This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer File: 4McMwtIdqMLqZIFTT0jaSVqoS90.cer (raw, json) Hash identifier: xsSfaOaZcKlTRuimIvc1IgtLW0PMVjLmUNY3N+Witpc= Subject key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7214215AFFD7DD743533028FD8E25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12519 IP: 81.31.64.0/20 IP: 82.148.32.0/19 IP: 87.252.32.0/19 IP: 185.10.100.0/22 IP: 212.42.160.0/19 IP: 2a02:13a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:21:42:15:af:fd:7d:d7:43:53:30:28:fd:8e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:2a:cb:cd:4d:f5:c3:c0:f4:ea:90:3d:f3: b1:b2:13:0d:50:ea:62:74:81:27:a7:97:ca:25:ec: 74:cc:a6:43:c5:a2:ca:01:0d:2d:9d:ea:6e:88:8a: a8:db:e9:f3:c5:4d:b5:2c:0c:d9:5f:21:c7:06:60: 8b:0c:51:54:b1:21:00:50:cf:79:59:18:3a:a9:f6: 93:01:87:13:f2:a0:22:3b:a1:27:8e:a4:2c:31:31: bf:17:bc:77:b2:88:f6:2e:f4:75:7a:0a:e7:29:a6: a3:03:fc:9e:fa:aa:95:ed:a6:db:6b:3f:70:9e:f7: 03:b0:36:52:d4:a4:51:2e:84:52:8d:61:d6:d2:5f: 97:d9:3c:8f:35:9f:51:b7:3a:d5:92:ac:65:2a:96: d9:cb:ff:9e:fd:94:d8:e7:68:10:eb:18:8d:98:64: a8:44:b8:b9:2c:37:77:b0:e2:36:01:9e:6f:5b:6e: 4f:d6:0c:e8:b2:fe:ea:8f:11:70:e8:fd:e1:29:69: 6d:c7:ff:da:60:00:ef:4d:c3:28:0d:76:6a:c7:5a: a3:a8:82:d2:48:de:09:11:8c:75:98:c3:95:63:a3: c2:74:85:0c:ee:0d:09:e6:6d:79:96:a8:8f:3a:ea: 9c:7b:20:41:7f:97:ef:0d:46:b2:4c:23:d7:80:70: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.64.0/20 82.148.32.0/19 87.252.32.0/19 185.10.100.0/22 212.42.160.0/19 IPv6: 2a02:13a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12519 Signature Algorithm: sha256WithRSAEncryption 1c:cc:61:c1:a6:ac:02:d1:5a:ad:9b:0e:8f:e0:06:75:2f:78: 3a:20:e4:03:ba:b2:f6:0a:92:c9:3f:8e:6b:d9:b5:aa:bb:b0: cb:c4:db:72:79:8a:9a:eb:35:ae:be:78:49:67:35:a6:36:56: 9f:3d:1c:c8:ad:53:36:3f:b0:d8:0d:77:d7:48:37:14:4e:06: 67:d0:77:8a:21:19:de:04:64:f5:fd:7f:28:41:50:d9:88:f6: bc:4f:e7:fa:48:4e:2d:5d:be:4d:e3:92:89:ed:a9:97:5c:2c: f5:69:54:f5:69:77:8e:bc:bf:b5:e1:c7:5d:40:d3:06:6d:36: 8b:f9:25:fc:81:ec:1e:ac:b4:68:42:32:77:67:1f:21:d9:83: 7c:ed:d1:0d:a4:30:84:a7:c2:52:72:91:92:71:8c:59:f2:87: 62:74:80:19:1a:fc:d6:0c:c9:94:ea:10:b0:45:12:8e:f9:9b: 91:ca:3f:ce:88:d7:67:8f:b4:7e:b4:9d:a1:3f:b3:48:55:16: e0:c0:31:a1:54:84:bb:91:43:69:f6:8e:fc:f6:84:05:06:6e: 41:c9:84:18:60:7a:93:33:12:8c:7a:d6:08:27:12:67:1f:1b: 9d:af:bd:04:66:de:aa:20:62:95:f5:77:b5:91:41:b7:43:47: 46:36:41:6a -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+pyFCFa/9fddDUzAo/Y4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGM3MGNjMmQyMWRhOGMyZWE2NDgxNTM0ZjQ4ZGE0OTVhYTg0YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiAqy81N9cPA9OqQPfOxshMNUOpi dIEnp5fKJex0zKZDxaLKAQ0tnepuiIqo2+nzxU21LAzZXyHHBmCLDFFUsSEAUM95 WRg6qfaTAYcT8qAiO6EnjqQsMTG/F7x3soj2LvR1egrnKaajA/ye+qqV7abbaz9w nvcDsDZS1KRRLoRSjWHW0l+X2TyPNZ9RtzrVkqxlKpbZy/+e/ZTY52gQ6xiNmGSo RLi5LDd3sOI2AZ5vW25P1gzosv7qjxFw6P3hKWltx//aYADvTcMoDXZqx1qjqILS SN4JEYx1mMOVY6PCdIUM7g0J5m15lqiPOuqceyBBf5fvDUayTCPXgHAWZwIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFODHDMLSHajC6mSBU09I2klaqEvdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzcxMDMz Yy0wYjZhLTQ2ZTYtYTVmZS0zMjlhOTlmMGYxYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNzEwMzNj LTBiNmEtNDZlNi1hNWZlLTMyOWE5OWYwZjFiNS8xLzRNY013dElkcU1McVpJRlRU MGphU1Zxb1M5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQEUR9AAwQFUpQgAwQFV/wgAwQCuQpkAwQF1Cqg MA0EAgACMAcDBQAqAhOgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjDnMA0GCSqG SIb3DQEBCwUAA4IBAQAczGHBpqwC0Vqtmw6P4AZ1L3g6IOQDurL2CpLJP45r2bWq u7DLxNtyeYqa6zWuvnhJZzWmNlafPRzIrVM2P7DYDXfXSDcUTgZn0HeKIRneBGT1 /X8oQVDZiPa8T+f6SE4tXb5N45KJ7amXXCz1aVT1aXeOvL+14cddQNMGbTaL+SX8 gewerLRoQjJ3Zx8h2YN87dENpDCEp8JScpGScYxZ8odidIAZGvzWDMmU6hCwRRKO +ZuRyj/OiNdnj7R+tJ2hP7NIVRbgwDGhVIS7kUNp9o789oQFBm5ByYQYYHqTMxKM etYIJxJnHxudr70EZt6qIGKV9Xe1kUG3Q0dGNkFq -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:41 2026 by rpki-client