This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer (raw, json) Hash identifier: ET+H0CMZ8AyCbmKv4EyKqXuNmar775tT++ofI137KVA= Subject key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11ED81D112EF2E3D428D3C9823C73E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12735 IP: 31.223.0.0/17 IP: 95.70.128.0/17 IP: 159.146.0.0/17 IP: 185.22.100.0/22 IP: 188.119.0.0/18 IP: 193.192.96.0/19 IP: 212.125.0.0/19 IP: 212.154.0.0/17 IP: 2a02:ff0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ed:81:d1:12:ef:2e:3d:42:8d:3c:98:23:c7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:93:0e:bf:68:e2:98:f1:f4:d7:12:63:d9: 14:89:6c:bf:30:ba:1c:ca:62:84:05:dc:06:c5:02: 44:f6:9b:e4:bb:c1:81:79:80:a8:3e:6b:68:d3:e5: 51:5a:74:99:32:98:13:15:2a:a1:8e:e4:2d:7c:91: 37:10:89:04:02:28:74:f6:f3:f6:5c:c8:e7:4e:c4: a9:09:60:68:5a:42:40:1d:e2:57:ea:5f:f2:3f:5f: a8:f5:62:c7:bd:70:48:20:c4:99:06:6c:25:a3:50: 7b:57:03:c8:ae:63:f4:93:73:92:b5:fb:f7:4f:d3: 49:46:76:cf:ad:0b:a9:76:af:ec:f8:33:26:3c:39: 4e:b2:6c:fc:8a:75:16:12:4d:f5:64:56:a7:d9:c7: 62:36:2c:11:8a:aa:de:ab:25:51:1c:de:c8:83:89: 8d:9c:40:bc:b9:f1:f4:b7:b1:b8:87:59:c5:85:53: c8:99:df:c0:1c:88:7b:b8:e6:4f:f5:73:d9:38:17: 64:f2:8d:37:b9:48:1e:fd:39:0b:cc:6d:a2:61:88: 9b:5d:1a:a0:bb:7b:f7:66:e9:46:4d:03:91:ac:d5: 8b:9a:78:01:f0:90:ff:e7:bc:22:88:f4:d6:42:fd: 8b:c3:ba:46:35:24:99:02:bd:c4:66:21:4f:68:a7: 86:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.223.0.0/17 95.70.128.0/17 159.146.0.0/17 185.22.100.0/22 188.119.0.0/18 193.192.96.0/19 212.125.0.0/19 212.154.0.0/17 IPv6: 2a02:ff0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12735 Signature Algorithm: sha256WithRSAEncryption 83:5c:a8:2d:8f:60:36:27:e9:98:2f:97:e9:67:0f:a1:7c:02: 52:5b:e1:cd:eb:6c:39:98:de:61:26:ca:c4:c5:49:dd:57:a9: 25:31:7c:21:3d:3f:23:57:e8:03:86:64:27:a0:48:de:81:df: 0f:d4:51:ed:5e:1a:4e:e3:83:96:7b:6e:b4:bf:0f:da:0a:a6: b6:ea:3b:dc:81:34:40:28:d6:c5:13:c0:e3:57:d4:df:59:b8: 05:d4:1b:b8:f6:22:b4:de:21:88:a1:d6:3b:70:67:04:6d:c4: be:65:e6:1f:04:81:39:48:5c:31:28:77:20:4e:e9:35:0b:c4: eb:c3:f4:5b:25:d7:a0:08:b9:4b:9d:7d:be:e8:25:91:fd:46: ff:eb:d4:81:1f:d9:69:2b:c0:b6:eb:24:cd:bf:a1:32:d0:50: ab:75:44:c4:5f:be:09:bf:8d:d2:66:23:a4:57:a9:c1:16:c0: 85:f6:45:c5:d4:9c:52:d2:af:71:a6:5c:01:14:43:3b:95:ae: 92:0f:f3:1d:67:14:e5:77:0b:75:02:ce:35:39:aa:0e:4e:2b: bd:84:b4:f3:e8:45:d7:4b:30:12:c6:e7:b2:14:89:15:6a:d0: 19:a3:7b:b3:16:3c:a1:db:22:da:22:6b:72:83:af:be:f5:2f: cc:10:df:db -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt8Ee2B0RLvLj1CjTyYI8c+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTBkNWMyOWEzNDM5NzAzZDg5YjVhYmYwM2E3NWQ4NjE3NzFiZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCTDr9o4pjx9NcSY9kUiWy/MLoc ymKEBdwGxQJE9pvku8GBeYCoPmto0+VRWnSZMpgTFSqhjuQtfJE3EIkEAih09vP2 XMjnTsSpCWBoWkJAHeJX6l/yP1+o9WLHvXBIIMSZBmwlo1B7VwPIrmP0k3OStfv3 T9NJRnbPrQupdq/s+DMmPDlOsmz8inUWEk31ZFan2cdiNiwRiqreqyVRHN7Ig4mN nEC8ufH0t7G4h1nFhVPImd/AHIh7uOZP9XPZOBdk8o03uUge/TkLzG2iYYibXRqg u3v3ZulGTQORrNWLmngB8JD/57wiiPTWQv2Lw7pGNSSZAr3EZiFPaKeGzwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFOENXCmjQ5cD2JtavwOnXYYXcb70MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzNlZGI0 Ny1mZDZlLTRjNTktYTdhYi1lNDJhNTgwNjRhNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvM2VkYjQ3 LWZkNmUtNGM1OS1hN2FiLWU0MmE1ODA2NGE2My8xLzRRMWNLYU5EbHdQWW0xcV9B NmRkaGhkeHZ2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQHH98AAwQHX0aAAwQHn5IAAwQCuRZkAwQGvHcA AwQFwcBgAwQF1H0AAwQH1JoAMA0EAgACMAcDBQMqAg/wMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAjG/MA0GCSqGSIb3DQEBCwUAA4IBAQCDXKgtj2A2J+mYL5fpZw+h fAJSW+HN62w5mN5hJsrExUndV6klMXwhPT8jV+gDhmQnoEjegd8P1FHtXhpO44OW e260vw/aCqa26jvcgTRAKNbFE8DjV9TfWbgF1Bu49iK03iGIodY7cGcEbcS+ZeYf BIE5SFwxKHcgTuk1C8Trw/RbJdegCLlLnX2+6CWR/Ub/69SBH9lpK8C26yTNv6Ey 0FCrdUTEX74Jv43SZiOkV6nBFsCF9kXF1JxS0q9xplwBFEM7la6SD/MdZxTldwt1 As41OaoOTiu9hLTz6EXXSzASxueyFIkVatAZo3uzFjyh2yLaImtyg6++9S/MEN/b -----END CERTIFICATE-----Generated at Mon Jan 26 14:03:29 2026 by rpki-client