This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer File: 4VgI8_khvIw-6ofHWExYTBAAsFE.cer (raw, json) Hash identifier: ulxthSUoqC967z/ZgUm1TeMYGdE/6PVJ6d9zBtgYMGY= Subject key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6D691AA192DC1BF2460D94DE3ADB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203299 AS: 204860 AS: 213395 IP: 45.83.124.0/22 IP: 45.83.132.0 -- 45.83.139.255 IP: 45.83.144.0/22 IP: 45.83.152.0/22 IP: 45.139.36.0/22 IP: 45.139.44.0/22 IP: 45.139.56.0/22 IP: 45.139.64.0/22 IP: 45.156.44.0/22 IP: 45.158.88.0/22 IP: 185.135.20.0/22 IP: 194.180.110.0/24 IP: 194.180.115.0/24 IP: 194.180.150.0/24 IP: 194.180.154.0/24 IP: 2a06:f080::/29 IP: 2a0f:2a80::/29 IP: 2a0f:5880::/29 IP: 2a10:2e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d6:91:aa:19:2d:c1:bf:24:60:d9:4d:e3:ad:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:12:b1:e8:29:1d:30:33:cc:ad:84:a8:75: 77:73:38:a8:91:e0:1e:6c:a0:52:b7:8e:2b:e9:12: 24:6e:21:de:29:9a:24:62:fe:f6:43:1e:59:5d:b4: c4:02:37:72:c4:fe:a4:1a:3e:e1:bb:bb:e0:0c:d0: 9a:6c:96:68:78:7e:33:45:1f:5b:6c:10:a7:ea:b9: fd:f9:e0:0d:33:c1:42:7d:99:e0:d1:2f:e8:0f:3d: d8:e6:91:26:49:dd:45:c2:a7:5f:e4:ea:df:eb:e3: e2:c8:0d:00:e7:36:21:9b:de:67:a9:8c:bc:cc:c0: 8e:9b:25:26:25:70:bf:64:d1:6d:10:bd:fc:f1:ee: 2a:52:f4:32:e2:89:ee:6c:07:85:56:26:3a:2f:ce: c2:c1:6b:25:48:78:39:6e:78:73:e8:29:27:e5:67: ba:93:ac:9e:c0:06:f7:7f:8b:0a:10:c8:88:39:58: 1c:60:0f:39:c6:e6:80:1d:12:bf:ca:0c:a4:f4:04: f2:81:e9:1f:ed:37:a3:ec:a5:3e:56:f3:e8:16:d8: 5e:33:de:24:39:ed:5e:00:dc:7b:e6:37:73:17:28: 2b:e4:49:51:28:75:c9:68:5b:89:4b:bf:8a:24:26: 22:f3:85:73:09:bf:b2:23:c2:d7:74:76:a8:46:28: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.124.0/22 45.83.132.0-45.83.139.255 45.83.144.0/22 45.83.152.0/22 45.139.36.0/22 45.139.44.0/22 45.139.56.0/22 45.139.64.0/22 45.156.44.0/22 45.158.88.0/22 185.135.20.0/22 194.180.110.0/24 194.180.115.0/24 194.180.150.0/24 194.180.154.0/24 IPv6: 2a06:f080::/29 2a0f:2a80::/29 2a0f:5880::/29 2a10:2e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203299 204860 213395 Signature Algorithm: sha256WithRSAEncryption 06:7a:81:6f:42:9d:cc:ea:a8:ae:ad:95:16:1b:2b:dd:cf:19: ba:4b:17:bc:60:bc:61:89:09:21:90:90:e6:50:7a:4d:68:3c: cc:3c:79:5c:ae:e7:c3:3b:d2:a1:f2:78:a8:15:3e:ff:e9:d2: da:44:f9:9f:f1:6e:c5:73:89:1e:8c:7c:41:26:35:ee:03:91: 9d:c7:25:55:55:06:13:da:f4:ff:6f:a5:94:16:ca:1b:4a:a0: c6:9b:4f:8b:03:0b:70:e5:38:1e:de:d9:00:84:23:e9:a4:fa: a7:a2:d4:f7:54:e5:7f:57:68:df:77:d8:d2:5e:dd:38:00:d6: 93:64:33:7f:7d:c5:0d:44:36:f2:34:24:6e:99:45:fe:05:54: dd:5e:42:80:52:64:d3:2a:63:33:ec:eb:29:88:47:df:de:8d: aa:6d:25:06:ba:bd:b6:d3:c1:f3:e0:ad:ea:8a:de:bc:0b:43: 75:34:f0:50:93:b0:6c:bd:0b:f6:1a:51:17:6b:10:9d:de:e5: 91:1b:19:ee:ed:47:1b:4b:c0:28:58:29:4a:03:c0:39:aa:05: 23:b7:ce:2e:13:3e:f7:4d:b8:95:26:e9:66:90:50:5a:97:03: 70:1b:d4:d7:b5:d2:02:27:30:b2:44:2a:7a:07:82:7c:3c:82: b1:b1:e7:6e -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgISAZt3xtaRqhktwb8kYNlN462zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTU4MDhmM2Y5MjFiYzhjM2VlYTg3Yzc1ODRjNTg0YzEwMDBiMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdYSsegpHTAzzK2EqHV3cziokeAe bKBSt44r6RIkbiHeKZokYv72Qx5ZXbTEAjdyxP6kGj7hu7vgDNCabJZoeH4zRR9b bBCn6rn9+eANM8FCfZng0S/oDz3Y5pEmSd1Fwqdf5Orf6+PiyA0A5zYhm95nqYy8 zMCOmyUmJXC/ZNFtEL388e4qUvQy4onubAeFViY6L87CwWslSHg5bnhz6Ckn5We6 k6yewAb3f4sKEMiIOVgcYA85xuaAHRK/ygyk9ATygekf7Tej7KU+VvPoFtheM94k Oe1eANx75jdzFygr5ElRKHXJaFuJS7+KJCYi84VzCb+yI8LXdHaoRihQ7wIDAQAB o4IDLTCCAykwHQYDVR0OBBYEFOFYCPP5IbyMPuqHx1hMWEwQALBRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzhlOGU4 Mi01Mjc0LTRkMmYtOGNhMC1hYjE5ZmNiMGNlNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvOGU4ZTgy LTUyNzQtNGQyZi04Y2EwLWFiMTlmY2IwY2U2NC8xLzRWZ0k4X2todkl3LTZvZkhX RXhZVEJBQXNGRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGhBggrBgEF BQcBBwEB/wSBkTCBjjBoBAIAATBiAwQCLVN8MAwDBAItU4QDBAItU4gDBAItU5AD BAItU5gDBAItiyQDBAItiywDBAItizgDBAIti0ADBAItnCwDBAItnlgDBAK5hxQD BADCtG4DBADCtHMDBADCtJYDBADCtJowIgQCAAIwHAMFAyoG8IADBQMqDyqAAwUD Kg9YgAMFAyoQLkAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAxojAgMDIDwCAwNB kzANBgkqhkiG9w0BAQsFAAOCAQEABnqBb0KdzOqorq2VFhsr3c8ZuksXvGC8YYkJ IZCQ5lB6TWg8zDx5XK7nwzvSofJ4qBU+/+nS2kT5n/FuxXOJHox8QSY17gORnccl VVUGE9r0/2+llBbKG0qgxptPiwMLcOU4Ht7ZAIQj6aT6p6LU91Tlf1do33fY0l7d OADWk2Qzf33FDUQ28jQkbplF/gVU3V5CgFJk0ypjM+zrKYhH396Nqm0lBrq9ttPB 8+Ct6orevAtDdTTwUJOwbL0L9hpRF2sQnd7lkRsZ7u1HG0vAKFgpSgPAOaoFI7fO LhM+9024lSbpZpBQWpcDcBvU17XSAicwskQqegeCfDyCsbHnbg== -----END CERTIFICATE-----Generated at Wed Jan 7 11:11:43 2026 by rpki-client