This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.cer (raw, json) Hash identifier: B0LCunk3SP16ToXozUDaQbI1uPtQPDwVGWze3VslifU= Subject key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB96AC2E589CAC67FA19EA7492C4FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31511 IP: 185.30.252.0/22 IP: 195.62.68.0/23 IP: 195.177.246.0/23 IP: 2a04:4720::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:96:ac:2e:58:9c:ac:67:fa:19:ea:74:92:c4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:45:f7:60:ef:83:3a:08:7f:a8:1a:69:eb: 94:7e:a2:46:9a:5b:67:ce:63:0a:41:d4:20:07:b4: 27:6c:41:44:62:0f:dd:22:a4:1a:0a:ec:28:d2:26: ab:4f:7f:8e:5d:e0:75:01:91:54:49:c3:1f:7c:e0: 43:59:a9:a7:f7:13:db:cc:7f:fd:c2:39:c1:1a:ed: 95:f0:79:db:23:bd:0f:8a:76:70:7a:9f:5c:76:3a: 7c:9c:62:56:ab:43:31:97:e5:d7:c1:d9:09:6c:48: be:d2:14:19:5e:62:9c:1f:05:f9:fb:b6:2e:c3:51: 00:92:99:ac:05:f3:2a:8e:5c:ed:7f:0e:09:ae:0e: 56:80:73:0a:6b:4e:0a:53:15:52:b6:58:27:e6:bc: ed:67:b4:b1:8f:38:f7:ad:1c:b0:cb:09:36:37:97: e6:e3:a1:3a:82:ec:fb:55:bd:38:47:04:d6:6e:87: ad:03:d0:62:d8:d1:56:15:ed:5d:52:75:c1:97:a8: 91:9b:9e:b3:ac:f9:a5:4a:e1:39:a6:18:da:68:00: cf:7a:ea:30:9a:5e:31:c1:43:a1:15:15:42:f7:ee: 43:6c:bd:57:35:32:7b:6f:ca:98:a7:0c:5e:df:93: a0:23:d7:4a:1b:4d:10:58:4f:b2:56:a1:ad:3c:07: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.252.0/22 195.62.68.0/23 195.177.246.0/23 IPv6: 2a04:4720::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31511 Signature Algorithm: sha256WithRSAEncryption 92:56:f6:20:b7:7a:e7:85:f8:ff:18:d6:18:f8:20:81:b7:13: 00:d5:8a:d3:f0:83:79:fc:97:a5:02:d1:5d:b2:ef:fc:65:9d: 6d:5b:12:d0:89:73:0e:2f:d8:2f:54:76:59:2d:a8:2a:b1:80: da:cc:a8:b3:85:19:c4:2d:2a:39:3f:70:c0:bc:5b:fc:ec:12: a8:d5:90:0e:0a:4d:a1:1d:07:e3:c3:4f:5f:eb:80:ab:2e:e6: 57:dc:be:34:1a:e1:24:80:df:cd:ce:23:dc:fe:67:1f:b9:cc: 4f:cf:f6:74:7f:d4:db:6e:0c:87:3d:4e:8f:f0:f5:b4:48:aa: 03:e6:45:5e:5c:56:d7:a4:64:52:27:93:60:c6:90:86:3b:4d: 36:73:a6:19:3e:3e:0d:e1:69:30:c5:e1:b5:29:39:47:0c:70: 32:8c:d4:9d:04:7b:06:9b:d3:29:5f:7a:fa:fd:57:e9:40:e4: d9:96:7c:c3:86:3f:f3:bd:b2:58:b5:95:6d:2d:2e:f0:39:67: 6f:c1:44:44:c4:98:ab:c9:27:65:92:8a:eb:f1:02:cd:34:0e: 20:75:22:e8:82:31:82:f1:83:ab:2f:9a:bc:c7:2c:b6:80:cc: de:72:fc:7d:54:7a:cc:f2:50:b9:a0:07:0e:79:33:ac:14:77: ce:e0:d3:4c -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt265asLlicrGf6Gep0ksT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDhlOTA3YzBmZTUwODkxYTc2YmQ5OWIyOTA4NzAwYTZhYzYyZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPJF92DvgzoIf6gaaeuUfqJGmltn zmMKQdQgB7QnbEFEYg/dIqQaCuwo0iarT3+OXeB1AZFUScMffOBDWamn9xPbzH/9 wjnBGu2V8HnbI70PinZwep9cdjp8nGJWq0Mxl+XXwdkJbEi+0hQZXmKcHwX5+7Yu w1EAkpmsBfMqjlztfw4Jrg5WgHMKa04KUxVStlgn5rztZ7Sxjzj3rRywywk2N5fm 46E6guz7Vb04RwTWboetA9Bi2NFWFe1dUnXBl6iRm56zrPmlSuE5phjaaADPeuow ml4xwUOhFRVC9+5DbL1XNTJ7b8qYpwxe35OgI9dKG00QWE+yVqGtPAdCgQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFOCOkHwP5QiRp2vZmykIcApqxi44MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2MyOGUy Ny1kMDViLTQ3OGEtOWIwYi1kYjk3ODkyYTUxZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvYzI4ZTI3 LWQwNWItNDc4YS05YjBiLWRiOTc4OTJhNTFmZC8xLzRJNlFmQV9sQ0pHbmE5bWJL UWh3Q21yR0xqZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuR78AwQBwz5EAwQBw7H2MA0EAgACMAcDBQIq BEcgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnsXMA0GCSqGSIb3DQEBCwUAA4IB AQCSVvYgt3rnhfj/GNYY+CCBtxMA1YrT8IN5/JelAtFdsu/8ZZ1tWxLQiXMOL9gv VHZZLagqsYDazKizhRnELSo5P3DAvFv87BKo1ZAOCk2hHQfjw09f64CrLuZX3L40 GuEkgN/NziPc/mcfucxPz/Z0f9TbbgyHPU6P8PW0SKoD5kVeXFbXpGRSJ5NgxpCG O002c6YZPj4N4WkwxeG1KTlHDHAyjNSdBHsGm9MpX3r6/VfpQOTZlnzDhj/zvbJY tZVtLS7wOWdvwURExJirySdlkorr8QLNNA4gdSLogjGC8YOrL5q8xyy2gMzecvx9 VHrM8lC5oAcOeTOsFHfO4NNM -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:21 2026 by rpki-client