This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer (raw, json) Hash identifier: T0PI93RK67IdeuqBgrb9JJ9m6jE6g8DAc298Y3bVC2A= Subject key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73C774602B2E58C6FEA1D3AEE7781 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 130.193.73.0/24 IP: 185.28.108.0/22 IP: 2a04:1f20::/30 IP: 2a11:8780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3c:77:46:02:b2:e5:8c:6f:ea:1d:3a:ee:77:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3ea14d1343b992506bee6c3d90e19a69798b018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:82:ff:cd:34:95:e2:95:b1:d7:8d:be:3c: 4d:07:99:4b:d2:9d:44:5e:5d:06:55:3f:bf:29:65: e4:58:96:2f:a1:aa:17:1c:47:1a:07:65:23:fd:c4: cf:cb:23:36:d4:21:11:7d:1e:b4:c2:3b:d3:88:73: ca:0b:80:fe:50:71:85:cc:a4:48:24:6f:ef:8a:3d: bc:88:8f:ec:9a:91:1e:e4:a3:2e:c1:a2:ea:83:2d: 0c:95:95:9e:f4:8b:cf:80:24:01:44:87:34:f5:4e: e2:91:9b:27:71:b8:b3:a0:89:a2:92:7b:a7:b2:48: 8a:2d:3a:56:58:28:79:bd:04:6a:7c:3f:70:ef:1b: 8a:6c:ec:0b:04:3c:7c:0a:2a:1d:e5:7b:a5:62:ab: 5b:5f:ff:54:4c:91:b7:ab:78:9a:b3:24:50:f3:0b: b6:57:e7:98:07:f6:c4:4e:0d:43:3b:bb:7f:71:f2: 1e:d3:22:e5:1a:9a:15:7a:4f:17:f2:df:09:84:80: 40:8c:5f:07:32:e1:fe:8b:c8:b8:46:35:41:d9:cd: d1:69:a0:cc:f0:77:c1:e7:d7:d7:08:ac:a9:bc:f7: 40:1e:3c:33:6d:ab:91:5b:e0:b8:58:32:29:a2:5f: 17:d2:47:23:7e:f2:26:16:45:e3:de:ce:b0:c6:2b: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.73.0/24 185.28.108.0/22 IPv6: 2a04:1f20::/30 2a11:8780::/29 Signature Algorithm: sha256WithRSAEncryption 1a:44:ff:2d:b2:99:28:8f:9a:ee:97:a5:46:d4:8f:dc:89:fd: 4f:8d:fe:16:b5:11:7e:14:b3:3b:21:ed:11:bb:02:88:55:18: ed:51:dc:de:64:e9:95:b3:49:c3:ac:83:a2:98:53:1e:7b:b4: e3:ec:b4:9e:ad:de:0f:75:9a:5b:7c:26:0c:99:ab:d2:f5:7b: fa:00:96:db:6e:ec:66:30:7c:4f:ac:5b:76:28:e8:88:dd:bb: ff:f2:ff:6c:1a:a9:80:ed:cd:b1:f6:95:be:d1:9a:b5:f0:c2: 0c:0b:e7:e6:a8:0f:7b:3c:15:94:9c:c5:39:6d:bd:6b:72:5c: 6f:59:c1:16:f6:74:89:33:a7:1e:dc:3c:3c:c4:bf:60:a0:0e: 28:26:05:12:c7:a5:f7:7f:87:ea:65:94:52:38:5e:e2:f0:68: 9f:4f:20:ee:62:c2:27:b4:28:3f:30:df:9f:7e:f9:46:34:26: 10:d4:5f:fc:24:88:e5:a0:6f:71:8e:db:47:c9:21:9d:df:d4: b7:43:e6:7a:4c:8c:cc:16:45:66:1b:b3:43:11:eb:f5:3f:79: e8:74:ed:6d:31:c5:65:8a:0d:25:90:b0:47:49:5a:93:6d:1d: ba:44:46:f5:e0:55:eb:62:c7:da:bb:97:2c:4b:26:94:6a:ad: 0b:d3:7f:5a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xzx3RgKy5Yxv6h067neBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2VhMTRkMTM0M2I5OTI1MDZiZWU2YzNkOTBlMTlhNjk3OThiMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui6C/800leKVsdeNvjxNB5lL0p1E Xl0GVT+/KWXkWJYvoaoXHEcaB2Uj/cTPyyM21CERfR60wjvTiHPKC4D+UHGFzKRI JG/vij28iI/smpEe5KMuwaLqgy0MlZWe9IvPgCQBRIc09U7ikZsncbizoImiknun skiKLTpWWCh5vQRqfD9w7xuKbOwLBDx8Ciod5XulYqtbX/9UTJG3q3iasyRQ8wu2 V+eYB/bETg1DO7t/cfIe0yLlGpoVek8X8t8JhIBAjF8HMuH+i8i4RjVB2c3RaaDM 8HfB59fXCKypvPdAHjwzbauRW+C4WDIpol8X0kcjfvImFkXj3s6wxivU6wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOPqFNE0O5klBr7mw9kOGaaXmLAYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2Lzk3MTU1 OC1lZDY2LTRiODMtOGZhNC1kNGE0ZjM0NzE3ZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOTcxNTU4 LWVkNjYtNGI4My04ZmE0LWQ0YTRmMzQ3MTdmMC8xLzQtb1UwVFE3bVNVR3Z1YkQy UTRacHBlWXNCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAgsFJAwQCuRxsMBQEAgACMA4DBQIqBB8gAwUD KhGHgDANBgkqhkiG9w0BAQsFAAOCAQEAGkT/LbKZKI+a7pelRtSP3In9T43+FrUR fhSzOyHtEbsCiFUY7VHc3mTplbNJw6yDophTHnu04+y0nq3eD3WaW3wmDJmr0vV7 +gCW227sZjB8T6xbdijoiN27//L/bBqpgO3NsfaVvtGatfDCDAvn5qgPezwVlJzF OW29a3Jcb1nBFvZ0iTOnHtw8PMS/YKAOKCYFEsel93+H6mWUUjhe4vBon08g7mLC J7QoPzDfn375RjQmENRf/CSI5aBvcY7bR8khnd/Ut0PmekyMzBZFZhuzQxHr9T95 6HTtbTHFZYoNJZCwR0lak20dukRG9eBV62LH2ruXLEsmlGqtC9N/Wg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:04 2026 by rpki-client