This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer (raw, json) Hash identifier: LzmlvoXMdmMYOtyMMjBV+zuZVb4sdrzrZ9FbKvZoAaY= Subject key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA502D49FE79E3B93030D34BC55DE1B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43530 IP: 5.35.128.0/19 IP: 37.75.192.0/21 IP: 46.245.128.0/21 IP: 78.110.144.0/20 IP: 176.62.240.0/20 IP: 185.222.236.0/22 IP: 2a14:7e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:02:d4:9f:e7:9e:3b:93:03:0d:34:bc:55:de:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:e2:24:74:fe:50:4f:d7:73:95:8e:6f:f5: 31:86:b9:05:7e:1c:05:e6:c2:ed:06:23:f0:b9:83: a3:ff:94:a9:53:27:ac:ff:7c:10:c2:5a:1b:10:6a: 32:8e:80:e4:ab:e1:64:c7:af:41:c2:64:9b:09:b3: 90:35:0c:e5:0f:f8:8f:af:57:3e:a4:78:14:ca:96: 52:bd:aa:72:0c:7a:2c:18:13:af:cc:7d:a0:31:91: 8e:d5:a6:fd:2f:00:40:34:5a:d2:7e:30:44:b2:e8: 6c:42:92:91:89:bd:88:89:16:d6:0e:74:a0:62:29: 61:d6:7e:fa:78:1e:34:8c:4e:87:06:31:29:de:91: b5:1a:ce:8a:7c:51:fc:58:c2:b7:77:fc:b6:9c:4f: f0:72:57:2d:a8:64:47:33:43:0d:cd:79:24:a1:b1: 4b:8f:86:fd:ae:55:05:a4:70:d0:eb:99:ca:cd:fa: 4c:b3:7f:a8:db:b2:a8:54:c4:54:59:09:a1:f8:a3: 44:aa:f8:1c:0d:25:93:62:5f:d6:43:8c:51:e4:e7: fe:f7:19:12:a3:6b:ce:9d:4a:94:e1:38:d8:e3:83: d1:2f:af:7d:61:43:50:aa:fa:f9:71:00:b6:10:18: 6d:1d:71:ea:79:6e:1e:bc:ff:6f:a5:34:33:48:09: e2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.128.0/19 37.75.192.0/21 46.245.128.0/21 78.110.144.0/20 176.62.240.0/20 185.222.236.0/22 IPv6: 2a14:7e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43530 Signature Algorithm: sha256WithRSAEncryption 96:49:a2:8b:9e:db:2b:73:e2:af:65:90:76:5a:db:ab:71:fd: 3d:63:69:4f:3c:85:c9:52:93:65:60:49:57:4a:fd:25:c2:0a: 11:42:2f:41:4d:c2:fe:ce:ea:4b:51:d2:d7:c7:c6:85:ee:c5: d4:4a:1b:05:c4:31:18:be:2a:a0:3f:03:2c:55:ed:ac:f7:99: 9d:70:d9:20:19:6d:b3:de:e0:ca:b8:cc:6d:d8:ad:db:5e:9b: c6:81:b8:98:b8:76:4f:bb:98:b2:59:1f:96:c5:85:b5:a5:ce: eb:3e:bc:b5:59:51:ff:43:ac:36:50:34:e3:f0:45:bb:f7:48: d0:79:d9:6a:d6:e8:e8:67:bd:0f:26:aa:1a:0b:a7:f1:4c:28: a9:72:98:db:ff:84:a0:44:34:cf:33:06:f3:be:56:ec:bd:98: 54:e5:f4:fb:d5:23:37:49:03:f2:16:36:4b:19:89:fa:06:73: db:f2:c8:66:7c:df:9c:23:2e:0b:ea:3a:f4:c0:e4:09:d1:dc: 20:98:79:ca:8e:43:f4:1a:50:4b:69:ae:28:6b:b4:54:76:a8: df:2b:f1:94:e4:21:3d:52:a5:97:99:ed:0d:6c:79:04:ce:22: b9:b9:53:9c:82:24:4a:1b:18:3a:d2:59:be:3a:de:fe:4c:a6: 3b:5c:91:ed -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt+pQLUn+eeO5MDDTS8Vd4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTBmYmI5YjNjZDFjMjE2YWRjNjk5ZTVlZGFkNWY1MzFkOWFmY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZTiJHT+UE/Xc5WOb/UxhrkFfhwF 5sLtBiPwuYOj/5SpUyes/3wQwlobEGoyjoDkq+Fkx69BwmSbCbOQNQzlD/iPr1c+ pHgUypZSvapyDHosGBOvzH2gMZGO1ab9LwBANFrSfjBEsuhsQpKRib2IiRbWDnSg Yilh1n76eB40jE6HBjEp3pG1Gs6KfFH8WMK3d/y2nE/wclctqGRHM0MNzXkkobFL j4b9rlUFpHDQ65nKzfpMs3+o27KoVMRUWQmh+KNEqvgcDSWTYl/WQ4xR5Of+9xkS o2vOnUqU4TjY44PRL699YUNQqvr5cQC2EBhtHXHqeW4evP9vpTQzSAnimQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFOEPu5s80cIWrcaZ5e2tX1Mdmvy2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzgzZmY4 Zi0xNmNhLTQyNDktYjc3NC02MmEyOGYzZTAwMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvODNmZjhm LTE2Y2EtNDI0OS1iNzc0LTYyYTI4ZjNlMDAxYy8xLzRRLTdtenpSd2hhdHhwbmw3 YTFmVXgyYV9MWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQFBSOAAwQDJUvAAwQDLvWAAwQETm6QAwQEsD7w AwQCud7sMA0EAgACMAcDBQMqFH5AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCq CjANBgkqhkiG9w0BAQsFAAOCAQEAlkmii57bK3Pir2WQdlrbq3H9PWNpTzyFyVKT ZWBJV0r9JcIKEUIvQU3C/s7qS1HS18fGhe7F1EobBcQxGL4qoD8DLFXtrPeZnXDZ IBlts97gyrjMbdit216bxoG4mLh2T7uYslkflsWFtaXO6z68tVlR/0OsNlA04/BF u/dI0HnZatbo6Ge9DyaqGgun8UwoqXKY2/+EoEQ0zzMG875W7L2YVOX0+9UjN0kD 8hY2SxmJ+gZz2/LIZnzfnCMuC+o69MDkCdHcIJh5yo5D9BpQS2muKGu0VHao3yvx lOQhPVKll5ntDWx5BM4iublTnIIkShsYOtJZvjre/kymO1yR7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:38 2026 by rpki-client