This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer File: 4bpLKGfa04tzpGkYJB78cqISYvc.cer (raw, json) Hash identifier: aMjEGtd+AroRJ9Y/gIUvLrhS8kcG2zpkbGYQxrjGJd4= Subject key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED54C25993BECDAF5A9D666F86DB68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50226 IP: 89.16.192.0/19 IP: 185.56.124.0/22 IP: 185.228.40.0/22 IP: 2a00:17e8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:54:c2:59:93:be:cd:af:5a:9d:66:6f:86:db:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:8d:2b:02:7b:3d:02:bf:01:07:4f:a9:7d: d1:cb:b6:22:6a:88:d8:14:8b:34:f5:c2:91:ce:69: 4e:12:3b:0b:17:1e:65:31:c9:63:b4:e8:eb:09:e4: 7d:eb:a5:de:a8:d0:74:18:aa:e1:aa:57:c7:a9:ce: 77:8b:2e:1a:53:b4:47:bd:a2:27:bb:4a:15:75:29: 62:b2:4e:21:f1:83:e9:f3:1e:b1:dd:ad:c5:8c:74: 8a:e6:45:29:bc:e4:b4:23:bc:d0:06:3f:2a:08:b4: 0c:1a:76:d4:f7:2d:92:ea:23:87:5c:d3:44:a9:ca: 34:f0:b0:50:20:51:bb:60:00:a4:c4:5f:49:ae:30: aa:b4:2b:a3:73:62:da:9f:1e:a3:12:5a:8a:a4:23: 24:78:3a:80:7b:a1:6b:01:f1:e4:45:8e:de:90:1d: 10:34:c9:e0:b1:01:e3:b3:b9:73:02:f6:a8:3b:c8: 44:b3:83:5e:23:38:bb:68:0d:41:76:20:a7:bd:a0: 93:c1:4d:06:77:77:99:41:4a:0e:d5:cb:9a:d7:7e: 4f:39:6b:bf:e0:f4:57:2b:7e:15:b0:36:41:65:29: f7:04:e7:5d:2d:86:1c:b0:94:f7:4c:85:df:23:04: 6d:9f:1c:6a:56:4b:06:03:f0:49:77:d5:e3:73:71: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.16.192.0/19 185.56.124.0/22 185.228.40.0/22 IPv6: 2a00:17e8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50226 Signature Algorithm: sha256WithRSAEncryption 8b:79:60:ef:fc:83:98:f8:6f:54:ad:4d:8d:8b:cf:96:72:b0: a1:5b:74:80:84:47:16:ec:02:ce:24:f8:28:3d:99:b5:69:f3: f0:93:74:0a:fc:d1:b1:5f:63:ab:c4:d0:fd:f1:43:a9:0c:de: 4c:a3:ef:6d:43:c4:75:44:50:75:db:0e:dc:96:81:94:55:a5: 1c:b5:6b:0e:ed:10:7a:08:b1:12:e9:a3:e7:93:df:95:03:1a: 13:70:42:7e:2b:4d:2a:57:c8:e2:cc:1c:a8:44:ec:1b:99:50: b8:02:33:a9:cb:13:22:4d:fc:f4:2b:d3:44:ed:4c:5d:62:db: 29:e3:10:d7:1b:02:d8:57:c8:7b:38:b0:5b:10:36:48:bf:13: bf:e0:4b:8f:41:12:5d:88:43:ee:80:82:be:b1:f2:58:93:ef: 7b:19:bb:69:d7:bc:ea:75:ef:51:62:b8:2d:de:6e:24:b8:e1: 09:a0:47:6b:f5:5e:27:7b:bf:2e:83:c4:04:d6:da:a0:42:73: 84:46:e6:00:bb:e0:93:14:86:b4:f0:1e:8e:3f:07:a3:7c:54: f9:b7:61:28:bb:cd:c3:60:a5:65:50:a7:8c:1b:e5:c2:f5:61: 71:5b:f5:fd:7e:3a:96:54:bf:4f:3e:22:a0:61:54:db:96:9e: 6b:71:63:6d -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt57VTCWZO+za9anWZvhttoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWJhNGIyODY3ZGFkMzhiNzNhNDY5MTgyNDFlZmM3MmEyMTI2MmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqGNKwJ7PQK/AQdPqX3Ry7YiaojY FIs09cKRzmlOEjsLFx5lMcljtOjrCeR966XeqNB0GKrhqlfHqc53iy4aU7RHvaIn u0oVdSlisk4h8YPp8x6x3a3FjHSK5kUpvOS0I7zQBj8qCLQMGnbU9y2S6iOHXNNE qco08LBQIFG7YACkxF9JrjCqtCujc2Lanx6jElqKpCMkeDqAe6FrAfHkRY7ekB0Q NMngsQHjs7lzAvaoO8hEs4NeIzi7aA1BdiCnvaCTwU0Gd3eZQUoO1cua135POWu/ 4PRXK34VsDZBZSn3BOddLYYcsJT3TIXfIwRtnxxqVksGA/BJd9Xjc3Fb/QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFOG6Syhn2tOLc6RpGCQe/HKiEmL3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzY4OTEw OS0xNzIzLTRiZjEtYjYzYS1kYzY0YWU3MjU3OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNjg5MTA5 LTE3MjMtNGJmMS1iNjNhLWRjNjRhZTcyNTc4ZS8xLzRicExLR2ZhMDR0enBHa1lK Qjc4Y3FJU1l2Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFWRDAAwQCuTh8AwQCueQoMA0EAgACMAcDBQMq ABfoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEMjANBgkqhkiG9w0BAQsFAAOC AQEAi3lg7/yDmPhvVK1NjYvPlnKwoVt0gIRHFuwCziT4KD2ZtWnz8JN0CvzRsV9j q8TQ/fFDqQzeTKPvbUPEdURQddsO3JaBlFWlHLVrDu0QegixEumj55PflQMaE3BC fitNKlfI4swcqETsG5lQuAIzqcsTIk389CvTRO1MXWLbKeMQ1xsC2FfIeziwWxA2 SL8Tv+BLj0ESXYhD7oCCvrHyWJPvexm7ade86nXvUWK4Ld5uJLjhCaBHa/VeJ3u/ LoPEBNbaoEJzhEbmALvgkxSGtPAejj8Ho3xU+bdhKLvNw2ClZVCnjBvlwvVhcVv1 /X46llS/Tz4ioGFU25aea3FjbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:45 2026 by rpki-client