This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer File: 4MZJtmoZ2i_sI2sEndEioO82iw8.cer (raw, json) Hash identifier: A5+mzCN3cx/ynhufY7OIqmwygyt4L0JLzp7cmxw1Veo= Subject key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EB683D515431CE241CC4AA61E2364 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207061 IP: 91.233.181.0/24 IP: 2001:678:10b8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b6:83:d5:15:43:1c:e2:41:cc:4a:a6:1e:23:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:f7:78:48:54:37:d7:18:92:ba:c6:c5:46: 68:1d:db:3c:ca:e2:96:e4:c6:70:0f:ed:c9:c8:53: a0:8e:8b:3e:a2:3b:8d:35:50:2a:25:c2:75:61:58: 48:e0:f8:76:36:1a:fa:53:56:dd:65:80:c4:be:76: 9b:fe:f0:0c:39:b3:79:d5:db:12:2d:b5:23:33:7d: d7:d4:51:85:1e:d5:a7:e3:96:67:55:66:f6:fc:a1: 18:26:11:f4:d9:3f:a8:37:55:4a:f0:4b:6c:d1:51: 08:a5:d5:4f:49:91:67:60:1c:97:09:33:0a:a6:6e: 6e:9e:ec:24:41:19:ac:9c:0f:90:01:0d:83:46:44: 69:39:29:94:c1:1c:68:c0:95:00:fa:31:7b:6b:a1: a0:2d:bf:0e:30:3f:e8:4d:fd:cf:1a:fb:0f:aa:cd: bc:22:3a:80:8f:08:ad:2a:7c:40:16:b0:a5:74:d6: 2c:2f:dc:fc:2f:2c:dc:89:67:80:e6:a4:12:b4:bd: f7:2f:ca:f0:8c:eb:91:1f:e2:0c:dc:ff:5c:ae:eb: 51:8a:e3:c1:c1:92:7f:d0:8f:98:76:ab:d9:cb:6a: f3:1d:b3:bb:63:c0:6d:93:03:3a:6e:9e:1b:6d:f2: f3:d5:91:69:d7:4f:a6:96:5f:6f:96:42:31:21:3b: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.181.0/24 IPv6: 2001:678:10b8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207061 Signature Algorithm: sha256WithRSAEncryption 0f:5f:a8:d6:2f:60:6e:da:eb:98:62:52:8b:b6:b4:4c:c6:70: 44:40:0a:c4:c7:ad:22:95:40:30:3e:02:bf:8f:31:c9:53:93: 9d:52:e7:97:88:cc:8d:8d:7a:e4:bd:60:6f:b2:b2:86:fb:f6: 1e:aa:18:27:c8:68:75:1a:e3:e6:cb:88:53:e7:8b:c7:cc:db: 9c:bf:85:39:52:57:49:fe:12:16:f0:7a:03:73:18:e1:84:c7: d7:ac:e8:cc:36:3b:23:9d:52:21:02:71:39:f4:c4:c1:33:3a: f0:ee:59:dc:7a:bf:77:57:ec:7f:80:ce:cc:41:5c:d3:7c:8a: 71:6c:0e:c8:a8:d3:b5:92:59:e7:62:e4:38:ac:14:59:46:3e: 78:b8:54:db:9f:56:9a:a1:41:d2:e3:f3:bc:2f:8b:c7:b2:9f: 45:0c:ea:61:ac:1f:4f:e0:80:14:ff:18:f3:15:45:d3:b8:ee: 41:01:93:d0:5f:16:76:98:33:19:c0:2d:f3:ed:f7:96:04:53: 87:a4:32:f4:f8:ca:f7:51:f3:06:c1:09:f8:9e:4f:40:31:89: 68:a6:66:f1:e2:ac:31:38:c5:ff:0d:cf:ef:82:f7:33:a4:f9: c2:6f:63:9b:15:53:d1:c3:ce:50:89:1d:7c:4e:69:18:a7:e7: 8a:0e:96:cf -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt5fraD1RVDHOJBzEqmHiNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGM2NDliNjZhMTlkYTJmZWMyMzZiMDQ5ZGQxMjJhMGVmMzY4YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweP3eEhUN9cYkrrGxUZoHds8yuKW 5MZwD+3JyFOgjos+ojuNNVAqJcJ1YVhI4Ph2Nhr6U1bdZYDEvnab/vAMObN51dsS LbUjM33X1FGFHtWn45ZnVWb2/KEYJhH02T+oN1VK8Ets0VEIpdVPSZFnYByXCTMK pm5unuwkQRmsnA+QAQ2DRkRpOSmUwRxowJUA+jF7a6GgLb8OMD/oTf3PGvsPqs28 IjqAjwitKnxAFrCldNYsL9z8LyzciWeA5qQStL33L8rwjOuRH+IM3P9crutRiuPB wZJ/0I+YdqvZy2rzHbO7Y8BtkwM6bp4bbfLz1ZFp10+mll9vlkIxITv+DwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFODGSbZqGdov7CNrBJ3RIqDvNosPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2NiOGY3 Yy1jOGJmLTQzNDItODI2Yy04ZjU0NDg0N2JlNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvY2I4Zjdj LWM4YmYtNDM0Mi04MjZjLThmNTQ0ODQ3YmU3NC8xLzRNWkp0bW9aMmlfc0kyc0Vu ZEVpb084Mml3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW+m1MA8EAgACMAkDBwAgAQZ4ELgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAyjVMA0GCSqGSIb3DQEBCwUAA4IBAQAPX6jWL2Bu 2uuYYlKLtrRMxnBEQArEx60ilUAwPgK/jzHJU5OdUueXiMyNjXrkvWBvsrKG+/Ye qhgnyGh1GuPmy4hT54vHzNucv4U5UldJ/hIW8HoDcxjhhMfXrOjMNjsjnVIhAnE5 9MTBMzrw7lncer93V+x/gM7MQVzTfIpxbA7IqNO1klnnYuQ4rBRZRj54uFTbn1aa oUHS4/O8L4vHsp9FDOphrB9P4IAU/xjzFUXTuO5BAZPQXxZ2mDMZwC3z7feWBFOH pDL0+Mr3UfMGwQn4nk9AMYlopmbx4qwxOMX/Dc/vgvczpPnCb2ObFVPRw85QiR18 TmkYp+eKDpbP -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:32 2026 by rpki-client