This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer File: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer (raw, json) Hash identifier: oRTgMvp4bEY4SHgNV+L83PHlA0uaOi0R9eg84t4CSiM= Subject key identifier: E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA51B6A600054090EC08859E236B366 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207783 IP: 85.193.77.0/24 IP: 2a0f:b640::/29 IP: 2a12:97c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1b:6a:60:00:54:09:0e:c0:88:59:e2:36:b3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:71:cc:96:38:57:56:b3:6e:c0:c7:d9:f5: dd:8c:67:d4:d6:c1:71:d4:65:4e:7c:9b:48:30:83: 50:b4:93:40:a1:e3:48:70:e5:da:96:45:ad:34:62: 9a:0d:fe:45:6f:33:57:28:b0:e8:3c:8c:02:83:54: 27:ff:4f:f6:f4:f0:c3:18:2b:59:5b:bd:cd:eb:e4: 30:8e:34:8e:53:11:60:cb:34:c7:c5:43:07:61:c9: 26:31:ad:a0:c9:d4:6e:67:aa:b2:97:3c:96:60:6c: 07:50:07:89:87:fc:11:4d:ff:5d:7c:d5:67:17:71: 24:69:11:ab:e9:04:43:31:d7:f1:39:d9:b0:de:d1: df:68:73:6f:50:09:2f:60:69:ce:2d:ae:29:49:3d: 9a:a4:65:fb:3c:b9:dd:7b:da:d1:60:8f:97:70:2a: 37:b7:3a:b5:ee:07:03:c8:4c:af:a4:8d:ed:04:4b: 44:39:b7:23:85:6f:6e:67:ab:ec:bc:4e:74:62:fc: 63:09:c0:09:a6:f0:bb:3f:ec:5b:9b:10:a7:f9:01: e1:5c:20:ea:f0:20:18:05:fa:83:4a:be:6e:93:5a: db:79:37:2f:59:17:c9:7d:b3:b5:ce:a1:4c:51:61: 8f:20:ba:d2:1f:da:ab:44:c7:6c:f9:5f:30:91:fa: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.193.77.0/24 IPv6: 2a0f:b640::/29 2a12:97c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207783 Signature Algorithm: sha256WithRSAEncryption 0b:e0:d8:cb:7d:a6:b9:4e:4f:eb:20:3d:dc:05:dc:9d:70:06: c3:df:5d:c7:79:f5:ab:70:3f:6b:f2:ef:25:4d:3f:03:69:48: b5:7d:c4:99:c6:3c:43:85:75:a0:ac:79:91:d2:d8:07:a6:69: ad:f1:3f:4a:e1:8b:f0:14:7d:6b:20:68:13:45:2b:15:ee:4d: 5d:e5:53:3c:5d:ea:ff:62:83:be:8e:a9:bd:05:30:ac:bc:64: 0a:03:4f:0c:6e:14:cd:1c:38:5e:04:58:e1:ac:58:cc:45:71: e5:7f:27:1c:44:74:14:2a:6b:6c:25:b4:ec:07:89:14:96:4d: 53:51:7e:33:e3:eb:b2:7d:1b:75:ac:22:44:69:6e:91:bf:3b: a4:03:c3:32:d7:f7:aa:c6:10:22:30:9c:33:3c:c0:69:d0:26: e6:a2:57:1c:a7:d8:84:4b:d3:b5:d5:96:94:a0:2d:57:28:3a: 49:d9:cc:96:4e:77:cf:6b:f3:2c:e8:33:ad:00:43:8d:d7:fb: 8f:32:a4:f0:3d:9a:52:d2:ed:5d:c4:d8:2f:6e:c5:22:11:03: 8f:45:b1:88:79:ec:09:ec:4e:86:88:e5:75:c9:88:7d:06:50: c4:95:a5:a8:cb:b5:2f:d8:9a:b4:df:44:10:c4:8a:af:64:4a: 30:37:d5:6f -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt7pRtqYABUCQ7AiFniNrNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDE1ZmYwMDVhYTI2NjkxYzdlMzMwZWJmOWMxYzRjMWFlNTQ5NGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQdxzJY4V1azbsDH2fXdjGfU1sFx 1GVOfJtIMINQtJNAoeNIcOXalkWtNGKaDf5FbzNXKLDoPIwCg1Qn/0/29PDDGCtZ W73N6+QwjjSOUxFgyzTHxUMHYckmMa2gydRuZ6qylzyWYGwHUAeJh/wRTf9dfNVn F3EkaRGr6QRDMdfxOdmw3tHfaHNvUAkvYGnOLa4pST2apGX7PLnde9rRYI+XcCo3 tzq17gcDyEyvpI3tBEtEObcjhW9uZ6vsvE50YvxjCcAJpvC7P+xbmxCn+QHhXCDq 8CAYBfqDSr5uk1rbeTcvWRfJfbO1zqFMUWGPILrSH9qrRMds+V8wkfqvDwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFOAV/wBaomaRx+Mw6/nBxMGuVJTUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzM4MWI5 ZS1jYjE5LTQwODgtOTA2Ni1kZWUzMTdlZWMyZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvMzgxYjll LWNiMTktNDA4OC05MDY2LWRlZTMxN2VlYzJmNy8xLzRCWF9BRnFpWnBISDR6RHIt Y0hFd2E1VWxOUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAMBAIAATAGAwQAVcFNMBQEAgACMA4DBQMqD7ZAAwUDKhKXwDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDK6cwDQYJKoZIhvcNAQELBQADggEBAAvg 2Mt9prlOT+sgPdwF3J1wBsPfXcd59atwP2vy7yVNPwNpSLV9xJnGPEOFdaCseZHS 2Aemaa3xP0rhi/AUfWsgaBNFKxXuTV3lUzxd6v9ig76Oqb0FMKy8ZAoDTwxuFM0c OF4EWOGsWMxFceV/JxxEdBQqa2wltOwHiRSWTVNRfjPj67J9G3WsIkRpbpG/O6QD wzLX96rGECIwnDM8wGnQJuaiVxyn2IRL07XVlpSgLVcoOknZzJZOd89r8yzoM60A Q43X+48ypPA9mlLS7V3E2C9uxSIRA49FsYh57AnsToaI5XXJiH0GUMSVpajLtS/Y mrTfRBDEiq9kSjA31W8= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:50 2026 by rpki-client