This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.cer (raw, json) Hash identifier: 4XL2N1kvflp1ttVQfjkqAQxS1iKl1vKk3kYcAmG9wSU= Subject key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84F10E18414E13671B665FF482605E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.153.248.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f1:0e:18:41:4e:13:67:1b:66:5f:f4:82:60:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:9f:b6:98:d4:3c:88:ab:22:27:58:22:a8: 19:65:f4:67:11:f1:76:09:74:dd:c4:fa:95:2a:d9: c4:38:f9:ce:c3:26:20:a8:37:07:6e:33:30:c3:97: 07:d0:99:d6:49:8b:1d:2f:89:3c:9b:ce:11:da:98: ec:82:2a:af:aa:01:d5:1f:fa:08:ca:49:66:cb:27: 74:e5:04:b4:c6:78:cb:02:9d:68:bc:31:6f:14:c2: f7:65:eb:d5:3b:42:20:d8:68:13:1e:80:a6:1b:08: c7:bf:69:dc:11:db:bc:1a:17:62:59:46:72:51:44: cc:81:35:1d:14:1c:45:ff:8a:77:42:b4:8f:a1:68: 10:cf:db:ac:30:9e:12:7b:00:13:7f:d7:12:b7:fc: 68:5b:0f:cb:32:a7:1b:e6:c8:13:aa:be:63:f3:f2: 5c:c2:41:9e:7e:70:8d:b2:88:13:f0:0b:7a:6c:fc: ea:84:c0:75:fb:57:cc:db:eb:2e:4c:92:9d:4b:7e: 87:3f:4d:09:a7:aa:bc:ec:89:e6:35:9d:1c:07:fb: 28:39:14:9d:c9:d9:3f:ce:ed:e5:b8:ef:cc:46:6c: 71:99:b4:0f:ff:13:32:2f:40:d8:13:2b:b4:e1:67: fb:db:a6:a7:ee:57:b1:4d:47:20:b4:b9:0d:fe:73: 24:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.248.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:6b:a3:df:b3:7a:32:2c:b4:26:ec:90:48:a6:d4:e3:70:52: 68:62:06:a9:8c:20:6b:bf:d0:dd:58:ed:ec:bf:01:94:20:ed: d9:90:3c:c4:3d:d6:41:1f:81:92:0e:69:f3:69:64:e8:91:68: bf:cc:f4:b4:ca:91:ea:63:60:a8:be:6b:7d:2f:04:9d:ad:ed: d4:e9:30:19:c8:ed:e6:b0:84:a3:e0:ac:56:5c:db:6d:f7:18: dd:d5:5d:22:d6:1c:df:19:49:b4:8d:37:6f:c9:48:c1:7c:a8: 77:fc:fa:c3:cf:b8:e6:f2:dc:d1:67:01:37:42:24:b9:47:98: 2f:48:6e:5b:52:98:81:88:32:2b:2a:4b:24:2a:70:a0:8f:1b: 95:9b:c6:98:b1:68:dd:d0:0a:b3:c0:ab:78:15:52:ac:31:9e: 11:66:46:f3:f3:62:28:38:27:d4:73:44:dd:5b:92:61:e7:a7: 33:ba:41:fc:05:cf:31:f2:65:16:53:3f:a7:90:35:8f:af:9f: a7:5d:d8:c2:b4:9a:a5:58:75:95:d4:fe:9d:e7:d0:64:bf:87: 7c:08:f3:66:be:6a:37:74:15:77:2c:8e:c8:54:5c:5c:ac:ee: 49:12:2f:83:62:e6:a9:f7:98:ab:03:f7:28:12:f1:16:ba:c6: cb:fe:a9:1f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/hPEOGEFOE2cbZl/0gmBeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWFlZDE0ODRlOTZlNGJmNzk5M2U5Yjg2N2IzNGMzNGQ2YThhZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjeftpjUPIirIidYIqgZZfRnEfF2 CXTdxPqVKtnEOPnOwyYgqDcHbjMww5cH0JnWSYsdL4k8m84R2pjsgiqvqgHVH/oI yklmyyd05QS0xnjLAp1ovDFvFML3ZevVO0Ig2GgTHoCmGwjHv2ncEdu8GhdiWUZy UUTMgTUdFBxF/4p3QrSPoWgQz9usMJ4SewATf9cSt/xoWw/LMqcb5sgTqr5j8/Jc wkGefnCNsogT8At6bPzqhMB1+1fM2+suTJKdS36HP00Jp6q87InmNZ0cB/soORSd ydk/zu3luO/MRmxxmbQP/xMyL0DYEyu04Wf726an7lexTUcgtLkN/nMkMwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOGu0UhOluS/eZPpuGezTDTWqK42MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzUyM2E5 My04YmJkLTQ0YWMtODhiZC00ZTdiY2E1NWY4MjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvNTIzYTkz LThiYmQtNDRhYy04OGJkLTRlN2JjYTU1ZjgyMS8xLzRhN1JTRTZXNUw5NWstbTRa N05NTk5hb3JqWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwpn4MA0GCSqGSIb3DQEBCwUAA4IBAQB6a6Pf s3oyLLQm7JBIptTjcFJoYgapjCBrv9DdWO3svwGUIO3ZkDzEPdZBH4GSDmnzaWTo kWi/zPS0ypHqY2Covmt9LwSdre3U6TAZyO3msISj4KxWXNtt9xjd1V0i1hzfGUm0 jTdvyUjBfKh3/PrDz7jm8tzRZwE3QiS5R5gvSG5bUpiBiDIrKkskKnCgjxuVm8aY sWjd0AqzwKt4FVKsMZ4RZkbz82IoOCfUc0TdW5Jh56czukH8Bc8x8mUWUz+nkDWP r5+nXdjCtJqlWHWV1P6d59Bkv4d8CPNmvmo3dBV3LI7IVFxcrO5JEi+DYuap95ir A/coEvEWusbL/qkf -----END CERTIFICATE-----Generated at Mon Jan 26 15:20:02 2026 by rpki-client