This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.cer (raw, json) Hash identifier: DP2PxfjH6MgI3MMsr82YgnAPjqwTywQLMPPgXLyRdbk= Subject key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD90B1540851047FB1448545335D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.40.100.0/23 IP: 2a01:4f20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d9:0b:15:40:85:10:47:fb:14:48:54:53:35:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:ae:6a:ac:e8:28:a3:74:5b:2e:85:30:f2: bb:ef:49:3a:f7:ed:5a:df:9a:47:39:5a:93:c3:5a: 92:19:fa:6a:d3:22:3d:0f:61:a0:35:8c:29:fb:c7: 3b:92:13:bb:63:7f:e1:d1:54:cb:16:38:22:d5:1d: 5a:0a:39:d9:df:53:c2:85:92:ef:1b:7a:f0:22:73: 9c:00:77:81:23:c7:46:3d:e5:9e:20:cc:dc:ce:ae: 01:b1:9c:28:a7:f5:d6:db:36:f1:79:5b:6f:df:7c: 2a:a3:cc:58:5c:26:3d:5d:55:fa:41:80:e2:39:ae: 35:c4:7d:da:1e:38:cd:6e:21:c0:d1:31:67:14:33: 7e:4b:d7:c7:dd:23:88:0c:ea:bc:32:1a:17:d3:1e: 63:74:24:de:7c:cd:99:7d:c1:fe:b2:d8:b5:77:f8: 76:21:fe:9a:25:fb:07:08:69:a1:e8:5b:38:33:f1: a7:69:a5:46:5e:c3:11:8f:00:b0:82:14:f8:fd:63: b7:85:2c:0b:ad:20:0d:95:45:7e:b1:22:1e:10:ff: b2:55:b3:97:cc:d8:fa:f1:4d:63:ed:04:36:6e:f8: 16:4d:1d:42:59:6c:6a:05:0a:8a:d3:3d:b2:f8:a3: 23:0d:9d:cb:6a:7e:73:58:1f:1c:f1:35:56:62:8e: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.100.0/23 IPv6: 2a01:4f20::/32 Signature Algorithm: sha256WithRSAEncryption a5:7d:da:18:fd:f8:4b:2c:3e:cb:57:f5:5b:ed:41:7f:1b:0a: 8c:ea:b3:8b:89:c8:b4:fa:07:58:bf:af:c3:f9:7d:d4:b6:3c: e1:dc:d8:5a:73:97:31:30:a6:00:57:ee:f4:a1:8c:9b:79:ce: db:db:d5:61:5d:d7:44:66:a5:de:c4:93:ef:c0:ef:24:68:bc: db:84:6b:86:f2:5b:7c:43:03:73:2b:76:12:74:30:76:79:48: 44:9a:d5:e2:5e:1b:8e:37:9b:92:64:e6:94:84:12:9b:8f:42: aa:78:af:91:89:98:dc:6b:9d:2a:45:58:e4:2c:68:1d:77:90: 4c:c9:9a:a8:69:f8:ff:43:0c:c4:b0:a6:fc:5d:58:bc:bf:d9: b0:a7:06:80:4c:1c:5b:38:b5:99:fc:a5:2f:61:92:8b:ce:93: e6:9c:a1:51:a3:f3:ff:7d:49:49:39:cb:04:96:d7:85:47:3f: 27:1c:ce:97:35:92:1f:0b:78:aa:cd:46:66:80:d5:62:ed:2d: 82:9c:6a:30:7c:4a:a3:5a:fd:25:bc:de:4f:76:3a:b8:55:0c: 70:41:26:0a:8b:62:77:9c:0b:68:3c:78:ed:62:db:66:32:3f: 48:ff:ad:a6:4f:46:0c:ec:92:83:23:f7:af:60:ff:59:33:6a: 8d:ae:16:6a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fdkLFUCFEEf7FEhUUzXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Y5MzA2YmM2MTVjMzIwYWU0MWE0ZTcyNjYzZWJiYTk4ZWYzNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuiuaqzoKKN0Wy6FMPK770k69+1a 35pHOVqTw1qSGfpq0yI9D2GgNYwp+8c7khO7Y3/h0VTLFjgi1R1aCjnZ31PChZLv G3rwInOcAHeBI8dGPeWeIMzczq4BsZwop/XW2zbxeVtv33wqo8xYXCY9XVX6QYDi Oa41xH3aHjjNbiHA0TFnFDN+S9fH3SOIDOq8MhoX0x5jdCTefM2ZfcH+sti1d/h2 If6aJfsHCGmh6Fs4M/GnaaVGXsMRjwCwghT4/WO3hSwLrSANlUV+sSIeEP+yVbOX zNj68U1j7QQ2bvgWTR1CWWxqBQqK0z2y+KMjDZ3Lan5zWB8c8TVWYo6KuwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOP5MGvGFcMgrkGk5yZj67qY7zV8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzZjNDhm MS0yMDM3LTQwYTAtYjJlMS0zY2QzM2ZmMzI3NDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNmM0OGYx LTIwMzctNDBhMC1iMmUxLTNjZDMzZmYzMjc0My8xLzRfa3dhOFlWd3lDdVFhVG5K bVBydXBqdk5Ydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuShkMA0EAgACMAcDBQAqAU8gMA0GCSqGSIb3 DQEBCwUAA4IBAQClfdoY/fhLLD7LV/Vb7UF/GwqM6rOLici0+gdYv6/D+X3Utjzh 3Nhac5cxMKYAV+70oYybec7b29VhXddEZqXexJPvwO8kaLzbhGuG8lt8QwNzK3YS dDB2eUhEmtXiXhuON5uSZOaUhBKbj0KqeK+RiZjca50qRVjkLGgdd5BMyZqoafj/ QwzEsKb8XVi8v9mwpwaATBxbOLWZ/KUvYZKLzpPmnKFRo/P/fUlJOcsElteFRz8n HM6XNZIfC3iqzUZmgNVi7S2CnGowfEqjWv0lvN5Pdjq4VQxwQSYKi2J3nAtoPHjt YttmMj9I/62mT0YM7JKDI/evYP9ZM2qNrhZq -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:35 2026 by rpki-client