This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.cer (raw, json) Hash identifier: ZeTGCMJ502jSuiCXIFkWYE6fpv4Eseri3gg6T0ky1do= Subject key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66195067EF0768B1B6FDE8DBDFA82 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.23.8.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:95:06:7e:f0:76:8b:1b:6f:de:8d:bd:fa:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d381b701705190b9ce9d1b184535384e71ca3165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:f0:b2:c8:53:73:3a:16:61:4a:14:5d:5b: 46:46:f2:93:d6:1c:bc:82:a4:29:0e:86:15:95:91: e7:e9:32:1f:7d:c9:9c:5e:28:92:e2:c8:60:be:7c: b8:47:76:29:80:45:52:76:1d:9a:64:bf:e8:b1:bb: de:8b:c3:ac:08:e3:b9:85:4c:b6:62:99:10:9a:4e: 53:db:bf:da:51:6b:db:7c:60:38:38:15:eb:48:1c: 4a:96:a3:87:cb:ed:ce:c7:d0:82:ab:76:b3:47:89: 14:eb:43:87:b0:b2:60:99:21:53:6b:5e:5c:82:c0: 94:46:a0:9a:77:da:d0:c9:1e:08:31:14:e9:6a:b5: 09:ab:88:ff:6d:eb:cc:38:c6:1b:67:44:42:97:f0: e7:6d:ac:cc:d1:23:52:a3:64:f0:db:27:37:16:d7: b3:c1:c4:b4:f0:e2:37:83:07:16:3b:0e:c7:b9:54: d0:d5:10:58:e2:7c:3f:3f:f6:38:5b:a1:0e:9f:30: a7:f0:b7:f7:9e:07:ce:b1:05:63:f8:04:37:f9:f3: a7:39:1e:4c:d3:e5:b1:93:06:56:f0:11:88:95:af: 34:a7:9a:5e:9c:ba:9c:4d:a3:23:d8:ad:77:7a:c8: dd:81:23:60:2d:b4:f7:79:1e:62:81:a9:da:c1:15: 06:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.8.0/21 Signature Algorithm: sha256WithRSAEncryption 43:3a:fd:22:69:88:0f:48:b4:d5:44:63:9a:8a:ff:83:9a:ed: fc:96:e3:a2:4b:46:37:56:df:29:82:27:50:1a:c2:07:3f:c4: 50:62:01:a3:ae:ad:6d:88:82:81:02:d8:2b:db:d7:e5:05:15: 59:ff:b7:79:77:55:71:9f:44:d8:4b:51:f5:de:c4:65:6f:df: 03:2d:c9:e2:2d:e6:b1:ab:c7:e1:6b:2e:4d:2d:06:dc:a6:fe: 8d:27:ce:10:6e:20:40:b2:fd:e6:bb:7e:76:75:46:f0:5a:8b: 44:9c:9a:50:7f:48:6a:7a:e3:74:5b:29:35:64:85:6f:de:a1: 40:cf:54:58:15:34:6d:bb:b5:b4:f2:19:4a:59:00:04:47:36: 62:16:04:62:ab:8d:83:4b:0d:91:4b:5f:e3:c3:2f:09:e4:de: c4:e6:9e:2c:29:a6:83:8c:5f:0b:f1:79:4a:49:ba:ef:85:0d: 3a:2c:a3:3b:81:fb:fb:a3:60:bc:f9:95:bb:c7:d6:1c:0a:6b: 63:16:e3:15:14:42:5b:d4:52:e2:8b:c5:62:6f:6f:de:36:c2: b8:a9:04:82:ea:81:23:81:eb:e2:3d:e7:08:c4:cc:3e:e3:5b: 91:b5:71:cd:a6:1d:59:e5:33:35:f3:32:31:3f:a5:3d:96:80: e0:0b:80:51 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xmGVBn7wdosbb96NvfqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzgxYjcwMTcwNTE5MGI5Y2U5ZDFiMTg0NTM1Mzg0ZTcxY2EzMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyjwsshTczoWYUoUXVtGRvKT1hy8 gqQpDoYVlZHn6TIffcmcXiiS4shgvny4R3YpgEVSdh2aZL/osbvei8OsCOO5hUy2 YpkQmk5T27/aUWvbfGA4OBXrSBxKlqOHy+3Ox9CCq3azR4kU60OHsLJgmSFTa15c gsCURqCad9rQyR4IMRTparUJq4j/bevMOMYbZ0RCl/DnbazM0SNSo2Tw2yc3Ftez wcS08OI3gwcWOw7HuVTQ1RBY4nw/P/Y4W6EOnzCn8Lf3ngfOsQVj+AQ3+fOnOR5M 0+WxkwZW8BGIla80p5penLqcTaMj2K13esjdgSNgLbT3eR5iganawRUGWwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNOBtwFwUZC5zp0bGEU1OE5xyjFlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzYwM2M1 OC0xMDAyLTQwNjktODkxNy03MDU0ZWIyYzRjMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjAzYzU4 LTEwMDItNDA2OS04OTE3LTcwNTRlYjJjNGMwMC8xLzA0RzNBWEJSa0xuT25Sc1lS VFU0VG5IS01XVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwRcIMA0GCSqGSIb3DQEBCwUAA4IBAQBDOv0i aYgPSLTVRGOaiv+Dmu38luOiS0Y3Vt8pgidQGsIHP8RQYgGjrq1tiIKBAtgr29fl BRVZ/7d5d1Vxn0TYS1H13sRlb98DLcniLeaxq8fhay5NLQbcpv6NJ84QbiBAsv3m u352dUbwWotEnJpQf0hqeuN0Wyk1ZIVv3qFAz1RYFTRtu7W08hlKWQAERzZiFgRi q42DSw2RS1/jwy8J5N7E5p4sKaaDjF8L8XlKSbrvhQ06LKM7gfv7o2C8+ZW7x9Yc CmtjFuMVFEJb1FLii8Vib2/eNsK4qQSC6oEjgeviPecIxMw+41uRtXHNph1Z5TM1 8zIxP6U9loDgC4BR -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:45 2026 by rpki-client