This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.cer (raw, json) Hash identifier: trWJYd06mNrNpvZbyrkyAEj+m8kd91/Ku0AnFRjnClQ= Subject key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3570695DF3DBA881C9C89386E76A31 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207222 IP: 185.162.48.0/22 IP: 2a0a::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:70:69:5d:f3:db:a8:81:c9:c8:93:86:e7:6a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e13727a29451be4dd9922b60d1c596e806a995fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:d3:6a:ec:fb:24:99:f7:a9:dd:ca:3d:83: 79:33:38:b2:c6:83:a9:17:da:3e:b9:fb:66:85:91: 3e:08:0c:f2:f4:fc:bb:4e:df:8a:c1:91:d6:8d:18: 2f:01:74:b5:0d:56:ee:94:db:f5:86:94:5f:aa:de: d5:82:33:3d:da:a2:43:30:85:87:3e:e7:2c:d6:3d: 90:b7:54:97:76:bf:03:16:4f:8d:cb:b8:38:7b:92: 0a:0e:9c:26:de:fd:80:ac:4c:69:20:b8:f8:98:f2: a2:4f:d0:04:c2:ad:93:dd:01:e4:1a:1f:dc:31:e1: e8:19:f7:bb:85:88:62:15:0f:43:47:a2:d9:be:24: 17:15:f8:f0:b3:d1:0b:9e:33:eb:38:69:51:6a:f4: ba:f9:12:f0:b8:9a:76:ea:ec:d7:c4:80:27:46:57: 75:3f:eb:14:d9:27:8c:5e:98:85:db:5a:6c:8e:34: 83:0d:45:17:5a:04:68:29:8b:5e:5c:7b:8e:d7:2e: af:2b:b0:7e:d0:a3:62:e7:9b:f6:31:32:da:cd:c3: 17:ec:46:03:92:b1:6c:c5:dc:14:a4:23:99:88:87: 8e:6a:60:ed:1b:c6:3f:ee:09:03:70:7b:4e:c3:e0: 48:16:3c:1e:63:77:49:02:36:35:25:f2:a6:ff:43: 7e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.48.0/22 IPv6: 2a0a::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207222 Signature Algorithm: sha256WithRSAEncryption 28:a7:53:20:7a:f3:11:c6:a4:58:cd:a9:90:e0:bd:30:f0:6c: f5:da:af:1d:83:78:d6:ef:1c:56:9c:e2:12:5f:a3:4c:78:fc: 67:c0:79:4b:2f:e2:00:60:be:d8:96:00:36:32:0f:ab:6f:b0: fa:99:e0:a8:9a:a1:fa:8a:7b:b9:97:bc:d1:2e:e3:54:d1:27: 10:73:ed:43:14:fe:67:7c:24:8e:ba:ef:14:cd:11:0e:9a:22: bd:ac:f5:1e:fa:cb:ed:75:f4:d3:d4:38:f9:46:dd:21:55:ce: 99:ab:69:9a:6e:e8:59:23:2c:0e:08:25:cd:ea:80:7c:c8:c0: 4c:36:f8:ba:2c:23:35:a4:ca:29:9d:7d:83:40:35:9f:64:0f: 65:2a:d6:6f:b0:65:98:a8:ec:8d:ed:fc:33:ae:9c:a2:c5:7c: c7:8c:53:c1:70:cc:1e:ab:5d:e2:46:0c:4a:19:93:72:60:9f: 21:11:14:bf:a2:43:39:4f:21:fe:c5:fd:3e:0e:ae:3c:11:73: 7b:2d:a1:fc:aa:cf:96:14:9f:e6:30:3a:ed:c9:b2:23:38:45: ca:b5:e9:73:ca:5c:71:ab:cb:58:fa:c1:30:0c:37:9a:03:0c: 68:9f:af:f9:1a:e8:5c:0d:91:30:e1:56:d9:91:21:3c:42:38: aa:b5:70:a1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NXBpXfPbqIHJyJOG52oxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTM3MjdhMjk0NTFiZTRkZDk5MjJiNjBkMWM1OTZlODA2YTk5NWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBDTauz7JJn3qd3KPYN5MziyxoOp F9o+uftmhZE+CAzy9Py7Tt+KwZHWjRgvAXS1DVbulNv1hpRfqt7VgjM92qJDMIWH Pucs1j2Qt1SXdr8DFk+Ny7g4e5IKDpwm3v2ArExpILj4mPKiT9AEwq2T3QHkGh/c MeHoGfe7hYhiFQ9DR6LZviQXFfjws9ELnjPrOGlRavS6+RLwuJp26uzXxIAnRld1 P+sU2SeMXpiF21psjjSDDUUXWgRoKYteXHuO1y6vK7B+0KNi55v2MTLazcMX7EYD krFsxdwUpCOZiIeOamDtG8Y/7gkDcHtOw+BIFjweY3dJAjY1JfKm/0N+WQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOE3J6KUUb5N2ZIrYNHFlugGqZX7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2RlMzdm YS0xYmQyLTQ3ZjUtOWUyYi1hYzRjOGYxOTg3NmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvZGUzN2Zh LTFiZDItNDdmNS05ZTJiLWFjNGM4ZjE5ODc2ZC8xLzRUY25vcFJSdmszWmtpdGcw Y1dXNkFhcGxmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaIwMA0EAgACMAcDBQMqCgAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpdjANBgkqhkiG9w0BAQsFAAOCAQEAKKdTIHrzEcak WM2pkOC9MPBs9dqvHYN41u8cVpziEl+jTHj8Z8B5Sy/iAGC+2JYANjIPq2+w+png qJqh+op7uZe80S7jVNEnEHPtQxT+Z3wkjrrvFM0RDpoivaz1HvrL7XX009Q4+Ubd IVXOmatpmm7oWSMsDgglzeqAfMjATDb4uiwjNaTKKZ19g0A1n2QPZSrWb7BlmKjs je38M66cosV8x4xTwXDMHqtd4kYMShmTcmCfIREUv6JDOU8h/sX9Pg6uPBFzey2h /KrPlhSf5jA67cmyIzhFyrXpc8pccavLWPrBMAw3mgMMaJ+v+RroXA2RMOFW2ZEh PEI4qrVwoQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:29 2026 by rpki-client