This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.cer (raw, json) Hash identifier: kOYzvvMaFsRvlQmO9Q6Dm59MswpVwjtTBfurcfu8oRk= Subject key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4302331EB5946936FE9FAA66AF05C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21222 IP: 193.8.16.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:30:23:31:eb:59:46:93:6f:e9:fa:a6:6a:f0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:97:4d:f7:1d:d6:1a:0b:c7:36:de:b3:cb: fe:cd:df:b7:de:a4:6d:66:eb:0c:33:25:00:99:46: 75:4d:81:7a:e9:54:bd:0a:37:c8:30:98:7b:d0:7a: 60:98:5b:4a:b4:72:a0:82:75:c5:b4:6e:5a:00:1c: 6f:f0:43:0a:bb:37:1d:98:3a:84:49:25:06:2a:a9: 5f:07:4a:86:ee:52:83:7a:13:f6:fc:e1:9a:74:b4: 38:e5:1c:4a:fb:26:ec:12:3d:83:1b:d7:54:88:d5: 8e:3c:43:5d:51:55:40:37:10:33:7d:96:51:d2:15: 5a:28:f4:05:f9:d3:a9:88:2f:71:d5:4d:30:7d:3d: 48:f6:29:1a:88:f4:f1:e1:cc:4e:a2:8f:0c:03:05: d4:82:99:f3:ef:7d:fc:7e:59:60:18:6f:b3:63:2d: 78:4b:3b:3e:2d:b8:d8:34:08:39:00:df:24:a9:98: eb:8e:83:8f:9a:d8:af:09:6d:49:d1:e0:62:fd:e9: d4:ec:a9:52:f8:15:37:0e:59:fd:4d:02:58:9c:0c: 77:ce:4b:20:93:0b:80:77:ff:34:bd:49:f2:fb:05: 1b:bc:31:bf:e3:25:11:79:2c:75:ff:df:2c:38:76: 9f:c6:31:72:30:24:47:0b:14:37:06:66:0b:d0:09: d8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.16.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21222 Signature Algorithm: sha256WithRSAEncryption 92:54:ab:b8:7e:33:08:0e:0b:05:ee:5c:b1:ca:51:56:1f:b3: 46:31:5b:5c:77:ed:19:53:b5:91:e1:c2:7e:ff:e1:ec:6c:61: 0b:16:da:57:85:70:07:17:eb:4d:5d:23:8e:71:02:9c:96:31: 98:56:8f:6b:c1:9d:aa:22:4e:fb:b6:b0:4f:29:1f:eb:8d:ca: ff:a2:9d:a3:17:ca:1b:79:e5:e3:12:f2:a2:c3:8a:db:9d:8b: e6:60:41:e2:45:66:06:23:27:b4:09:54:c6:c1:3c:db:ff:b1: cc:ce:d4:fc:37:aa:e9:07:45:dc:d8:d9:ee:cc:a1:e4:ea:37: 29:5e:52:6e:6b:cb:58:32:8e:8f:6a:3a:49:ed:63:6c:18:5c: 87:cd:25:57:9a:45:6b:05:5e:00:98:f6:2e:8a:2e:07:39:a1: ac:87:69:81:64:c8:12:b8:7a:56:e2:b2:33:d0:a7:b2:de:a2: 8b:03:03:49:d3:d7:ef:11:7c:0b:1c:02:cc:e7:18:c0:e6:2d: d5:17:fc:0e:76:3b:53:97:da:ee:6f:a6:d2:22:fa:f7:67:b0: 86:9d:19:d7:e2:e9:c5:7c:bc:d9:b2:7c:d8:0e:4a:23:06:e9: 95:8e:03:63:a0:74:e9:03:99:39:b4:01:43:12:93:ce:f1:a8: c4:35:0e:17 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7pDAjMetZRpNv6fqmavBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzg0YTQxOTk3ZWVlYTRkMDVmY2M3Y2Q0MGIxMjExM2E1YmI2OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsWXTfcd1hoLxzbes8v+zd+33qRt ZusMMyUAmUZ1TYF66VS9CjfIMJh70HpgmFtKtHKggnXFtG5aABxv8EMKuzcdmDqE SSUGKqlfB0qG7lKDehP2/OGadLQ45RxK+ybsEj2DG9dUiNWOPENdUVVANxAzfZZR 0hVaKPQF+dOpiC9x1U0wfT1I9ikaiPTx4cxOoo8MAwXUgpnz7338fllgGG+zYy14 Szs+LbjYNAg5AN8kqZjrjoOPmtivCW1J0eBi/enU7KlS+BU3Dln9TQJYnAx3zksg kwuAd/80vUny+wUbvDG/4yUReSx1/98sOHafxjFyMCRHCxQ3BmYL0AnY/wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFNOEpBmX7upNBfzHzUCxIROlu2noMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzQ5MDZm Zi05ZTIwLTQxMTgtOWFhZS1mNmQwZmY0NTg2NDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvNDkwNmZm LTllMjAtNDExOC05YWFlLWY2ZDBmZjQ1ODY0OC8xLzA0U2tHWmZ1NmswRl9NZk5R TEVoRTZXN2FlZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEwQgQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlLmMA0GCSqGSIb3DQEBCwUAA4IBAQCSVKu4fjMIDgsF7lyxylFWH7NGMVtcd+0Z U7WR4cJ+/+HsbGELFtpXhXAHF+tNXSOOcQKcljGYVo9rwZ2qIk77trBPKR/rjcr/ op2jF8obeeXjEvKiw4rbnYvmYEHiRWYGIye0CVTGwTzb/7HMztT8N6rpB0Xc2Nnu zKHk6jcpXlJua8tYMo6PajpJ7WNsGFyHzSVXmkVrBV4AmPYuii4HOaGsh2mBZMgS uHpW4rIz0Key3qKLAwNJ09fvEXwLHALM5xjA5i3VF/wOdjtTl9rub6bSIvr3Z7CG nRnX4unFfLzZsnzYDkojBumVjgNjoHTpA5k5tAFDEpPO8ajENQ4X -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:13 2026 by rpki-client