This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer (raw, json) Hash identifier: /EteaGr9IpSGwIYsqMP8Ke6OOI+8u5ycjrsFDdNE3Qg= Subject key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59CD5154967B6046AF9128F38048A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a04:be40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:cd:51:54:96:7b:60:46:af:91:28:f3:80:48:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e19f6151a347c7922ac7cf469925344330d724f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:98:0f:8f:33:89:45:7e:69:7a:7d:ea:fb:53: 7e:06:3b:81:66:4d:57:9a:da:dc:9d:11:42:4d:43: 0a:0d:3e:d6:dd:fb:fe:04:3b:13:c2:11:6e:3a:8a: 7d:50:1f:8e:a4:fd:d5:e6:b2:c8:b9:07:0b:45:e1: d6:ed:11:ff:46:eb:ca:99:4c:24:fa:f5:33:af:b4: ad:2e:6e:0b:df:d8:c1:53:92:83:1a:78:e0:ad:92: 7a:8b:1d:17:b8:fa:bc:5f:4c:14:3f:65:42:a0:7c: 35:c5:d4:2c:b8:d2:12:b0:73:f7:47:ed:83:6a:b5: 3f:34:2a:b9:a2:69:0c:45:f8:f9:19:f8:dc:26:c3: 02:e1:77:dd:51:01:09:df:54:0f:63:79:6c:0a:c6: de:30:70:16:dc:0c:58:76:c6:37:3f:97:d2:60:ae: b0:01:4f:8f:36:7d:af:80:8e:bd:af:9d:fd:ad:5a: ff:13:2d:14:7b:6f:98:44:7e:d6:1a:5d:04:04:7f: eb:c1:fa:20:e9:a3:ed:d4:2f:c4:a0:30:60:73:36: 00:a9:9e:70:0c:6f:34:3b:2f:43:0d:a8:81:f2:14: f1:e7:87:70:e6:f8:6d:21:c5:59:fb:d0:1a:28:fa: b6:ee:02:57:26:1b:1d:cc:b0:bd:c5:00:36:2e:e5: 33:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:be40::/29 Signature Algorithm: sha256WithRSAEncryption 2b:eb:62:88:5c:93:3b:b8:5b:3b:47:cb:6e:10:4b:c8:a5:3d: cc:07:4d:b8:3f:34:f3:ef:75:82:e9:7c:d1:8a:81:e5:54:78: d1:04:d7:0e:6b:5e:2b:b4:f8:ea:98:03:d1:5b:9b:bd:ff:a4: a9:ee:7d:dd:24:7d:d7:53:dc:62:3d:bd:20:90:c9:21:c8:75: 9a:88:88:52:7b:91:e0:46:9a:35:5d:f1:90:04:ab:31:48:3a: 82:4a:58:8f:cb:ac:77:a5:ef:e9:7d:ea:a7:fc:a4:17:41:86: 55:b1:cd:cc:ae:6c:e5:98:db:ab:76:8b:17:21:07:a1:6a:e8: 09:69:d3:a4:8a:ad:1f:b7:fb:2b:b8:ff:36:09:96:5b:68:f4: 4c:93:14:cb:17:e9:a0:73:5f:e4:66:53:4a:fd:9a:b8:a5:36: 14:4e:ff:0f:df:22:cd:37:eb:b5:4e:11:fb:4b:e7:00:db:57: fb:f2:62:67:a1:70:44:4b:1e:e5:69:cf:ce:05:a8:b7:7b:74: 5e:a4:05:f7:20:c0:76:ee:28:83:b0:e4:8d:ff:25:5b:a1:43: 39:f8:7d:e9:6e:93:46:14:91:db:e7:37:81:60:c0:1d:80:af: 73:d7:e1:0a:e1:bd:65:03:45:1b:3e:be:1b:23:af:dc:09:e6: 60:e4:05:b5 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt6Wc1RVJZ7YEavkSjzgEioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTlmNjE1MWEzNDdjNzkyMmFjN2NmNDY5OTI1MzQ0MzMwZDcyNGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pgPjzOJRX5pen3q+1N+BjuBZk1X mtrcnRFCTUMKDT7W3fv+BDsTwhFuOop9UB+OpP3V5rLIuQcLReHW7RH/RuvKmUwk +vUzr7StLm4L39jBU5KDGnjgrZJ6ix0XuPq8X0wUP2VCoHw1xdQsuNISsHP3R+2D arU/NCq5omkMRfj5GfjcJsMC4XfdUQEJ31QPY3lsCsbeMHAW3AxYdsY3P5fSYK6w AU+PNn2vgI69r539rVr/Ey0Ue2+YRH7WGl0EBH/rwfog6aPt1C/EoDBgczYAqZ5w DG80Oy9DDaiB8hTx54dw5vhtIcVZ+9AaKPq27gJXJhsdzLC9xQA2LuUzSwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFOGfYVGjR8eSKsfPRpklNEMw1yT3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzExNzlj ZS0yNWQ5LTRmOTYtYjEwZi00MmQ0OTM5YTA1MTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMTE3OWNl LTI1ZDktNGY5Ni1iMTBmLTQyZDQ5MzlhMDUxOS8xLzRaOWhVYU5IeDVJcXg4OUdt U1UwUXpEWEpQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgS+QDANBgkqhkiG9w0BAQsFAAOCAQEAK+ti iFyTO7hbO0fLbhBLyKU9zAdNuD808+91gul80YqB5VR40QTXDmteK7T46pgD0Vub vf+kqe593SR911PcYj29IJDJIch1moiIUnuR4EaaNV3xkASrMUg6gkpYj8usd6Xv 6X3qp/ykF0GGVbHNzK5s5Zjbq3aLFyEHoWroCWnTpIqtH7f7K7j/NgmWW2j0TJMU yxfpoHNf5GZTSv2auKU2FE7/D98izTfrtU4R+0vnANtX+/JiZ6FwREse5WnPzgWo t3t0XqQF9yDAdu4og7Dkjf8lW6FDOfh96W6TRhSR2+c3gWDAHYCvc9fhCuG9ZQNF Gz6+GyOv3AnmYOQFtQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:15 2026 by rpki-client