This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer (raw, json) Hash identifier: Zv11jnZPIYmeYq/4HqTYrcfLgf5nMX+gAWwpzdCDOEw= Subject key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AF4148A0DD6866FA1799F899BA046 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.245.5.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f4:14:8a:0d:d6:86:6f:a1:79:9f:89:9b:a0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:6a:4a:ee:70:b7:cb:29:4b:bb:42:81:84: b7:b8:e2:5f:ed:62:b2:2f:7b:8a:f3:78:67:b6:5d: 7e:ae:e4:87:2f:59:16:ed:da:81:8d:0a:a2:e4:1d: 98:e3:cf:c2:e2:06:fe:f5:2c:3c:8e:b7:b2:8c:f3: 8b:6a:0f:de:86:82:99:62:7c:02:9b:27:41:fd:a5: 50:b7:61:f1:bd:05:50:0e:96:01:54:e2:03:31:66: 63:d0:1b:68:ff:4a:57:fe:fc:db:2b:48:81:10:f7: 15:0d:e7:4f:e3:11:aa:b1:b1:6e:c6:fb:1a:a6:89: 6d:f9:dd:5e:da:87:7b:61:29:1d:e2:30:5a:38:cc: ed:8d:0c:bd:43:c8:96:2f:61:0c:da:fd:cc:55:8a: 7e:50:72:c8:18:7f:a0:3d:07:7e:75:04:8a:a3:4d: 4b:3e:d1:2f:1c:cd:88:e4:48:1f:fb:d8:4d:cc:e1: 8c:54:c3:ef:ae:58:53:d7:db:9a:28:0d:a2:cb:b9: 8c:3e:ba:14:2f:3a:c1:43:8f:74:15:b5:27:0f:9a: 5a:01:f0:47:02:38:ec:99:bf:68:d3:b2:a8:b2:3d: c9:2f:c6:92:38:17:e8:7a:43:f9:1c:fe:be:e7:92: bd:c5:3b:8c:78:f7:c9:6d:a2:bb:a6:76:0c:32:9f: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.5.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:02:b8:07:0b:c0:cd:e9:eb:e5:eb:63:a6:19:42:f4:c3:a3: 42:ef:37:c7:d7:fa:50:27:d9:e3:4c:f8:9f:78:f0:d2:d0:b5: df:61:4b:3f:cc:d1:c3:b9:3f:e5:d2:e0:e7:40:01:95:5a:6f: aa:d6:3f:ee:53:67:31:09:70:9c:0d:07:cf:69:e3:fe:76:68: 7e:0e:6b:5d:70:93:c5:a8:e6:a1:aa:8b:be:27:38:9e:f0:ae: 0d:49:9c:86:74:ac:3e:21:e3:fe:80:ba:f6:6c:18:90:ed:78: 05:02:94:fd:f0:d1:45:b1:d9:d7:f7:bb:3d:01:75:c4:c3:cf: d5:8c:6b:df:8a:60:06:61:99:75:86:b4:9e:c8:be:3b:f8:19: 2b:d7:f3:83:61:68:b0:43:a0:93:f7:f4:4d:cf:89:a5:54:a3: 60:4e:c3:da:38:23:a6:80:d7:a2:22:3c:81:ec:b7:41:dd:86: 94:ae:50:4e:1b:9d:c6:fe:a3:13:9a:b4:0a:93:ea:33:39:aa: 61:b8:15:8a:24:79:88:a2:15:69:89:e4:de:da:58:59:ab:05: 8b:66:fa:ff:c6:4a:f0:5b:26:8d:b8:90:0b:f3:9a:6b:14:38: 25:44:90:9d:f9:9b:7d:94:33:45:48:3a:4a:92:f5:0d:fd:af: b4:d4:a7:d1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WvQUig3Whm+heZ+Jm6BGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDc3NmIwODM4ZmEwZTFkYTFiZTRlZGNjZjg5MjRiZDQxM2IxZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuBqSu5wt8spS7tCgYS3uOJf7WKy L3uK83hntl1+ruSHL1kW7dqBjQqi5B2Y48/C4gb+9Sw8jreyjPOLag/ehoKZYnwC mydB/aVQt2HxvQVQDpYBVOIDMWZj0Bto/0pX/vzbK0iBEPcVDedP4xGqsbFuxvsa polt+d1e2od7YSkd4jBaOMztjQy9Q8iWL2EM2v3MVYp+UHLIGH+gPQd+dQSKo01L PtEvHM2I5Egf+9hNzOGMVMPvrlhT19uaKA2iy7mMProULzrBQ490FbUnD5paAfBH Ajjsmb9o07Kosj3JL8aSOBfoekP5HP6+55K9xTuMePfJbaK7pnYMMp/DmQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOB3awg4+g4dob5O3M+JJL1BOx23MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2JlOWRh Yi01ZjI3LTQzY2UtYWIyMi03MzlhOTFjNjIwYWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvYmU5ZGFi LTVmMjctNDNjZS1hYjIyLTczOWE5MWM2MjBhYy8xLzRIZHJDRGo2RGgyaHZrN2N6 NGtrdlVFN0hiYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/UFMA0GCSqGSIb3DQEBCwUAA4IBAQBqArgH C8DN6evl62OmGUL0w6NC7zfH1/pQJ9njTPifePDS0LXfYUs/zNHDuT/l0uDnQAGV Wm+q1j/uU2cxCXCcDQfPaeP+dmh+DmtdcJPFqOahqou+Jzie8K4NSZyGdKw+IeP+ gLr2bBiQ7XgFApT98NFFsdnX97s9AXXEw8/VjGvfimAGYZl1hrSeyL47+Bkr1/OD YWiwQ6CT9/RNz4mlVKNgTsPaOCOmgNeiIjyB7LdB3YaUrlBOG53G/qMTmrQKk+oz OaphuBWKJHmIohVpieTe2lhZqwWLZvr/xkrwWyaNuJAL85prFDglRJCd+Zt9lDNF SDpKkvUN/a+01KfR -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:36 2026 by rpki-client