This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer File: 4auG-AxLsqxW5B7HokauKWnY01g.cer (raw, json) Hash identifier: TTdKzTT/VGWg79x14RyYP/sOuvZTWQ1C1aZ+Fqn5Fzk= Subject key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EC4F06823B1CE8A7540DAC117CB2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44028 IP: 185.251.64.0/23 IP: 2a0c:1640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c4:f0:68:23:b1:ce:8a:75:40:da:c1:17:cb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:35:3d:ce:42:d7:66:2b:d4:b7:54:b2:62:08: 24:23:1f:e2:7a:a8:7e:0a:a9:d8:41:11:45:5b:9d: dc:75:1d:7b:94:81:92:6c:42:02:fb:59:37:55:fc: 19:3d:30:53:a4:e0:5b:71:b3:fd:21:f2:2b:15:d8: 50:35:51:74:c9:f8:dd:7a:a6:0a:4f:c9:30:36:3a: d4:47:4b:d7:1b:d2:c7:b5:3c:c1:47:f2:e9:24:17: ce:c8:9e:47:2d:74:6b:e3:34:be:b3:2d:f0:8f:05: ee:2a:c9:f3:45:eb:46:db:e5:4b:d4:54:67:4d:16: 0c:0e:95:3d:96:28:0f:3d:42:1f:f6:58:df:6c:de: 18:1a:fe:ba:77:e3:2e:54:0c:6c:2c:df:53:88:d0: f2:06:e6:78:6d:37:66:34:37:6a:4d:10:8c:21:d3: 98:5a:2c:b7:38:55:e8:8f:b1:f8:21:64:c8:9a:c0: 68:94:19:e8:c5:25:ab:c7:9e:ce:54:41:2f:da:34: 27:86:c3:c2:f6:ea:fb:0d:e6:97:93:51:c5:9e:b7: 00:f6:b9:e9:c9:1b:08:dc:53:c1:be:3d:e2:57:69: 2f:8f:b7:1d:54:ec:05:16:de:80:7a:2d:89:d6:e1: c9:6e:dc:22:f7:43:d4:9a:e1:78:6d:93:59:af:e7: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.64.0/23 IPv6: 2a0c:1640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44028 Signature Algorithm: sha256WithRSAEncryption 52:27:d8:af:97:9a:53:58:c2:8f:12:de:c5:80:2d:4f:ea:56: 3e:4c:89:3a:49:3f:96:d7:57:35:ce:bf:89:b5:4d:87:fa:03: f4:ec:b3:17:62:6e:85:12:f5:7a:f7:34:4d:79:f7:5c:92:dc: e3:40:78:51:f7:32:56:2d:c8:ad:8c:a2:f8:ff:4f:48:1a:f5: 05:d3:08:3a:b3:c8:d2:b5:71:80:13:ae:14:9d:76:f6:88:49: 6e:56:43:a4:19:44:2a:85:de:50:c6:31:b8:d8:6d:22:c9:99: 0d:42:89:06:29:06:62:30:4e:6c:a7:ea:da:d4:ed:7d:1f:b6: 40:b7:60:41:fc:4b:c6:69:7e:4d:2d:6f:28:e2:a3:da:48:1a: f5:ea:62:60:ab:58:0e:0b:fb:83:e6:60:05:69:44:ab:2e:61: dd:3f:cf:e0:12:d4:69:ec:cb:e2:a4:43:28:bb:4d:79:5d:0d: ae:c2:92:1b:03:9d:d4:be:7d:09:fb:df:fd:ab:52:f1:27:37: b7:3c:50:da:8c:9a:94:58:dd:0a:07:78:d7:a5:36:47:b1:d0: 7a:cc:8b:f3:d7:38:7b:37:46:b6:0e:2b:65:be:9b:db:b2:b7: 6b:87:e6:6b:f2:88:9c:01:09:5a:c8:8f:14:d5:4a:06:bd:bf: 1d:59:c7:25 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fsTwaCOxzop1QNrBF8svMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWFiODZmODBjNGJiMmFjNTZlNDFlYzdhMjQ2YWUyOTY5ZDhkMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DU9zkLXZivUt1SyYggkIx/ieqh+ CqnYQRFFW53cdR17lIGSbEIC+1k3VfwZPTBTpOBbcbP9IfIrFdhQNVF0yfjdeqYK T8kwNjrUR0vXG9LHtTzBR/LpJBfOyJ5HLXRr4zS+sy3wjwXuKsnzRetG2+VL1FRn TRYMDpU9ligPPUIf9ljfbN4YGv66d+MuVAxsLN9TiNDyBuZ4bTdmNDdqTRCMIdOY Wiy3OFXoj7H4IWTImsBolBnoxSWrx57OVEEv2jQnhsPC9ur7DeaXk1HFnrcA9rnp yRsI3FPBvj3iV2kvj7cdVOwFFt6Aei2J1uHJbtwi90PUmuF4bZNZr+eKPQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOGrhvgMS7KsVuQex6JGrilp2NNYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzEyNDBl Yi1iYWI0LTQ1YWQtOTM4Ny01MTZmMTFhY2IzYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvMTI0MGVi LWJhYjQtNDVhZC05Mzg3LTUxNmYxMWFjYjNhZS8xLzRhdUctQXhMc3F4VzVCN0hv a2F1S1duWTAxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuftAMA0EAgACMAcDBQMqDBZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCr/DANBgkqhkiG9w0BAQsFAAOCAQEAUifYr5eaU1jC jxLexYAtT+pWPkyJOkk/ltdXNc6/ibVNh/oD9OyzF2JuhRL1evc0TXn3XJLc40B4 UfcyVi3IrYyi+P9PSBr1BdMIOrPI0rVxgBOuFJ129ohJblZDpBlEKoXeUMYxuNht IsmZDUKJBikGYjBObKfq2tTtfR+2QLdgQfxLxml+TS1vKOKj2kga9epiYKtYDgv7 g+ZgBWlEqy5h3T/P4BLUaezL4qRDKLtNeV0NrsKSGwOd1L59Cfvf/atS8Sc3tzxQ 2oyalFjdCgd416U2R7HQesyL89c4ezdGtg4rZb6b27K3a4fma/KInAEJWsiPFNVK Br2/HVnHJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:49 2026 by rpki-client