This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer File: 4YpwGxuHPrjfflleMt8fBxMJ4vE.cer (raw, json) Hash identifier: BR5D6kdMkhJ9iozgXLkhGaSkk3PfaeSVGnSsQCiFnis= Subject key identifier: E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC7B8580B7056D4AA90896073F15223EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 16 Jan 2026 16:51:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203248 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:b8:58:0b:70:56:d4:aa:90:89:60:73:f1:52:23:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 16 16:51:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e18a701b1b873eb8df7e595e32df1f071309e2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:7d:c1:9b:9a:82:0e:63:a5:60:0c:a5:81: 0c:bb:c9:ae:e7:34:b3:b3:7f:83:fc:c2:26:80:45: 1e:ce:f4:c1:1b:de:ba:e3:6d:fe:02:79:08:9f:76: 86:1c:8c:ae:5e:46:b9:88:3d:9c:2e:dc:11:81:fc: 8f:e4:60:b4:eb:19:8e:fe:b9:8f:72:b5:18:7d:16: 46:8c:2d:fe:a2:55:a4:4b:4d:fe:28:15:54:e3:a1: f6:d4:82:bd:fb:76:23:dd:e3:25:98:f9:5f:64:54: 0b:50:29:9a:75:9b:ca:bb:9c:d6:0d:a3:29:00:48: 94:19:07:d9:05:eb:06:68:ca:20:01:58:c6:3c:aa: b0:fe:be:8e:e7:d0:84:f2:ba:f7:65:58:8a:82:3a: 6c:30:22:0a:4e:eb:7f:34:f9:9f:e5:56:77:ba:60: 13:e3:5d:68:0c:6d:c1:38:7e:68:8b:c5:08:7e:8e: 93:a6:e7:38:89:e7:6c:e4:67:8e:79:c4:15:9a:18: 8b:fe:6d:c0:40:09:b2:4f:4d:1b:a6:f1:86:13:e4: 96:24:71:ba:8c:44:04:21:ef:49:67:f6:3f:e2:74: 74:ef:e4:61:bf:72:b3:ec:05:da:7d:fa:0a:3d:01: 94:42:5d:a3:ec:d6:a9:13:db:e6:19:38:1a:c9:78: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203248 Signature Algorithm: sha256WithRSAEncryption 9b:4e:98:64:f4:75:d1:2b:e4:c1:02:62:18:36:af:15:11:9a: 85:ee:8a:fa:32:78:af:0e:85:90:09:e4:70:4c:94:a7:2d:78: e1:64:0f:81:63:dc:db:87:1e:9a:69:86:ac:11:54:7f:07:dc: ba:fc:50:a7:57:5b:7e:ba:ef:46:e7:cf:82:07:e2:15:bd:f2: da:e4:a0:95:50:38:c6:13:27:7b:e8:f7:9e:fd:b0:67:05:dd: c3:06:ca:42:d1:e1:4f:6b:b5:60:bf:77:0f:40:da:59:2e:42: 28:60:c3:39:95:cc:ca:fd:95:c5:09:bb:cc:9a:fd:80:c2:0a: 3e:18:f7:f9:b3:7d:77:93:9d:f9:a1:c8:c6:80:4e:89:9e:94: 66:63:41:0a:14:31:82:82:ef:79:7e:05:3d:56:d5:d8:73:ba: 3c:93:87:0f:01:90:4d:09:00:57:67:ad:c5:42:70:c8:b6:26: ed:9f:25:c8:58:71:77:bc:c2:62:89:09:36:82:6c:3d:ac:2d: 3e:42:36:27:6c:02:72:f1:09:96:41:2e:3b:5d:fc:8b:31:49: f3:5a:d6:f2:6e:26:7e:b9:2c:1e:ab:09:e9:24:1e:5b:a1:e4: 5a:d2:94:df:b0:d4:93:bf:51:dd:3a:83:7f:f3:6d:48:c1:ac: ea:6f:d8:ae -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvHuFgLcFbUqpCJYHPxUiPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE2MTY1MTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMThhNzAxYjFiODczZWI4ZGY3ZTU5NWUzMmRmMWYwNzEzMDllMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRF9wZuagg5jpWAMpYEMu8mu5zSz s3+D/MImgEUezvTBG966423+AnkIn3aGHIyuXka5iD2cLtwRgfyP5GC06xmO/rmP crUYfRZGjC3+olWkS03+KBVU46H21IK9+3Yj3eMlmPlfZFQLUCmadZvKu5zWDaMp AEiUGQfZBesGaMogAVjGPKqw/r6O59CE8rr3ZViKgjpsMCIKTut/NPmf5VZ3umAT 411oDG3BOH5oi8UIfo6Tpuc4ieds5GeOecQVmhiL/m3AQAmyT00bpvGGE+SWJHG6 jEQEIe9JZ/Y/4nR07+Rhv3Kz7AXaffoKPQGUQl2j7NapE9vmGTgayXjmNQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOGKcBsbhz64335ZXjLfHwcTCeLxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzQyODBh Zi1iMjEyLTQ5NjgtOWY5Mi1iNzk1Y2FjYjNiOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNDI4MGFm LWIyMTItNDk2OC05ZjkyLWI3OTVjYWNiM2I5My8xLzRZcHdHeHVIUHJqZmZsbGVN dDhmQnhNSjR2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZ8DANBgkqhkiG9w0BAQsFAAOCAQEAm06YZPR10Svk wQJiGDavFRGahe6K+jJ4rw6FkAnkcEyUpy144WQPgWPc24cemmmGrBFUfwfcuvxQ p1dbfrrvRufPggfiFb3y2uSglVA4xhMne+j3nv2wZwXdwwbKQtHhT2u1YL93D0Da WS5CKGDDOZXMyv2VxQm7zJr9gMIKPhj3+bN9d5Od+aHIxoBOiZ6UZmNBChQxgoLv eX4FPVbV2HO6PJOHDwGQTQkAV2etxUJwyLYm7Z8lyFhxd7zCYokJNoJsPawtPkI2 J2wCcvEJlkEuO138izFJ81rW8m4mfrksHqsJ6SQeW6HkWtKU37DUk79R3TqDf/Nt SMGs6m/Yrg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:29 2026 by rpki-client