This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.cer (raw, json) Hash identifier: klMbKYF/SarFn8GvcTNsQ5JIVjcIu6SeHz6d/Klw+rQ= Subject key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB4FF2CEB8FDB14054B4B0C21B5B60 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42848 AS: 197925 AS: 212814 IP: 62.62.0.0/17 IP: 147.67.0.0/16 IP: 158.166.0.0 -- 158.169.255.255 IP: 185.130.128.0/22 IP: 2a01:7080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4f:f2:ce:b8:fd:b1:40:54:b4:b0:c2:1b:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0390c1c361df05224376108eff9b20dc2ee0265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:de:e1:5f:2f:97:9f:c5:64:2a:27:db:e8: 91:63:06:4a:d9:9f:cf:84:77:01:15:a6:16:c1:5f: c7:2c:06:67:2d:71:95:a8:44:39:cf:15:fc:a5:c8: 13:a8:90:d0:60:60:63:9d:ed:2f:96:92:ce:5b:79: 32:c8:6e:1f:b9:94:dc:1e:87:97:b9:7a:86:be:bb: 2a:10:a7:02:0f:89:99:de:0d:59:2c:b3:93:ff:b2: c3:cc:ed:87:da:2e:23:65:b3:f5:31:e6:db:bd:12: 89:88:44:ce:e7:ab:e7:cf:e3:8b:80:22:ad:d2:e6: 33:0a:08:18:1f:d6:54:a5:25:6b:3f:62:ab:ad:8e: 4f:1f:3b:2a:19:ef:ec:67:a9:25:bc:18:45:c9:19: be:b1:10:60:9d:fc:d8:51:3c:83:d4:24:13:0c:01: 29:9c:83:58:5c:36:3c:64:dd:3d:ba:2a:9b:76:c6: 31:ed:c0:e2:56:02:00:63:70:39:1f:0a:e6:84:c8: 64:a6:3f:d8:9c:d6:7e:35:57:87:c9:6b:e5:c8:2f: 05:c7:5e:62:21:72:50:29:21:54:99:4c:bb:9f:a7: fd:5f:20:4c:4a:0b:20:58:4e:4a:36:0c:9a:92:d6: 70:70:a6:ba:9d:3b:07:92:cd:51:dc:ad:ad:52:39: ea:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.62.0.0/17 147.67.0.0/16 158.166.0.0-158.169.255.255 185.130.128.0/22 IPv6: 2a01:7080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42848 197925 212814 Signature Algorithm: sha256WithRSAEncryption 69:02:94:b5:e7:f3:27:8a:c2:23:c9:35:c6:9d:9d:56:f7:db: 94:55:d9:c4:56:e8:45:b6:7c:fd:ff:a9:2a:ba:ab:00:9c:86: 8a:c3:d4:d6:b7:e1:99:2e:71:1d:e3:d5:34:18:aa:f6:39:32: da:77:08:14:25:4c:eb:36:82:3a:99:19:4b:61:c4:93:96:ef: f7:70:f9:d3:f1:a1:32:86:c6:4a:aa:46:91:e0:9e:4f:c2:24: ad:5b:86:e7:81:6b:36:34:c9:08:ce:55:1b:b3:53:84:64:ee: 52:c2:a3:c9:8d:e4:ec:94:ed:64:6b:28:7a:b4:38:1d:83:86: b7:33:8d:a5:25:cc:3a:66:cf:f4:0f:67:5c:d2:11:3f:0d:fa: c3:28:08:0e:fd:47:e2:e3:bc:b1:07:2b:95:0a:f0:82:04:b1: e7:89:fa:99:b5:9e:25:4b:47:ae:8b:31:98:75:d0:ae:64:7e: d9:4f:c4:c0:48:4b:45:b7:38:b7:67:90:4b:cd:b3:9d:1f:cd: 3f:9f:b8:05:55:9b:2c:12:43:18:67:bc:2e:f0:ab:e6:61:cb: 89:1a:94:27:8b:34:f9:39:0e:51:1a:6e:ab:f3:51:65:34:b4: 7e:e3:08:aa:83:ee:ce:3d:31:c9:67:53:0c:d7:85:4e:56:3e: 85:bb:9d:16 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt9y0/yzrj9sUBUtLDCG1tgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDM5MGMxYzM2MWRmMDUyMjQzNzYxMDhlZmY5YjIwZGMyZWUwMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltXe4V8vl5/FZCon2+iRYwZK2Z/P hHcBFaYWwV/HLAZnLXGVqEQ5zxX8pcgTqJDQYGBjne0vlpLOW3kyyG4fuZTcHoeX uXqGvrsqEKcCD4mZ3g1ZLLOT/7LDzO2H2i4jZbP1MebbvRKJiETO56vnz+OLgCKt 0uYzCggYH9ZUpSVrP2KrrY5PHzsqGe/sZ6klvBhFyRm+sRBgnfzYUTyD1CQTDAEp nINYXDY8ZN09uiqbdsYx7cDiVgIAY3A5HwrmhMhkpj/YnNZ+NVeHyWvlyC8Fx15i IXJQKSFUmUy7n6f9XyBMSgsgWE5KNgyaktZwcKa6nTsHks1R3K2tUjnq4QIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFOA5DBw2HfBSJDdhCO/5sg3C7gJlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzNjMGYw NC04Y2FmLTQ5ZDQtYWFiNy01OWU2MTFkNzY1NzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvM2MwZjA0 LThjYWYtNDlkNC1hYWI3LTU5ZTYxMWQ3NjU3NC8xLzREa01IRFlkOEZJa04yRUk3 X215RGNMdUFtVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF BwEHAQH/BDYwNDAjBAIAATAdAwQHPj4AAwMAk0MwCgMDAZ6mAwMBnqgDBAK5goAw DQQCAAIwBwMFACoBcIAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAKdgAgMDBSUC AwM/TjANBgkqhkiG9w0BAQsFAAOCAQEAaQKUtefzJ4rCI8k1xp2dVvfblFXZxFbo RbZ8/f+pKrqrAJyGisPU1rfhmS5xHePVNBiq9jky2ncIFCVM6zaCOpkZS2HEk5bv 93D50/GhMobGSqpGkeCeT8IkrVuG54FrNjTJCM5VG7NThGTuUsKjyY3k7JTtZGso erQ4HYOGtzONpSXMOmbP9A9nXNIRPw36wygIDv1H4uO8sQcrlQrwggSx54n6mbWe JUtHrosxmHXQrmR+2U/EwEhLRbc4t2eQS82znR/NP5+4BVWbLBJDGGe8LvCr5mHL iRqUJ4s0+TkOURpuq/NRZTS0fuMIqoPuzj0xyWdTDNeFTlY+hbudFg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:29 2026 by rpki-client