This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer File: 4KACksKhBiuzKYCjxEP_84OkEAI.cer (raw, json) Hash identifier: Ts5G3OVzxIK3bAswQCfkOSk/iVo/qMpU1sRw+5YdGps= Subject key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAEEEA0C4A114F2BC006FB415F4F61 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34047 IP: 46.151.40.0/21 IP: 91.211.172.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ee:ea:0c:4a:11:4f:2b:c0:06:fb:41:5f:4f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a00292c2a1062bb32980a3c443fff383a41002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:fd:da:6f:39:c1:4e:29:73:c2:b4:73:23: dc:ab:02:03:14:51:31:22:eb:fe:31:f4:9a:02:11: 3c:bc:d4:64:7a:5c:1a:21:1a:ad:d7:76:0e:cf:7f: 1c:13:aa:43:b3:68:db:4e:cb:1f:16:06:22:d9:9e: 13:6a:38:27:37:e6:e3:28:44:b7:3a:93:cc:92:d0: 5c:be:04:aa:00:3f:83:83:82:1e:b4:30:22:0b:47: b8:43:94:1d:84:d8:85:4f:a9:bc:06:bd:df:c9:7f: d3:4b:c3:25:8d:65:ec:68:5c:fe:c6:e6:6c:93:b6: 3f:fb:09:33:72:73:8d:74:05:a4:db:ed:31:4a:7a: 26:d9:ab:43:6e:25:ba:ae:89:7c:7a:70:7f:ed:a5: 5f:92:d6:5c:74:cf:55:6a:14:d7:9a:dd:26:3c:04: c1:80:48:47:44:d7:5c:2f:d6:bd:12:7f:0f:ed:49: 1c:f2:b5:04:6e:81:a7:fd:7d:30:a9:a9:44:44:16: fd:a0:60:bb:9a:4d:d5:73:5a:7e:22:bb:18:89:fb: 4c:89:9d:7f:02:ef:fa:f6:9c:4d:3b:f3:99:76:a8: dc:49:c6:94:3a:a5:15:0a:83:17:41:01:be:d5:cb: 75:66:5f:98:6a:97:9e:16:9b:90:18:0c:a3:b5:6c: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.40.0/21 91.211.172.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34047 Signature Algorithm: sha256WithRSAEncryption 0e:18:33:24:34:d7:42:a9:f1:1a:e2:1c:26:b4:c1:1e:d5:ee: d7:29:48:b3:ca:c7:db:f5:54:1b:2d:06:9a:6a:5c:6a:df:8f: 3e:25:9a:07:fa:5e:23:5a:13:7c:a9:ab:64:ec:ce:0c:e6:ae: 25:67:bb:0a:95:71:58:95:ab:f5:00:92:fa:16:f9:df:83:37: 59:60:22:ef:26:97:c6:ec:fa:af:46:4c:4b:e8:73:c0:ab:f8: 98:f9:da:28:c4:2e:d6:36:f0:cc:92:27:44:58:93:f8:9c:32: cc:19:23:09:f6:c8:31:96:eb:ff:21:05:85:1c:71:e2:27:47: 11:d9:dd:b3:dd:52:64:b9:52:af:4f:dc:4f:29:7c:ff:ef:a9: 1b:fa:0e:1a:1a:60:71:a2:da:8c:b1:c6:73:6e:86:22:4e:8f: 25:37:63:83:e6:66:db:fc:ee:a6:80:80:05:eb:4a:e7:19:a5: 17:b9:50:4a:56:ab:8c:e8:65:da:13:6d:13:a4:12:be:06:12: 5d:a8:9d:f3:b5:f1:a9:3c:06:07:52:23:76:83:fd:de:89:6f: 7a:ec:6d:9c:a3:fb:ec:c3:77:e5:62:8d:2c:a8:3c:f0:f2:b2: 76:d5:09:12:08:7a:f7:46:7e:dc:99:24:11:0c:a0:11:17:68: 7e:7e:63:60 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt9yu7qDEoRTyvABvtBX09hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGEwMDI5MmMyYTEwNjJiYjMyOTgwYTNjNDQzZmZmMzgzYTQxMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsf92m85wU4pc8K0cyPcqwIDFFEx Iuv+MfSaAhE8vNRkelwaIRqt13YOz38cE6pDs2jbTssfFgYi2Z4TajgnN+bjKES3 OpPMktBcvgSqAD+Dg4IetDAiC0e4Q5QdhNiFT6m8Br3fyX/TS8MljWXsaFz+xuZs k7Y/+wkzcnONdAWk2+0xSnom2atDbiW6rol8enB/7aVfktZcdM9VahTXmt0mPATB gEhHRNdcL9a9En8P7Ukc8rUEboGn/X0wqalERBb9oGC7mk3Vc1p+IrsYiftMiZ1/ Au/69pxNO/OZdqjcScaUOqUVCoMXQQG+1ct1Zl+YapeeFpuQGAyjtWwCcwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOCgApLCoQYrsymAo8RD//ODpBACMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzZjMDU2 My02YTFjLTQ0MzItYTU4ZC0zYjY0Y2MzMzZjNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvNmMwNTYz LTZhMWMtNDQzMi1hNThkLTNiNjRjYzMzNmM3OS8xLzRLQUNrc0toQml1ektZQ2p4 RVBfODRPa0VBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDLpcoAwQCW9OsMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCE/zANBgkqhkiG9w0BAQsFAAOCAQEADhgzJDTXQqnxGuIcJrTBHtXu 1ylIs8rH2/VUGy0Gmmpcat+PPiWaB/peI1oTfKmrZOzODOauJWe7CpVxWJWr9QCS +hb534M3WWAi7yaXxuz6r0ZMS+hzwKv4mPnaKMQu1jbwzJInRFiT+JwyzBkjCfbI MZbr/yEFhRxx4idHEdnds91SZLlSr0/cTyl8/++pG/oOGhpgcaLajLHGc26GIk6P JTdjg+Zm2/zupoCABetK5xmlF7lQSlarjOhl2hNtE6QSvgYSXaid87XxqTwGB1Ij doP93olveuxtnKP77MN35WKNLKg88PKydtUJEgh690Z+3JkkEQygERdofn5jYA== -----END CERTIFICATE-----Generated at Thu Jan 15 18:41:25 2026 by rpki-client