This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer (raw, json) Hash identifier: 9YptD53VkFf4ySfmjnKVPp7Sx1izwbc0MExxfkrfxY8= Subject key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79102AAE5205B15DE7419AABAC36DBA4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200345 IP: 194.147.24.0/22 IP: 2a0d:840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2a:ae:52:05:b1:5d:e7:41:9a:ab:ac:36:db:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:15:f6:9e:2c:f2:49:10:15:6b:9c:ed:42: 9e:56:2e:68:0c:00:2e:32:f4:81:82:09:06:5a:a3: a6:84:46:83:6e:e1:53:f4:d3:b7:85:e4:bf:9d:01: bf:2f:29:81:da:ba:1e:de:b0:1f:d2:52:38:53:c3: 41:cd:94:69:00:d0:cf:b4:51:d5:56:b8:31:62:5e: c3:13:bb:ce:03:8c:ea:89:23:46:d8:3e:13:04:4f: 49:ca:33:9c:17:36:ae:dc:8e:2d:0f:79:31:84:bf: 6c:60:c3:cc:cb:51:b4:b2:d7:bf:0e:2b:68:d8:ca: 4d:1c:4c:ab:f1:c5:69:82:8e:f4:f1:4b:d6:f3:55: e6:2b:b1:39:22:f9:e0:08:c4:f7:0d:f3:e6:a9:b6: 87:ab:3a:52:ce:18:81:19:1e:14:2d:6f:64:ba:ec: 06:10:e2:3c:5b:51:4b:b7:98:a9:28:58:b1:dd:db: 36:e1:56:2a:ea:14:99:e4:34:56:cd:bc:17:a6:5a: 4c:0b:4d:94:fb:7e:d9:73:19:b2:05:21:c6:7e:be: 59:19:b2:72:0d:db:b6:a7:d4:19:9e:c3:66:0e:11: 46:22:1c:fe:a4:25:d9:3d:07:ec:a4:77:c4:31:38: 52:b2:5b:25:0d:d0:3e:47:3d:87:5e:0c:74:c0:0a: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.24.0/22 IPv6: 2a0d:840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200345 Signature Algorithm: sha256WithRSAEncryption 96:18:86:b3:36:cd:76:c1:63:cb:a0:e9:50:e1:a9:ae:a3:d1: 50:a0:e8:02:20:ff:3a:37:3e:67:2d:30:34:ad:f1:70:6b:f4: 58:8b:8d:4b:0d:b9:e1:03:03:e4:11:d0:c2:19:0c:59:81:fb: 21:9c:bd:91:98:e7:dc:60:a8:25:db:f8:34:fe:9a:f8:13:6f: 8e:a2:e1:9a:cd:d7:b6:7e:18:3a:16:8b:5e:df:35:39:ba:3e: ef:d6:e4:0a:ef:1b:ad:c9:ba:b9:7e:cc:1f:ab:83:4b:3d:00: 8a:49:5a:a6:8c:e7:3a:43:cf:73:9b:0b:d0:8d:d8:64:05:ba: 54:82:7d:fd:f5:be:12:2e:79:a5:9b:e7:d0:57:9a:bc:0e:58: 65:20:69:fb:1d:9e:b5:60:aa:5a:b2:f1:8d:07:19:0a:4f:1a: bb:7c:da:b3:b1:5a:0a:f1:29:d7:18:7e:e5:1c:96:b9:2b:85: 8b:0a:cd:7c:32:99:11:3b:9e:65:69:60:b2:30:bd:df:47:ce: df:d2:14:86:fb:06:d5:55:be:98:93:3b:b3:4f:95:00:af:12: ba:83:fa:fd:02:03:d4:0d:b3:9b:65:62:b0:94:31:31:78:38: 83:32:ff:0e:b1:fa:5a:09:fd:db:05:79:c5:32:79:86:01:dd: 63:60:03:bd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ECquUgWxXedBmqusNtukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWE5ZmUzYzhhNjlkNTA5MzVhMWY3NDk2NjZlMDhkYzc1NDU5NGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bwV9p4s8kkQFWuc7UKeVi5oDAAu MvSBggkGWqOmhEaDbuFT9NO3heS/nQG/LymB2roe3rAf0lI4U8NBzZRpANDPtFHV VrgxYl7DE7vOA4zqiSNG2D4TBE9JyjOcFzau3I4tD3kxhL9sYMPMy1G0ste/Dito 2MpNHEyr8cVpgo708UvW81XmK7E5IvngCMT3DfPmqbaHqzpSzhiBGR4ULW9kuuwG EOI8W1FLt5ipKFix3ds24VYq6hSZ5DRWzbwXplpMC02U+37ZcxmyBSHGfr5ZGbJy Ddu2p9QZnsNmDhFGIhz+pCXZPQfspHfEMThSslslDdA+Rz2HXgx0wAqCxQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOGp/jyKadUJNaH3SWZuCNx1RZTdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzBlNmY0 YS1mZDU3LTQxMWItYTk0Yi02YjZmZGI1NGJhMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMGU2ZjRh LWZkNTctNDExYi1hOTRiLTZiNmZkYjU0YmEzMS8xLzRhbi1QSXBwMVFrMW9mZEpa bTRJM0hWRmxOMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwpMYMA0EAgACMAcDBQMqDQhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMOmTANBgkqhkiG9w0BAQsFAAOCAQEAlhiGszbNdsFj y6DpUOGprqPRUKDoAiD/Ojc+Zy0wNK3xcGv0WIuNSw254QMD5BHQwhkMWYH7IZy9 kZjn3GCoJdv4NP6a+BNvjqLhms3Xtn4YOhaLXt81Obo+79bkCu8brcm6uX7MH6uD Sz0AiklapoznOkPPc5sL0I3YZAW6VIJ9/fW+Ei55pZvn0FeavA5YZSBp+x2etWCq WrLxjQcZCk8au3zas7FaCvEp1xh+5RyWuSuFiwrNfDKZETueZWlgsjC930fO39IU hvsG1VW+mJM7s0+VAK8SuoP6/QID1A2zm2VisJQxMXg4gzL/DrH6Wgn92wV5xTJ5 hgHdY2ADvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:50 2026 by rpki-client