This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.cer (raw, json) Hash identifier: AXzL7JmexF/x+ptUhAHd1Z7IpX7MNj9WaMLA5O9bXzs= Subject key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED64634F60A3B1C18392163ABBCD49 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206448 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:64:63:4f:60:a3:b1:c1:83:92:16:3a:bb:cd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:7c:e3:fa:b8:5e:54:27:b1:fe:5c:e7:33: 47:4b:76:fa:d9:b2:65:e9:90:22:b8:b2:40:ab:ba: b4:8c:cb:67:07:3b:5e:5a:e3:b2:f6:be:aa:c6:b2: 45:48:a7:be:86:ae:b8:35:f2:fd:9a:2d:b5:c2:2a: 72:7a:91:07:bf:e9:0e:b8:3f:b6:87:d0:85:81:15: 68:6d:b7:ed:48:61:c8:20:fd:fa:68:39:e3:f2:29: 8d:29:bd:9b:56:cb:90:34:86:fd:44:19:5f:d3:c5: 1c:ab:36:bb:58:2f:6e:b6:20:cc:c7:21:44:3c:23: b8:85:b3:64:7b:d4:7a:56:71:44:75:1e:db:31:56: 00:b6:72:07:6d:4c:51:8b:d1:b1:01:ae:c5:84:66: 9e:3b:37:fb:04:d4:a2:43:d8:ec:95:cb:f1:63:2d: 15:40:a9:33:b5:72:e4:37:77:21:3a:f7:6e:65:33: ce:b0:a1:eb:11:14:32:6d:95:af:34:3c:e5:b5:34: ae:e3:95:27:de:f0:ad:ea:6c:89:6c:42:6a:a8:1f: 17:4a:52:47:55:af:0e:f4:46:9e:fe:fd:8a:77:dd: 16:66:ba:6d:0e:c8:99:55:17:d0:a5:6f:8d:81:fc: 68:f7:9e:26:cf:7e:63:41:84:0e:47:02:22:80:8d: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206448 Signature Algorithm: sha256WithRSAEncryption 6d:39:50:4d:6e:7d:4f:4f:57:e1:73:fd:cc:b1:20:ff:ad:4d: 67:ab:fb:09:ab:5c:99:6a:f3:7c:88:a5:f8:28:b3:2e:00:86: 4f:3d:1e:34:7d:6d:74:af:dd:3e:48:23:98:ba:25:b7:73:71: 23:e5:4d:84:7c:8a:13:a6:81:c7:22:e3:15:2b:60:65:14:74: 3b:8f:a1:b5:8a:0b:37:71:ce:b6:60:a6:56:4e:a0:88:80:43: cc:26:e0:84:06:63:3d:d1:55:ce:f0:f9:68:b1:2d:b6:10:14: c4:7e:e5:73:d0:0c:22:b9:93:46:2b:97:09:d5:f0:9b:84:e7: 6e:23:2c:d3:65:80:d6:4d:a3:63:7c:17:0b:ef:40:f7:80:d4: 51:01:3a:ae:25:d2:ab:12:6f:37:b5:e4:bc:39:87:a3:50:3a: 68:ef:44:f0:76:a8:0f:12:75:1f:0c:65:98:8e:a0:5b:6a:62: ba:39:f6:43:43:68:2e:a5:ac:30:aa:62:0b:1d:a8:a7:2d:f8: b2:3b:c6:fa:a7:91:62:f2:12:bf:16:f0:97:ba:4b:f7:7d:e4: b6:f1:81:a8:e2:84:b9:8b:ad:07:03:38:91:5d:58:84:c2:dd: 77:59:bd:49:29:f3:5f:83:1f:6d:25:ba:71:95:11:3e:e4:18: e9:52:76:00 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87WRjT2CjscGDkhY6u81JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDcwY2RhYjczYTEyZGFmMzY4MDZiMGUxNjAyYzhkYWZiOTA5M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3t84/q4XlQnsf5c5zNHS3b62bJl 6ZAiuLJAq7q0jMtnBzteWuOy9r6qxrJFSKe+hq64NfL9mi21wipyepEHv+kOuD+2 h9CFgRVobbftSGHIIP36aDnj8imNKb2bVsuQNIb9RBlf08Ucqza7WC9utiDMxyFE PCO4hbNke9R6VnFEdR7bMVYAtnIHbUxRi9GxAa7FhGaeOzf7BNSiQ9jslcvxYy0V QKkztXLkN3chOvduZTPOsKHrERQybZWvNDzltTSu45Un3vCt6myJbEJqqB8XSlJH Va8O9Eae/v2Kd90WZrptDsiZVRfQpW+Ngfxo954mz35jQYQORwIigI0fbwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOBwzatzoS2vNoBrDhYCyNr7kJO7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzhlMDFj YS0yY2NmLTQ5MTItOTE0Yi05MTY4ODI2Y2QzNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvOGUwMWNh LTJjY2YtNDkxMi05MTRiLTkxNjg4MjZjZDM1NS8xLzRIRE5xM09oTGE4MmdHc09G Z0xJMnZ1UWs3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmcDANBgkqhkiG9w0BAQsFAAOCAQEAbTlQTW59T09X 4XP9zLEg/61NZ6v7CatcmWrzfIil+CizLgCGTz0eNH1tdK/dPkgjmLolt3NxI+VN hHyKE6aBxyLjFStgZRR0O4+htYoLN3HOtmCmVk6giIBDzCbghAZjPdFVzvD5aLEt thAUxH7lc9AMIrmTRiuXCdXwm4TnbiMs02WA1k2jY3wXC+9A94DUUQE6riXSqxJv N7XkvDmHo1A6aO9E8HaoDxJ1HwxlmI6gW2piujn2Q0NoLqWsMKpiCx2opy34sjvG +qeRYvISvxbwl7pL933ktvGBqOKEuYutBwM4kV1YhMLdd1m9SSnzX4MfbSW6cZUR PuQY6VJ2AA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:55 2026 by rpki-client