This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.cer (raw, json) Hash identifier: izUqCmDDKvIjbB8G/RtqaosHJrbIvXIvdSSYmDQh8ow= Subject key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791100D21AFDC8F2DCA01410C9F54447 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205859 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:00:d2:1a:fd:c8:f2:dc:a0:14:10:c9:f5:44:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:d6:9d:a1:ba:f7:1b:d8:d3:56:fe:07:ad: 25:4f:f2:e6:14:84:92:f3:1e:c5:b7:aa:8e:88:08: 0e:69:8c:7a:c2:78:8f:01:69:8d:60:07:e7:c4:39: 45:fa:9a:55:03:8e:2b:2e:00:06:b1:70:0d:b5:e1: e2:e8:8a:65:c5:49:de:35:c8:79:4f:1e:0b:32:20: af:44:9b:65:b4:b6:0b:05:76:3f:7e:f1:b7:3f:78: 60:4e:8b:52:68:93:9f:48:56:f3:f3:e1:04:76:52: dd:9a:0c:92:02:b8:9b:2a:56:dc:14:6f:2d:1e:f7: c2:79:d0:7d:1a:b1:e5:b1:9a:fa:d1:d5:07:bd:a0: 12:f6:bd:ae:8d:0a:dd:aa:d2:50:29:40:20:e2:1c: cc:f2:b4:dd:34:8b:0d:b1:ed:4d:e6:38:91:30:4c: 85:bb:45:01:9e:15:4d:1b:ae:63:25:79:ae:7a:c2: 31:b7:67:69:cc:73:10:73:82:89:22:95:88:e7:d4: 9c:73:66:d1:9b:ef:f3:e9:ec:64:eb:25:18:45:db: 67:10:44:2f:34:44:ac:61:be:b3:ef:44:35:16:c2: 52:4a:d4:af:52:af:98:54:87:9a:a8:de:fb:f8:b7: b9:fd:5f:d8:c9:79:ee:66:9a:d6:a1:b0:33:42:19: e3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205859 Signature Algorithm: sha256WithRSAEncryption 89:42:40:13:08:fe:00:bd:9e:c8:0d:89:17:e0:ae:ac:80:70: 01:9d:1f:ce:2d:a6:60:00:be:24:ac:ce:f3:06:b5:46:a2:8b: a8:3e:7d:0d:dc:77:b9:0e:fd:fc:13:76:aa:8a:a5:67:87:06: 64:69:88:7e:2a:bc:d5:b2:83:d4:5e:05:5b:68:f7:fe:6a:a1: ef:f6:d3:b3:4b:8b:b0:27:7a:a1:7e:f3:73:ae:e8:39:04:97: 64:56:29:9b:c2:0f:d8:5a:55:65:91:e1:d2:f5:a1:ac:84:c4: cf:e1:4b:65:9e:78:f3:d9:7a:90:a9:64:b0:28:37:7c:9a:86: 6b:d3:e7:5e:28:28:bc:ae:09:52:5b:ec:da:d6:ee:79:0f:32: 33:f9:9c:87:41:f4:b9:1c:e0:7a:c2:60:70:a9:a0:5d:c2:bd: a6:3b:49:68:d1:5e:10:27:be:9f:e3:77:d7:3e:82:8f:55:ed: 48:16:f7:01:9e:48:e7:2f:da:b1:4d:5c:b2:ea:19:39:12:e9: 67:72:1f:45:9f:80:5f:fd:ce:de:24:ff:89:00:ef:83:6f:af: d3:bb:5e:2e:23:b5:cd:09:82:32:97:de:48:8b:bf:c7:dc:5d: 69:eb:21:af:ac:c1:07:da:c6:6c:85:90:f1:50:29:47:5c:ce: b3:5a:49:0a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EQDSGv3I8tygFBDJ9URHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGE1ODM5ODQ5YWQzYjhiZmZhMDE0OWJiMGUxMWU2NjFjOWMzZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQDWnaG69xvY01b+B60lT/LmFISS 8x7Ft6qOiAgOaYx6wniPAWmNYAfnxDlF+ppVA44rLgAGsXANteHi6IplxUneNch5 Tx4LMiCvRJtltLYLBXY/fvG3P3hgTotSaJOfSFbz8+EEdlLdmgySAribKlbcFG8t HvfCedB9GrHlsZr60dUHvaAS9r2ujQrdqtJQKUAg4hzM8rTdNIsNse1N5jiRMEyF u0UBnhVNG65jJXmuesIxt2dpzHMQc4KJIpWI59Scc2bRm+/z6exk6yUYRdtnEEQv NESsYb6z70Q1FsJSStSvUq+YVIeaqN77+Le5/V/YyXnuZprWobAzQhnjVwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOClg5hJrTuL/6AUm7DhHmYcnD1/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4L2ViOTdh Ny1kMWFkLTQyZDUtYTBjOC03OGZhZTdmYWRhYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvZWI5N2E3 LWQxYWQtNDJkNS1hMGM4LTc4ZmFlN2ZhZGFiYS8xLzRLV0RtRW10TzR2X29CU2Jz T0VlWmh5Y1BYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkIzANBgkqhkiG9w0BAQsFAAOCAQEAiUJAEwj+AL2e yA2JF+CurIBwAZ0fzi2mYAC+JKzO8wa1RqKLqD59Ddx3uQ79/BN2qoqlZ4cGZGmI fiq81bKD1F4FW2j3/mqh7/bTs0uLsCd6oX7zc67oOQSXZFYpm8IP2FpVZZHh0vWh rITEz+FLZZ5489l6kKlksCg3fJqGa9PnXigovK4JUlvs2tbueQ8yM/mch0H0uRzg esJgcKmgXcK9pjtJaNFeECe+n+N31z6Cj1XtSBb3AZ5I5y/asU1csuoZORLpZ3If RZ+AX/3O3iT/iQDvg2+v07teLiO1zQmCMpfeSIu/x9xdaeshr6zBB9rGbIWQ8VAp R1zOs1pJCg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:13 2026 by rpki-client