This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer File: 4YVsMIKrL8jdGzWaezmRNoU4tNA.cer (raw, json) Hash identifier: FY3YrTezj5jVfp0+We8xfQzQWGTLlOEnnlMnK70F4TQ= Subject key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783437CFF27333A67DBE46E46DD9B5F5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47691 IP: 37.44.215.0/24 IP: 46.229.250.0/24 IP: 176.116.18.0/24 IP: 185.237.94.0/24 IP: 2a13:2a40::/29 IP: 2a13:3d40::/29 IP: 2a13:3dc0::/29 IP: 2a14:5900::/29 IP: 2a14:5b00::/29 IP: 2a14:5d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:37:cf:f2:73:33:a6:7d:be:46:e4:6d:d9:b5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:e7:e3:08:28:ca:49:69:ce:19:45:23:06: 7a:51:e0:ae:96:6c:0d:8b:70:b1:93:20:e1:70:ba: 1c:82:d1:87:21:d1:e6:c6:a5:24:b5:0a:fd:0d:a0: 7b:5b:b3:c7:3e:17:3f:43:d1:54:de:27:f2:87:f9: 5e:57:f3:50:c5:d4:6e:17:7d:94:52:cb:f2:49:f8: 2d:6d:56:b1:c5:70:28:51:3f:c4:8b:de:e3:d0:4b: a6:0e:b0:21:64:a4:39:95:5f:e7:a9:7c:49:58:15: 61:cc:49:33:7a:4e:14:1f:95:1f:b5:50:d5:29:e9: 82:6f:6e:32:85:88:7f:de:78:96:35:84:84:62:98: a2:61:2e:59:79:c3:02:7a:1e:f9:07:68:3b:93:e8: fc:10:17:c9:c8:00:69:c3:5a:e4:62:96:2f:1b:ae: 0e:bd:90:b6:35:82:7c:21:12:f6:11:f9:ae:3a:f7: b9:12:46:38:af:ad:dc:1e:79:e9:11:b8:6b:01:b1: 1c:0a:fc:93:39:78:3b:3c:09:bc:8c:f6:d6:2b:ab: 27:d8:b3:35:a7:8d:34:15:23:13:8e:65:f5:f9:a5: ce:fe:0b:cb:35:82:a0:0b:dd:3d:77:e4:48:e6:71: 38:fe:40:57:98:d2:00:0e:d4:d2:d3:52:4d:a2:09: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.215.0/24 46.229.250.0/24 176.116.18.0/24 185.237.94.0/24 IPv6: 2a13:2a40::/29 2a13:3d40::/29 2a13:3dc0::/29 2a14:5900::/29 2a14:5b00::/29 2a14:5d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47691 Signature Algorithm: sha256WithRSAEncryption 3a:35:33:f4:db:e4:f1:7e:a3:91:57:55:9b:4d:fa:a2:68:22: 67:b0:3b:08:8a:d6:3e:3e:f6:e1:3d:51:76:23:48:39:90:df: 9c:e3:d6:1a:c4:83:df:d0:d2:c7:94:9b:26:d6:a1:6a:f2:bc: 69:a9:df:d4:d4:38:63:98:a7:74:f7:cb:4a:e3:cd:37:6b:7b: 37:1a:3b:ce:51:77:85:fd:90:ee:61:19:91:97:ad:a7:34:9a: 8c:f0:0b:fa:84:82:20:ed:08:e3:04:ae:53:d6:2d:9d:2f:03: 7f:89:23:18:3b:ba:51:26:9d:1e:55:0d:65:55:22:fc:12:ba: 3e:c7:91:6e:69:89:7f:e0:fc:d1:15:d1:81:64:8f:9d:65:ca: 5d:14:18:db:38:52:46:4e:e1:1d:10:1e:19:0e:2e:d0:13:ce: 82:5a:6a:cc:2b:5f:5e:83:fe:76:2d:53:b5:03:35:7c:c9:ff: 8a:07:31:f7:7b:c3:11:cb:b0:f5:83:71:06:11:57:bf:78:73: e6:41:f7:f5:74:b3:02:a0:b1:90:d2:73:b9:5d:d4:ab:2b:93: f1:bc:48:7e:2a:cc:6b:95:fb:14:ac:26:79:d9:1c:f3:7c:17: 97:08:83:1c:64:ba:50:fd:a3:7f:44:55:3f:4f:d5:b0:c5:9a: 27:47:f1:46 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt4NDfP8nMzpn2+RuRt2bX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTg1NmMzMDgyYWIyZmM4ZGQxYjM1OWE3YjM5OTEzNjg1MzhiNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9jn4wgoyklpzhlFIwZ6UeCulmwN i3CxkyDhcLocgtGHIdHmxqUktQr9DaB7W7PHPhc/Q9FU3ifyh/leV/NQxdRuF32U UsvySfgtbVaxxXAoUT/Ei97j0EumDrAhZKQ5lV/nqXxJWBVhzEkzek4UH5UftVDV KemCb24yhYh/3niWNYSEYpiiYS5ZecMCeh75B2g7k+j8EBfJyABpw1rkYpYvG64O vZC2NYJ8IRL2EfmuOve5EkY4r63cHnnpEbhrAbEcCvyTOXg7PAm8jPbWK6sn2LM1 p400FSMTjmX1+aXO/gvLNYKgC909d+RI5nE4/kBXmNIADtTS01JNognCmQIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFOGFbDCCqy/I3Rs1mns5kTaFOLTQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzU2NGJk MC03YjUyLTQ0ZGQtYjU2Yi04ZWFhNmJmNDAzNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNTY0YmQw LTdiNTItNDRkZC1iNTZiLThlYWE2YmY0MDM1Ny8xLzRZVnNNSUtyTDhqZEd6V2Fl em1STm9VNHROQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUF BwEHAQH/BFQwUjAeBAIAATAYAwQAJSzXAwQALuX6AwQAsHQSAwQAue1eMDAEAgAC MCoDBQMqEypAAwUDKhM9QAMFAyoTPcADBQMqFFkAAwUDKhRbAAMFAyoUXQAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDALpLMA0GCSqGSIb3DQEBCwUAA4IBAQA6NTP0 2+TxfqORV1WbTfqiaCJnsDsIitY+PvbhPVF2I0g5kN+c49YaxIPf0NLHlJsm1qFq 8rxpqd/U1DhjmKd098tK4803a3s3GjvOUXeF/ZDuYRmRl62nNJqM8Av6hIIg7Qjj BK5T1i2dLwN/iSMYO7pRJp0eVQ1lVSL8Ero+x5FuaYl/4PzRFdGBZI+dZcpdFBjb OFJGTuEdEB4ZDi7QE86CWmrMK19eg/52LVO1AzV8yf+KBzH3e8MRy7D1g3EGEVe/ eHPmQff1dLMCoLGQ0nO5XdSrK5PxvEh+KsxrlfsUrCZ52RzzfBeXCIMcZLpQ/aN/ RFU/T9WwxZonR/FG -----END CERTIFICATE-----Generated at Sun Jan 18 09:53:32 2026 by rpki-client