This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.cer (raw, json) Hash identifier: QELJI2WOkEpTTF6PRUyWhLIVL1PCVLwpcFsWPEvd+ZI= Subject key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBC46463C92F3D16F9C18DD55686EBF3D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 11:31:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211757 IP: 31.43.172.0/23 IP: 85.137.128.0/19 IP: 141.138.152.0/21 IP: 185.242.186.0/24 IP: 2a10:9840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:46:46:3c:92:f3:d1:6f:9c:18:dd:55:68:6e:bf:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 11:31:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e122e2b58233a193d1f72778565d6c98d76163a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:92:f9:d1:a5:90:37:ce:eb:ed:90:d4:a3: 8b:6f:24:cd:6f:38:5a:f2:7b:4a:b1:6d:13:8e:d7: 9f:e0:26:8d:41:90:87:75:08:32:33:2f:0e:d9:37: 10:a5:26:69:eb:3b:f4:6e:55:66:3a:37:c3:39:fd: aa:74:d2:cd:7b:b8:f6:9c:27:06:6d:b5:72:a6:28: e9:6c:97:a8:50:53:15:35:a6:04:2f:45:4f:0c:5c: 92:5d:03:8e:29:ed:d5:7b:0e:f1:1c:06:80:77:53: d0:23:46:8e:74:0b:2b:7c:00:68:34:c4:e7:ab:20: c5:fc:3f:e7:6c:73:b2:3e:44:01:79:d2:b3:26:40: 4d:15:2a:eb:1c:b1:cb:f4:c6:99:9a:71:cd:4e:bd: 20:9b:1f:12:d1:de:55:c3:5d:dd:90:12:3a:c8:5f: d3:a1:42:86:a4:51:d1:88:5d:75:87:11:0e:20:e9: 76:bd:20:ea:7c:fc:6f:88:90:0b:47:62:11:b3:04: c9:c8:6d:4f:04:fa:ea:1a:e3:bb:8e:7c:de:8f:bb: 62:d0:06:fa:25:dd:b1:65:e4:af:58:f1:06:e2:f2: 26:fe:33:4a:b9:a3:f7:4b:d8:ac:c2:b0:c8:0b:d9: f1:27:cb:0d:ca:3c:b7:6d:88:9e:27:05:3d:d3:e3: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.172.0/23 85.137.128.0/19 141.138.152.0/21 185.242.186.0/24 IPv6: 2a10:9840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211757 Signature Algorithm: sha256WithRSAEncryption 6f:dd:f9:b3:3d:2d:d0:48:69:27:19:02:a4:ee:17:18:b7:84: 0f:9b:f9:86:35:c1:a5:93:b6:0c:91:1c:a9:2d:cf:ef:41:4a: fd:bb:1c:25:1a:f7:77:b3:b1:5b:87:40:f0:c2:eb:f6:97:dd: b6:80:cf:93:73:b9:fa:29:05:30:09:de:ed:18:98:5a:a2:e7: 79:da:41:b4:93:80:2b:97:54:38:b9:a2:b0:4a:f1:04:49:d1: 4c:7c:19:e5:d5:82:e4:d2:b4:fb:54:79:5d:48:50:3c:28:0d: 4f:91:c2:22:7e:49:71:cc:d8:e8:de:ba:79:4c:86:35:75:77: e0:30:ec:c4:4b:d9:0d:ca:0c:9e:88:6f:2a:ff:49:93:e3:12: 17:51:24:0c:7c:b6:a2:a0:fe:63:ff:fc:d9:01:c9:df:61:ce: be:60:8b:76:e1:0f:c6:c5:dc:8e:1a:2b:d9:14:94:62:00:bd: a0:2a:3f:dc:9a:38:be:3d:0b:ba:46:08:af:3e:60:c5:ec:60: 27:1d:32:a1:ae:e2:59:d6:6b:8d:53:b8:ce:09:cc:f7:0b:c9: ab:ab:10:50:a6:39:ae:7f:08:5a:20:cd:f3:14:15:3b:3a:58: 1d:ee:f8:25:d7:42:e7:12:ff:e5:de:13:0e:49:86:a5:23:0a: b6:bd:21:c6 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZu8RkY8kvPRb5wY3VVobr89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MTEzMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTIyZTJiNTgyMzNhMTkzZDFmNzI3Nzg1NjVkNmM5OGQ3NjE2M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5GS+dGlkDfO6+2Q1KOLbyTNbzha 8ntKsW0Tjtef4CaNQZCHdQgyMy8O2TcQpSZp6zv0blVmOjfDOf2qdNLNe7j2nCcG bbVypijpbJeoUFMVNaYEL0VPDFySXQOOKe3Vew7xHAaAd1PQI0aOdAsrfABoNMTn qyDF/D/nbHOyPkQBedKzJkBNFSrrHLHL9MaZmnHNTr0gmx8S0d5Vw13dkBI6yF/T oUKGpFHRiF11hxEOIOl2vSDqfPxviJALR2IRswTJyG1PBPrqGuO7jnzej7ti0Ab6 Jd2xZeSvWPEG4vIm/jNKuaP3S9iswrDIC9nxJ8sNyjy3bYieJwU90+Nn+QIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFOEi4rWCM6GT0fcneFZdbJjXYWOnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2Q4MTVm ZC1jZmFiLTRhNGEtOTU5NS00MTY2Yjc1YjA4YWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZDgxNWZk LWNmYWItNGE0YS05NTk1LTQxNjZiNzViMDhhZi8xLzRTTGl0WUl6b1pQUjl5ZDRW bDFzbU5kaFk2Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBHyusAwQFVYmAAwQDjYqYAwQAufK6MA0EAgAC MAcDBQMqEJhAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM7LTANBgkqhkiG9w0B AQsFAAOCAQEAb935sz0t0EhpJxkCpO4XGLeED5v5hjXBpZO2DJEcqS3P70FK/bsc JRr3d7OxW4dA8MLr9pfdtoDPk3O5+ikFMAne7RiYWqLnedpBtJOAK5dUOLmisErx BEnRTHwZ5dWC5NK0+1R5XUhQPCgNT5HCIn5JcczY6N66eUyGNXV34DDsxEvZDcoM nohvKv9Jk+MSF1EkDHy2oqD+Y//82QHJ32HOvmCLduEPxsXcjhor2RSUYgC9oCo/ 3Jo4vj0LukYIrz5gxexgJx0yoa7iWdZrjVO4zgnM9wvJq6sQUKY5rn8IWiDN8xQV OzpYHe74JddC5xL/5d4TDkmGpSMKtr0hxg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:45 2026 by rpki-client