This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer (raw, json) Hash identifier: +/6l5wVSs44dQs21ZyUbTNMn648oZPkNNZPm0IutTlM= Subject key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A077717B534566C15CD33159B209 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39806 IP: 178.21.72.0/21 IP: 185.88.136.0/22 IP: 194.32.151.0/24 IP: 2a04:780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a0:77:71:7b:53:45:66:c1:5c:d3:31:59:b2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:1e:99:8d:ab:3e:cb:e3:b0:1d:eb:83:60: da:72:bc:be:5c:2b:82:8d:53:77:92:d3:b2:33:02: fe:96:e2:a4:f5:1b:31:6a:15:76:49:a9:fe:69:5f: 09:9e:fc:a3:9a:4b:4d:fd:99:3f:ae:cc:d8:6e:47: 77:ba:e1:d8:cf:58:b0:33:99:1a:2d:e8:14:6b:ab: fc:98:13:1e:93:92:3d:26:4e:72:d0:af:99:33:9b: 47:81:57:67:54:16:cd:53:7f:90:80:25:5e:31:4f: c5:93:4b:85:61:69:71:17:b9:a6:e7:d5:92:dd:ea: 0b:e1:6e:47:96:07:49:f9:34:b6:fa:08:84:d0:41: 29:41:ad:42:4c:cd:78:85:3a:b6:0c:34:a7:3f:ae: ee:c9:61:dd:67:bf:f4:0d:d0:21:c5:a5:1c:48:bf: 08:d5:52:f4:59:62:ec:c1:cd:34:7e:3a:86:93:0b: f2:d8:b1:88:6e:33:f4:98:7a:1a:cd:42:54:7f:06: e3:4f:88:f1:26:ec:48:51:78:85:98:7b:e2:7e:cf: 63:c2:8a:e6:00:ec:e9:52:48:98:9a:76:f1:11:a5: 8d:46:71:86:4c:fe:f3:d3:24:c4:de:1a:74:aa:fa: af:ad:db:a0:38:f6:1d:77:85:cd:60:84:e7:79:c8: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.72.0/21 185.88.136.0/22 194.32.151.0/24 IPv6: 2a04:780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39806 Signature Algorithm: sha256WithRSAEncryption 81:c1:8d:a3:db:9d:22:cc:67:ad:21:2e:17:f6:8b:72:bd:19: 75:05:b0:0b:e6:7d:bd:5b:7d:39:b4:50:36:b5:51:46:a7:ea: d1:2a:c5:95:6d:7b:1e:bf:51:e6:82:cd:7c:46:2e:65:b6:45: c3:2a:c3:73:a9:29:58:89:27:c9:cd:90:cb:3c:85:f5:c8:54: 39:31:47:f7:65:68:f7:87:3b:7c:f5:70:81:25:d1:21:15:51: 46:2f:f2:2c:62:9c:04:b1:2a:30:a0:42:df:d5:a3:28:58:33: 89:41:37:bf:c9:b8:18:a7:18:64:9e:4d:83:12:1c:4b:d4:62: e1:e8:cd:bc:76:e2:1d:42:58:38:4b:6c:0d:b6:8c:21:8a:e6: c8:c9:32:c9:94:fa:ef:94:a5:02:e9:9e:d2:77:47:b8:ad:22: 0d:76:3d:2a:48:8e:5c:74:ae:59:a7:98:e1:98:d9:9d:b1:c9: 25:2e:a7:b0:c6:c7:ba:09:3e:13:16:5f:37:23:fc:65:e2:1f: 71:5e:64:15:f2:2d:15:47:63:cb:00:0b:f7:5e:e8:6c:2a:5b: 15:95:61:3c:19:f6:52:1b:18:ee:ff:38:3c:6f:7b:12:00:68: 03:30:c9:1a:99:1e:3f:f1:7e:ac:fa:91:ca:33:71:df:1e:d7: 72:bb:56:ff -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt3xqB3cXtTRWbBXNMxWbIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWIxNWJjNWI5MDIxOTllYjg2ZDYwNzhjNDgyZWRlZGQzZGRkZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrwemY2rPsvjsB3rg2Dacry+XCuC jVN3ktOyMwL+luKk9RsxahV2San+aV8JnvyjmktN/Zk/rszYbkd3uuHYz1iwM5ka LegUa6v8mBMek5I9Jk5y0K+ZM5tHgVdnVBbNU3+QgCVeMU/Fk0uFYWlxF7mm59WS 3eoL4W5HlgdJ+TS2+giE0EEpQa1CTM14hTq2DDSnP67uyWHdZ7/0DdAhxaUcSL8I 1VL0WWLswc00fjqGkwvy2LGIbjP0mHoazUJUfwbjT4jxJuxIUXiFmHvifs9jworm AOzpUkiYmnbxEaWNRnGGTP7z0yTE3hp0qvqvrdugOPYdd4XNYITnecg4uwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFOGxW8W5AhmeuG1geMSC7e3T3d60MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2Y2ZDY1 NS03M2VhLTQyMmEtYTk2My00MWE5ODAwMWNmMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvZjZkNjU1 LTczZWEtNDIyYS1hOTYzLTQxYTk4MDAxY2YyYi8xLzRiRmJ4YmtDR1o2NGJXQjR4 SUx0N2RQZDNyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDshVIAwQCuViIAwQAwiCXMA0EAgACMAcDBQMq BAeAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCbfjANBgkqhkiG9w0BAQsFAAOC AQEAgcGNo9udIsxnrSEuF/aLcr0ZdQWwC+Z9vVt9ObRQNrVRRqfq0SrFlW17Hr9R 5oLNfEYuZbZFwyrDc6kpWIknyc2QyzyF9chUOTFH92Vo94c7fPVwgSXRIRVRRi/y LGKcBLEqMKBC39WjKFgziUE3v8m4GKcYZJ5NgxIcS9Ri4ejNvHbiHUJYOEtsDbaM IYrmyMkyyZT675SlAume0ndHuK0iDXY9KkiOXHSuWaeY4ZjZnbHJJS6nsMbHugk+ ExZfNyP8ZeIfcV5kFfItFUdjywAL917obCpbFZVhPBn2UhsY7v84PG97EgBoAzDJ GpkeP/F+rPqRyjNx3x7XcrtW/w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:10 2026 by rpki-client