b:d6:ac:ca:bd: 08:f9:a2:a5:9a:3e:84:ae:86:52:e9:9e:79:f9:c7: cb:98:28:04:45:44:4e:38:b6:1b:41:51:09:69:ab: 16:02:42:e9:e8:e9:14:96:2a:4b:1f:83:ae:d6:e2: 91:02:94:38:2f:cc:bb:bf:21:3a:62:dd:86:e4:66: cc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.124.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44909 Signature Algorithm: sha256WithRSAEncryption 3c:83:7f:68:e4:25:3f:9d:8f:8c:98:e7:77:81:7d:db:1f:51: f5:8c:18:ef:40:70:63:cb:87:4c:df:c2:e3:41:de:47:d9:a9: 63:e9:c0:39:71:b8:d3:73:1d:91:6b:f6:ed:7d:d5:6e:f7:8f: d1:32:fa:5e:11:14:68:79:8d:36:8d:11:42:a9:37:91:15:01: 84:8d:52:06:19:0d:a4:6b:67:6f:85:06:cc:7c:f2:a7:98:69: 3b:bd:79:4b:6e:cc:67:65:19:0d:16:d4:b4:f3:35:87:8a:94: 57:98:9d:fc:d9:b6:8e:b7:cc:57:9f:e4:18:b5:92:5c:34:ad: eb:a2:3b:61:0e:b6:b4:43:50:32:2a:fc:b9:5b:be:33:c0:12: 5e:41:0d:da:ab:d4:6e:14:35:3b:5d:cf:3b:0e:f9:b5:41:41: 41:5d:21:1b:5c:bb:6d:0d:61:9e:c7:89:a9:15:ef:75:a4:73: fa:b4:ce:4d:54:cf:03:d9:aa:90:9a:73:d5:87:86:db:66:0f: ee:f2:a0:1d:d0:4d:50:06:b9:2f:63:80:fe:64:f8:a7:8c:20: 37:af:0c:20:6b:ec:37:68:cc:bf:a6:03:9b:e7:5c:29:e0:ad: b9:12:b5:4f:97:61:d7:7d:27:51:96:be:6a:c5:99:1b:40:97: 47:7c:3c:e4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57Sa5ukotD3JPhSjJb/qiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjYwMTU1NzhjOTQ4ZjMxYmY3NGExZTFmZmZkN2ZhM2UzNDYwMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMiYfkEn1kGNzDRjnj0zSnsqzVjT zfokNpzzmHc6JkwhsxvQ6aA08T4np7sSin5pbbtRlClbes/k5LVTxvrvMWokj0Pp vSApA8H5KF4ACFmQrpWL3E72ssvjhGDF/h4nL1fUw3Gg4UmBY5TgId/8QBzBGL06 6kYRork+hCLa4eCkxVyVokOmA9maoyy0Z+ZI0MgOQpjB6MpILEzCu60qTjoELjIx rkQSjOQPJ9i7cfPdC8GSIjgIqtCFVLi+K9asyr0I+aKlmj6EroZS6Z55+cfLmCgE RUROOLYbQVEJaasWAkLp6OkUlipLH4Ou1uKRApQ4L8y7vyE6Yt2G5GbM5wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJZgFVeMlI8xv3Sh4f/9f6PjRgIGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwL2I1MDEx MC0wMmIwLTQyMzUtOTg0Zi0yZDgwY2IyNTU3OWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvYjUwMTEw LTAyYjAtNDIzNS05ODRmLTJkODBjYjI1NTc5YS8xL2xtQVZWNHlVanpHX2RLSGhf XzFfby1OR0FnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw0J8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCvbTANBgkqhkiG9w0BAQsFAAOCAQEAPIN/aOQlP52PjJjnd4F92x9R9YwY70Bw Y8uHTN/C40HeR9mpY+nAOXG403MdkWv27X3VbveP0TL6XhEUaHmNNo0RQqk3kRUB hI1SBhkNpGtnb4UGzHzyp5hpO715S27MZ2UZDRbUtPM1h4qUV5id/Nm2jrfMV5/k GLWSXDSt66I7YQ62tENQMir8uVu+M8ASXkEN2qvUbhQ1O13POw75tUFBQV0hG1y7 bQ1hnseJqRXvdaRz+rTOTVTPA9mqkJpz1YeG22YP7vKgHdBNUAa5L2OA/mT4p4wg N68MIGvsN2jMv6YDm+dcKeCtuRK1T5dh130nUZa+asWZG0CXR3w85A== -----END CERTIFICATE-----Generated at Sun Jan 11 14:34:05 2026 by rpki-client