This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.cer (raw, json) Hash identifier: Vj57wdgUiCCs7ScXqdDWKRm2j38QpgkrZHMWx6hvCmw= Subject key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CBF116773FC81E2378DF7DF86764A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15594 IP: 82.116.96.0/19 IP: 95.174.128.0/19 IP: 212.9.32.0/19 IP: 217.10.64.0/20 IP: 217.116.112.0/20 IP: 2001:ab0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bf:11:67:73:fc:81:e2:37:8d:f7:df:86:76:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4d:f3:08:1d:6e:00:3f:c9:c4:5d:7a:af:04: bd:6f:5b:47:f0:14:a7:b6:f4:c5:da:e5:77:83:ea: 6c:f5:89:9d:4d:80:81:22:c8:66:d7:e1:7e:83:51: 53:57:18:ef:6a:28:ed:90:3a:66:36:a6:34:be:f6: d8:2e:09:30:43:b0:aa:17:36:5f:aa:77:8c:42:a0: 0e:2e:ba:b8:06:3a:db:36:97:78:05:8a:4f:0d:29: b5:40:bb:a1:93:da:10:c4:78:3a:0a:d5:09:20:83: e9:45:55:99:9a:b6:b8:b7:1f:c6:b3:f5:2b:69:7f: 90:c3:39:ad:a0:c8:6d:a5:df:3c:31:1e:3d:27:ef: 54:14:ad:76:cf:4c:b0:81:cb:d8:fb:70:07:c7:20: 68:05:a4:c3:12:26:62:dd:fa:79:94:d6:5d:42:f6: 11:20:f9:78:4e:b7:07:e3:9b:0a:a8:89:1d:93:62: bc:ac:44:2a:e0:9b:ff:0a:da:6d:16:aa:91:de:e2: ae:2b:4f:1e:45:c9:90:95:40:6b:cb:41:b8:34:0e: f9:88:5f:e6:db:95:5d:71:95:79:3e:1f:53:20:29: 73:18:f3:8e:5e:2f:a6:c8:91:95:72:22:3c:e4:46: a2:d4:6e:f5:7f:b7:0c:ba:60:84:11:cc:a7:b3:79: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.116.96.0/19 95.174.128.0/19 212.9.32.0/19 217.10.64.0/20 217.116.112.0/20 IPv6: 2001:ab0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15594 Signature Algorithm: sha256WithRSAEncryption 55:b1:d0:91:ff:1b:40:b8:ae:89:62:e8:46:6e:bf:26:f0:de: 00:06:23:f5:6d:ed:19:73:25:b6:4d:59:eb:24:34:99:c0:4d: 3e:37:29:09:63:6a:25:b0:a6:00:08:47:86:ce:36:cb:2e:b2: c1:4c:36:05:02:fd:39:ac:8b:e4:89:5c:50:3c:d6:14:80:ba: 89:21:bd:0d:5e:1d:fa:c8:b5:74:30:b1:c0:00:76:c0:03:cd: 28:2c:87:f5:5d:00:b3:68:d8:23:36:90:c7:95:3c:26:97:75: f7:62:90:9f:cc:c1:c1:3b:52:b0:d7:72:a7:63:6d:a2:03:ea: 98:d4:9d:63:c8:a9:b1:e6:de:cb:1e:90:f4:84:74:82:01:cf: bd:65:2d:88:69:70:0d:70:80:1a:53:8e:a0:b8:1c:39:d7:74: 2f:a1:c2:70:ef:29:6a:fa:f1:44:3e:88:98:59:48:79:ad:e9: 3c:3a:e0:4b:57:16:2f:dd:3e:ec:9e:c3:93:35:60:70:98:cb: 72:f0:80:81:99:a0:95:f6:2e:02:8f:ea:78:3d:6d:f2:47:ea: b7:0a:60:7d:f9:5f:22:6c:ee:9c:cd:da:c5:e8:87:07:55:9b: f9:8d:04:f8:ae:b8:e8:60:6e:35:97:50:42:a5:71:1b:09:86: 47:5f:20:e6 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt9XL8RZ3P8geI3jfffhnZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Y3MDcwNmY2YzBjZmJkOWM3M2E3ZjNkODMwMjMyNDBhNDJmNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE3zCB1uAD/JxF16rwS9b1tH8BSn tvTF2uV3g+ps9YmdTYCBIshm1+F+g1FTVxjvaijtkDpmNqY0vvbYLgkwQ7CqFzZf qneMQqAOLrq4BjrbNpd4BYpPDSm1QLuhk9oQxHg6CtUJIIPpRVWZmra4tx/Gs/Ur aX+QwzmtoMhtpd88MR49J+9UFK12z0ywgcvY+3AHxyBoBaTDEiZi3fp5lNZdQvYR IPl4TrcH45sKqIkdk2K8rEQq4Jv/CtptFqqR3uKuK08eRcmQlUBry0G4NA75iF/m 25VdcZV5Ph9TIClzGPOOXi+myJGVciI85Eai1G71f7cMumCEEcyns3k6PQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFOP3Bwb2wM+9nHOn89gwIyQKQvUNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzI4NmQ0 Ny02NDM0LTQxYmQtOWFhMi0wOWZmNzkzMDhiYmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvMjg2ZDQ3 LTY0MzQtNDFiZC05YWEyLTA5ZmY3OTMwOGJiZS8xLzRfY0hCdmJBejcyY2M2Znoy REFqSkFwQzlRMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQFUnRgAwQFX66AAwQF1AkgAwQE2QpAAwQE2XRw MA0EAgACMAcDBQMgAQqwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjzqMA0GCSqG SIb3DQEBCwUAA4IBAQBVsdCR/xtAuK6JYuhGbr8m8N4ABiP1be0ZcyW2TVnrJDSZ wE0+NykJY2olsKYACEeGzjbLLrLBTDYFAv05rIvkiVxQPNYUgLqJIb0NXh36yLV0 MLHAAHbAA80oLIf1XQCzaNgjNpDHlTwml3X3YpCfzMHBO1Kw13KnY22iA+qY1J1j yKmx5t7LHpD0hHSCAc+9ZS2IaXANcIAaU46guBw513QvocJw7ylq+vFEPoiYWUh5 rek8OuBLVxYv3T7snsOTNWBwmMty8ICBmaCV9i4Cj+p4PW3yR+q3CmB9+V8ibO6c zdrF6IcHVZv5jQT4rrjoYG41l1BCpXEbCYZHXyDm -----END CERTIFICATE-----Generated at Tue Jan 27 07:45:59 2026 by rpki-client