This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer File: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer (raw, json) Hash identifier: Q1te1obzMu+jBih6hjvnfFozy7tWGMdcU7D3dBRuO74= Subject key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED6D7577E26E24F128C9CF5653F8FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48885 IP: 37.252.128.0/19 IP: 217.146.48.0/20 IP: 2a00:dbc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6d:75:77:e2:6e:24:f1:28:c9:cf:56:53:f8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2d:32:80:8d:5d:b4:3a:17:1c:38:36:ee:fe: d3:75:0d:05:1b:3a:b7:ab:cf:f2:c0:aa:6e:69:4a: 66:6d:09:4f:09:87:45:95:1a:10:a5:39:c8:ac:57: 9d:fc:29:64:a6:b5:95:59:62:ba:79:01:21:f4:ef: 1f:84:c9:4e:bb:7c:00:31:0d:52:e8:17:31:bb:47: 66:76:e8:a5:88:98:7c:b2:aa:ed:ea:5b:58:12:2d: b3:2e:da:ef:ff:53:5e:c5:b9:43:c6:df:cf:32:6a: 05:b5:57:96:69:0e:c4:cc:1d:d4:40:b1:17:da:43: 29:2a:a5:e2:d3:51:73:0d:d7:c3:aa:78:51:3c:55: 95:2a:b3:73:88:bc:fd:b8:f9:a0:47:55:4d:cb:61: 7c:95:33:03:f7:a4:d6:67:27:81:14:e3:82:9f:ef: dd:80:12:8c:6e:36:e1:77:b9:81:5a:c8:f3:96:d0: a4:09:e4:db:94:94:3b:09:2b:bc:b3:ba:78:7f:3e: 8c:af:50:5f:a7:d5:60:bb:30:70:b7:4f:59:d6:92: fb:ac:43:fb:d2:25:e9:b0:9a:72:e0:40:3f:03:01: 87:e9:2a:be:e9:01:78:4b:64:12:27:f5:7a:4d:12: 56:eb:cc:e5:63:15:70:8a:d1:df:d7:1d:bd:30:5f: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.128.0/19 217.146.48.0/20 IPv6: 2a00:dbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48885 Signature Algorithm: sha256WithRSAEncryption 75:d8:32:38:22:7b:b7:c3:d1:a9:fa:bb:69:52:53:c6:b3:12: 61:ab:22:b4:5c:2c:b6:db:73:3f:7d:e8:7b:ad:8e:d5:0c:cc: ed:34:ec:3f:69:3c:04:b9:82:e3:ef:f8:0c:5e:64:73:32:a3: 8d:fe:ad:af:8f:ab:ec:64:21:6d:48:17:41:89:a3:dd:5a:7d: de:f9:13:f0:e4:d2:5e:2b:dd:a5:26:d0:92:2f:5c:6f:e7:40: d8:03:56:21:71:ea:d5:c7:cb:a9:93:e7:11:46:bf:69:80:8a: 79:4e:ac:cf:b7:fb:bf:65:dd:9a:b8:ef:74:2c:3c:a2:38:df: 67:61:28:3f:86:9c:a8:80:10:25:51:59:19:0f:ea:df:c7:74: cd:c2:01:56:67:ad:a2:ed:9a:b8:4b:4a:60:87:57:7b:bb:1e: 15:02:78:eb:b0:fd:29:db:23:7b:d9:6f:8d:5c:b1:1d:cf:28: b0:60:57:58:06:1b:17:ad:51:b4:fd:29:a1:4d:4a:40:04:ac: 8e:14:91:93:08:51:61:77:cb:36:17:7b:bc:f1:ce:40:f1:12: 7a:83:ce:0b:ca:51:09:7b:f7:72:cb:41:84:84:d5:d6:c5:af: f1:e2:ec:68:c7:83:c4:4d:46:0b:90:38:b4:92:74:3b:8e:10: 6b:a5:cd:dd -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87W11d+JuJPEoyc9WU/j+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGEwMTA2Y2QyODU3ZWYxMzIzNDg2N2NiN2YxNmEyM2E5M2ZhYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny0ygI1dtDoXHDg27v7TdQ0FGzq3 q8/ywKpuaUpmbQlPCYdFlRoQpTnIrFed/ClkprWVWWK6eQEh9O8fhMlOu3wAMQ1S 6Bcxu0dmduiliJh8sqrt6ltYEi2zLtrv/1NexblDxt/PMmoFtVeWaQ7EzB3UQLEX 2kMpKqXi01FzDdfDqnhRPFWVKrNziLz9uPmgR1VNy2F8lTMD96TWZyeBFOOCn+/d gBKMbjbhd7mBWsjzltCkCeTblJQ7CSu8s7p4fz6Mr1Bfp9VguzBwt09Z1pL7rEP7 0iXpsJpy4EA/AwGH6Sq+6QF4S2QSJ/V6TRJW68zlYxVwitHf1x29MF808QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOCgEGzShX7xMjSGfLfxaiOpP6qTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzQ2ZjE0 Ny0xNzNmLTQyNjAtYWE3Yi0zYTZiZjg5MGEwMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNDZmMTQ3 LTE3M2YtNDI2MC1hYTdiLTNhNmJmODkwYTAxZC8xLzRLQVFiTktGZnZFeU5JWjh0 X0ZxSTZrX3FwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFJfyAAwQE2ZIwMA0EAgACMAcDBQAqANvAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC+9TANBgkqhkiG9w0BAQsFAAOCAQEAddgy OCJ7t8PRqfq7aVJTxrMSYasitFwstttzP33oe62O1QzM7TTsP2k8BLmC4+/4DF5k czKjjf6tr4+r7GQhbUgXQYmj3Vp93vkT8OTSXivdpSbQki9cb+dA2ANWIXHq1cfL qZPnEUa/aYCKeU6sz7f7v2XdmrjvdCw8ojjfZ2EoP4acqIAQJVFZGQ/q38d0zcIB Vmetou2auEtKYIdXe7seFQJ467D9Kdsje9lvjVyxHc8osGBXWAYbF61RtP0poU1K QASsjhSRkwhRYXfLNhd7vPHOQPESeoPOC8pRCXv3cstBhITV1sWv8eLsaMeDxE1G C5A4tJJ0O44Qa6XN3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:55 2026 by rpki-client