This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer (raw, json) Hash identifier: DKK7XfzjDnJxF7LJ2dFgn2NoK1y9LRnlKyERtI2+ZIg= Subject key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECCF9A2F6DBA8C8092AB2A1FE757A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.46.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cf:9a:2f:6d:ba:8c:80:92:ab:2a:1f:e7:57:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:cd:21:0f:a7:44:de:48:e3:84:21:15:76: e6:76:97:16:85:84:b6:9f:59:f8:b5:58:1d:7a:2a: 5c:68:5e:f1:d4:c2:34:d4:a4:43:93:8b:be:66:c3: da:98:eb:09:e6:f4:23:1f:d6:fa:a4:b2:c9:88:d1: 60:f8:c8:6a:af:af:de:06:c3:f1:e0:d1:fe:dd:67: 4d:e0:34:21:ae:dd:53:bb:1d:da:78:7c:63:bc:bd: e2:78:63:5d:57:60:15:7d:3c:71:78:88:c5:3d:6e: 9b:5c:89:54:ec:f9:30:23:2a:83:d2:c4:cb:d3:27: 5e:69:a6:10:f4:6d:29:00:7b:93:6f:ee:b9:c6:3f: 20:45:8c:88:0d:05:6b:6c:0c:63:9c:5b:88:9f:31: f5:bd:94:17:48:f0:d7:13:3a:3f:32:15:ea:77:75: c3:81:6a:3c:e5:60:fb:0e:92:57:2e:79:ac:b1:2e: b7:e8:4d:a7:5a:70:95:29:21:20:8b:6a:56:d6:ad: 10:e1:e6:0e:3c:1c:12:03:32:fe:93:c5:43:94:e4: 5a:df:da:d8:cb:3d:b5:7c:66:e0:f4:d4:43:34:6a: 36:ef:89:81:1e:0b:3a:ae:b3:71:8b:11:e1:46:8c: 2b:c0:b6:8f:d3:47:da:25:20:63:76:7d:72:9d:6d: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.46.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:b8:a7:3d:e4:fd:28:4d:03:fb:ca:55:3b:7c:7b:38:fe:a4: a7:75:1c:5e:37:9e:90:d2:dc:bb:06:cc:0e:70:b1:b9:eb:b0: 4f:b5:57:58:58:52:7d:01:b6:23:d7:af:eb:9c:ad:4f:5e:98: d6:3f:bc:bc:8b:4d:7f:ec:51:e5:b6:95:61:95:d7:1d:5c:c3: d5:45:55:15:59:cf:11:42:c9:55:b4:96:30:6f:73:08:24:e2: 64:f9:0d:57:d0:ea:47:d7:a3:5d:a6:63:c8:ac:24:2c:87:5d: e3:71:49:49:5a:9b:0f:07:e4:f8:b0:7e:70:94:9b:12:30:d4: 06:dc:f8:d4:3c:d1:66:ad:e3:55:1c:b3:f0:69:d6:59:6b:c4: 58:a4:3b:d5:b8:73:71:b5:9e:7c:0d:93:e5:ae:29:b5:d8:3f: e0:49:45:7f:77:76:ca:95:0f:88:2d:3a:91:46:91:e4:0a:55: ef:f2:b9:9e:b5:91:aa:15:6b:b0:9e:c8:be:d3:80:17:ab:36: 93:f0:fa:1d:22:77:dd:3f:16:0f:61:35:e6:ba:75:91:f2:c7: b9:e1:72:99:a5:47:8f:3f:09:b0:1f:19:5e:2c:e9:6b:6d:cb: 6a:c3:4d:08:53:c9:aa:fa:c6:c7:1b:86:8a:fe:3e:34:e2:24: b7:55:9e:72 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt87M+aL226jICSqyof51epMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDhhYWRjMDY5NTU1YTFhYmUwMzFmZDBhMDI4MDY5YzhmYjg5YjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9zNIQ+nRN5I44QhFXbmdpcWhYS2 n1n4tVgdeipcaF7x1MI01KRDk4u+ZsPamOsJ5vQjH9b6pLLJiNFg+Mhqr6/eBsPx 4NH+3WdN4DQhrt1Tux3aeHxjvL3ieGNdV2AVfTxxeIjFPW6bXIlU7PkwIyqD0sTL 0ydeaaYQ9G0pAHuTb+65xj8gRYyIDQVrbAxjnFuInzH1vZQXSPDXEzo/MhXqd3XD gWo85WD7DpJXLnmssS636E2nWnCVKSEgi2pW1q0Q4eYOPBwSAzL+k8VDlORa39rY yz21fGbg9NRDNGo274mBHgs6rrNxixHhRowrwLaP00faJSBjdn1ynW31aQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFOCKrcBpVVoavgMf0KAoBpyPuJsrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3Lzg1MjIy MS1kNjE2LTRlMTItOGZhNC05YTcyZDk5MDNlYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvODUyMjIx LWQ2MTYtNGUxMi04ZmE0LTlhNzJkOTkwM2ViOC8xLzRJcXR3R2xWV2hxLUF4X1Fv Q2dHbkktNG15cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjS4wDQYJKoZIhvcNAQELBQADggEBAEi4pz3k /ShNA/vKVTt8ezj+pKd1HF43npDS3LsGzA5wsbnrsE+1V1hYUn0BtiPXr+ucrU9e mNY/vLyLTX/sUeW2lWGV1x1cw9VFVRVZzxFCyVW0ljBvcwgk4mT5DVfQ6kfXo12m Y8isJCyHXeNxSUlamw8H5PiwfnCUmxIw1Abc+NQ80Wat41Ucs/Bp1llrxFikO9W4 c3G1nnwNk+WuKbXYP+BJRX93dsqVD4gtOpFGkeQKVe/yuZ61kaoVa7CeyL7TgBer NpPw+h0id90/Fg9hNea6dZHyx7nhcpmlR48/CbAfGV4s6Wtty2rDTQhTyar6xscb hor+PjTiJLdVnnI= -----END CERTIFICATE-----Generated at Tue Jan 27 09:58:51 2026 by rpki-client