This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer File: 4KE7ki7n67muzeGacNDiW3d1DQI.cer (raw, json) Hash identifier: HBtzRrgynGcvLOnksw+I6rgoB2O0Iariy6VRPp6YYLM= Subject key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36365394C2DB9AE07A3382B233181C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50592 IP: 193.105.115.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:36:53:94:c2:db:9a:e0:7a:33:82:b2:33:18:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bd:31:45:1e:f9:e4:d7:73:73:8e:cb:d9:28: fe:69:7f:51:2c:14:a0:17:62:a1:32:8e:f2:6c:34: 54:5e:95:e2:69:ad:81:2f:9b:1d:a8:a4:5e:ad:97: 98:07:35:36:f2:1c:4b:32:7a:42:3b:67:e6:da:b0: fd:08:ef:ba:77:5a:30:12:10:3a:08:31:3f:fe:5f: 8f:6b:a3:ea:e5:52:3b:70:04:ec:ed:30:f8:bc:47: 38:a8:a8:ae:78:fb:e1:b3:60:7c:ea:b5:52:49:3d: 7d:f5:e9:d3:dc:3d:5d:47:c9:f2:c7:a5:0a:48:8f: 95:7b:08:48:8a:ce:c6:04:7d:23:bc:e2:d6:99:42: 87:9f:c8:ee:19:0f:07:34:e4:6a:a8:67:34:96:dc: 01:2d:bc:bd:82:e2:9f:36:6a:cb:40:f9:e1:cd:81: a5:f2:55:af:3c:46:2a:22:ef:a3:57:46:b3:db:40: ba:f8:ca:9c:73:fa:de:0d:d5:33:5d:31:21:ac:bf: 7d:3d:8a:e1:a0:83:5d:08:4a:7a:da:c0:45:83:4a: f3:83:d8:2c:88:a4:34:05:aa:e2:90:3e:b5:ce:6f: b8:bc:37:2d:cf:74:b4:65:e3:e5:3e:84:1a:14:81: 0c:f0:45:f8:ad:1e:94:f6:52:38:66:a4:87:17:87: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.115.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50592 Signature Algorithm: sha256WithRSAEncryption 12:b7:67:b9:69:de:d3:d3:5a:78:8a:15:ed:e3:01:2d:6b:52: fb:e6:89:0d:e1:d5:8e:f7:7b:48:f2:eb:23:1f:56:0e:6a:a1: d0:d8:47:2a:56:ba:34:0a:fd:88:f5:3b:b8:a9:48:5e:c0:ce: 87:1c:cf:17:20:72:fa:b7:f8:83:a6:a6:c3:a1:a0:0e:b7:dd: 77:27:13:ab:ce:a5:ff:2b:82:02:13:88:71:ac:14:ea:ff:df: 60:85:f5:9d:69:88:42:cc:07:47:53:07:97:96:fe:b2:f0:ab: 0a:cd:fb:27:19:7c:4c:e5:65:6b:ac:40:05:09:b3:66:3e:f3: 6c:cb:f3:ac:3c:51:c1:98:45:64:1e:8a:04:18:b7:4a:f4:10: 2f:d8:a2:f6:d5:75:dd:ab:6c:bc:f0:0e:bf:f1:b1:72:ae:af: 91:de:23:18:2d:15:4f:b5:e7:d1:b5:54:8c:9e:c7:7d:77:fd: 35:01:fa:96:37:a7:8b:be:00:b0:93:db:34:bb:e5:02:4f:20: 36:53:68:f6:f3:3a:34:f7:61:d9:b2:b7:dd:e1:08:96:13:7f: d2:38:83:6a:cd:e6:86:5d:66:3a:8a:0d:ac:3f:b3:d8:05:92: a9:b2:56:22:f3:9d:ce:68:65:7b:b8:d8:72:5e:9e:a4:32:c0: af:59:3f:dc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NjZTlMLbmuB6M4KyMxgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGExM2I5MjJlZTdlYmI5YWVjZGUxOWE3MGQwZTI1Yjc3NzUwZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr0xRR755Ndzc47L2Sj+aX9RLBSg F2KhMo7ybDRUXpXiaa2BL5sdqKRerZeYBzU28hxLMnpCO2fm2rD9CO+6d1owEhA6 CDE//l+Pa6Pq5VI7cATs7TD4vEc4qKiuePvhs2B86rVSST199enT3D1dR8nyx6UK SI+VewhIis7GBH0jvOLWmUKHn8juGQ8HNORqqGc0ltwBLby9guKfNmrLQPnhzYGl 8lWvPEYqIu+jV0az20C6+Mqcc/reDdUzXTEhrL99PYrhoINdCEp62sBFg0rzg9gs iKQ0BarikD61zm+4vDctz3S0ZePlPoQaFIEM8EX4rR6U9lI4ZqSHF4e3CQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2Y3N2M1 Yi0xOWIyLTRiYzEtOGZhYS0xMGIwMjExZDk2ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvZjc3YzVi LTE5YjItNGJjMS04ZmFhLTEwYjAyMTFkOTZmYy8xLzRLRTdraTduNjdtdXplR2Fj TkRpVzNkMURRSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWlzMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDFoDANBgkqhkiG9w0BAQsFAAOCAQEAErdnuWne09NaeIoV7eMBLWtS++aJDeHV jvd7SPLrIx9WDmqh0NhHKla6NAr9iPU7uKlIXsDOhxzPFyBy+rf4g6amw6GgDrfd dycTq86l/yuCAhOIcawU6v/fYIX1nWmIQswHR1MHl5b+svCrCs37Jxl8TOVla6xA BQmzZj7zbMvzrDxRwZhFZB6KBBi3SvQQL9ii9tV13atsvPAOv/Gxcq6vkd4jGC0V T7Xn0bVUjJ7HfXf9NQH6ljeni74AsJPbNLvlAk8gNlNo9vM6NPdh2bK33eEIlhN/ 0jiDas3mhl1mOooNrD+z2AWSqbJWIvOdzmhle7jYcl6epDLAr1k/3A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:20 2026 by rpki-client