This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer File: 4GK7krvun23ndX0lbUj2biB_RK8.cer (raw, json) Hash identifier: VuicgV/gABRdb6I/uLr56u7jg8Dx0bbePhF5T2+34gQ= Subject key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BB0F176A890BD3DBB31E93535C406 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202333 IP: 194.156.212.0/22 IP: 2a07:e880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b0:f1:76:a8:90:bd:3d:bb:31:e9:35:35:c4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e062bb92bbee9f6de7757d256d48f66e207f44af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:4c:c7:a1:3e:26:c5:ae:9e:f5:3f:d8:4f: 2e:77:28:1f:b7:4e:d6:a1:33:e3:44:36:2a:10:39: b3:0f:43:30:9d:de:7f:54:1f:9f:2a:46:04:de:b3: 17:8f:0e:5f:93:3e:1f:f8:77:f8:bf:43:59:16:d4: 21:71:3c:91:ed:04:5b:9c:59:f1:2a:7f:c4:22:11: 50:e5:ac:e0:c1:dd:69:e3:d8:d1:17:1b:54:6e:8b: a0:50:8f:d2:3f:1f:89:e3:74:43:e6:ca:61:ce:8d: eb:49:2f:9d:08:1e:9b:9a:9e:52:eb:76:35:f0:ce: bf:a1:b8:22:0b:b3:29:a7:41:69:c0:39:df:a6:ac: 4d:80:51:5f:fd:58:d3:a4:8d:b8:2b:39:ac:60:b8: 0b:e7:6d:0e:96:7a:d5:9b:ed:e6:5b:f8:1a:71:56: 02:6c:8d:cf:87:3d:1d:53:ec:20:57:1d:ef:f3:3d: 80:9d:71:80:9e:0c:f2:ef:af:9b:70:c2:38:93:17: 58:a5:5a:82:23:15:79:44:ba:94:ec:af:d4:a8:2d: ab:67:e7:14:fe:19:d2:c5:ff:69:58:3e:6d:58:f4: e7:1b:cd:1d:6b:cf:f2:61:39:f5:2c:4f:c7:31:8c: ad:f6:74:14:c0:b0:e1:02:af:7f:2a:cf:ae:9f:2a: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.212.0/22 IPv6: 2a07:e880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202333 Signature Algorithm: sha256WithRSAEncryption a0:31:09:fe:15:cd:43:23:d2:b0:f8:99:cf:88:ac:d7:24:7a: 74:21:42:6e:24:d8:b0:c9:37:37:14:14:83:40:73:3c:d9:fa: 78:02:ca:da:81:37:3c:22:28:7c:ec:1a:50:5c:4b:4a:e2:a5: 08:cc:27:f3:2a:9a:22:15:91:b6:9f:45:8d:61:e4:8d:30:1f: 7b:d5:89:cb:6c:db:2d:b3:e0:30:75:dd:45:14:f7:a2:f8:d8: 89:57:3e:aa:33:55:d0:a5:2f:16:29:21:42:1a:21:a0:08:cd: ac:2a:ce:e5:a5:ab:31:c6:e4:fe:db:9e:e6:ad:4b:f4:7e:7c: 32:45:e6:25:a5:55:23:dc:ba:ef:f3:32:90:58:aa:e3:ac:46: c5:f4:dc:b1:92:8b:3d:a2:10:d8:15:81:56:df:f2:d9:0a:c7: 70:63:87:6f:0d:c5:ca:d7:a9:99:c5:dd:e0:61:91:f8:57:ad: c4:27:d4:fb:d6:42:a8:65:5a:8a:97:1f:7d:94:94:db:50:cf: 96:a5:10:f2:93:e2:a7:8d:0a:76:35:65:63:29:c6:96:69:d5: 2b:15:1c:10:e4:a1:2b:ed:f5:90:fe:0b:2b:9a:a5:f4:41:92: 93:a4:39:58:6a:e9:c6:1c:60:53:5b:af:96:bf:0d:55:3e:b3: 4a:ad:9a:d3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9W7DxdqiQvT27Mek1NcQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDYyYmI5MmJiZWU5ZjZkZTc3NTdkMjU2ZDQ4ZjY2ZTIwN2Y0NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFhMx6E+JsWunvU/2E8udygft07W oTPjRDYqEDmzD0Mwnd5/VB+fKkYE3rMXjw5fkz4f+Hf4v0NZFtQhcTyR7QRbnFnx Kn/EIhFQ5azgwd1p49jRFxtUbougUI/SPx+J43RD5sphzo3rSS+dCB6bmp5S63Y1 8M6/obgiC7Mpp0FpwDnfpqxNgFFf/VjTpI24KzmsYLgL520OlnrVm+3mW/gacVYC bI3Phz0dU+wgVx3v8z2AnXGAngzy76+bcMI4kxdYpVqCIxV5RLqU7K/UqC2rZ+cU /hnSxf9pWD5tWPTnG80da8/yYTn1LE/HMYyt9nQUwLDhAq9/Ks+unyq1jQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOBiu5K77p9t53V9JW1I9m4gf0SvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzhhZjUx OC0xNTY2LTRhNmItODA0Yi0xYWI1ZDYyMDlmNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvOGFmNTE4 LTE1NjYtNGE2Yi04MDRiLTFhYjVkNjIwOWY1Ny8xLzRHSzdrcnZ1bjIzbmRYMGxi VWoyYmlCX1JLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwpzUMA0EAgACMAcDBQMqB+iAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWXTANBgkqhkiG9w0BAQsFAAOCAQEAoDEJ/hXNQyPS sPiZz4is1yR6dCFCbiTYsMk3NxQUg0BzPNn6eALK2oE3PCIofOwaUFxLSuKlCMwn 8yqaIhWRtp9FjWHkjTAfe9WJy2zbLbPgMHXdRRT3ovjYiVc+qjNV0KUvFikhQhoh oAjNrCrO5aWrMcbk/tue5q1L9H58MkXmJaVVI9y67/MykFiq46xGxfTcsZKLPaIQ 2BWBVt/y2QrHcGOHbw3FytepmcXd4GGR+FetxCfU+9ZCqGVaipcffZSU21DPlqUQ 8pPip40KdjVlYynGlmnVKxUcEOShK+31kP4LK5ql9EGSk6Q5WGrpxhxgU1uvlr8N VT6zSq2a0w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:08 2026 by rpki-client