This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer File: 4br5DtE9F1RSz15aFjKnlL8fTJo.cer (raw, json) Hash identifier: g5/mVKX5vnQry6sszs3i6Jyff2xaVX1z5PvlijkdxoM= Subject key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA8668E9E1C534A103F6E3B67826A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.69.70.0/23 IP: 2a05:2100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:86:68:e9:e1:c5:34:a1:03:f6:e3:b6:78:26:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:40:11:c0:53:c2:1f:71:c0:39:70:27:9b: ad:a3:62:b9:40:1f:af:5a:fb:bf:74:1a:04:8f:79: 58:a5:37:df:7d:6a:a9:6e:2b:d0:af:b1:36:dc:9d: 59:d5:d2:46:d7:91:06:d2:0c:db:9b:61:4b:c4:30: 48:f3:6a:08:01:7f:7a:90:2a:8f:5e:ed:38:0c:cc: 3f:15:16:c3:3c:be:60:92:ff:1f:90:f6:b8:32:6a: 53:8f:b8:2d:37:f9:f0:6c:81:39:8f:c7:17:01:db: cb:57:ce:5a:35:c0:d8:12:b4:64:f2:4b:91:b3:d9: 5b:d9:c6:9c:6a:3c:6e:a5:4b:51:e2:48:41:42:20: 98:62:b6:61:4f:d4:a6:53:98:62:b9:68:70:fd:ac: c6:ea:8c:b2:1d:85:7f:ab:e9:68:14:f7:3b:5e:d1: 6f:46:77:ba:1f:28:98:f5:c7:6f:92:59:0c:39:c4: bc:2d:0f:ff:5d:f8:0a:5a:da:ef:26:94:95:56:b5: e1:e0:c3:d7:b4:c1:cd:dc:d0:e0:46:91:e4:13:f7: 46:04:b2:da:6a:b1:e1:06:1f:c4:89:9e:96:5d:f9: 9e:e8:09:6d:d7:04:67:fd:2d:51:cc:4e:57:ed:d8: cd:0b:04:cb:60:0d:ec:60:b4:19:38:18:a6:97:28: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.70.0/23 IPv6: 2a05:2100::/29 Signature Algorithm: sha256WithRSAEncryption 7c:86:e3:11:5f:55:3b:7d:bc:b1:7e:50:24:02:48:6a:25:46: 43:cd:28:fb:53:ff:1a:e1:ff:ac:86:3c:1c:6a:d2:4b:dc:2e: 22:79:1a:8f:98:fe:7b:0c:39:b1:1f:18:d6:41:90:e4:df:1b: f7:5e:95:03:86:87:c6:af:20:ca:57:45:60:f8:ba:6a:ec:39: 3d:61:f0:8b:21:79:78:47:a3:3c:d7:23:de:43:be:af:92:e6: 88:c1:b4:43:50:56:c4:f9:73:00:d4:ad:4e:6c:70:d7:69:7e: 27:43:58:b2:ca:14:e9:9a:3d:bf:93:21:24:97:29:88:d3:60: d2:f2:6b:52:b5:b3:10:b9:fa:96:7e:6b:86:52:1d:d6:8d:e4: 90:32:f9:9c:ff:03:cc:d7:11:31:7d:35:05:95:4e:17:4b:2f: 2e:89:17:ad:31:42:58:ad:45:e7:67:a6:ef:54:a4:15:a7:2a: 46:3c:87:50:66:0a:47:e5:fb:f3:62:e9:cb:dd:d1:fa:92:df: 80:8d:3c:92:3a:60:d7:45:5c:c5:a6:92:6e:27:e5:f5:c5:6b: a1:6d:ae:6b:92:7b:84:a3:a7:4a:3f:2c:90:c1:98:ff:80:12: 22:c0:23:33:7f:fe:37:bc:6c:16:85:1f:43:d0:b1:e8:27:6f: 26:9a:19:be -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9yoZo6eHFNKED9uO2eCaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWJhZjkwZWQxM2QxNzU0NTJjZjVlNWExNjMyYTc5NGJmMWY0YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUtAEcBTwh9xwDlwJ5uto2K5QB+v Wvu/dBoEj3lYpTfffWqpbivQr7E23J1Z1dJG15EG0gzbm2FLxDBI82oIAX96kCqP Xu04DMw/FRbDPL5gkv8fkPa4MmpTj7gtN/nwbIE5j8cXAdvLV85aNcDYErRk8kuR s9lb2cacajxupUtR4khBQiCYYrZhT9SmU5hiuWhw/azG6oyyHYV/q+loFPc7XtFv Rne6HyiY9cdvklkMOcS8LQ//XfgKWtrvJpSVVrXh4MPXtMHN3NDgRpHkE/dGBLLa arHhBh/EiZ6WXfme6Alt1wRn/S1RzE5X7djNCwTLYA3sYLQZOBimlyhcSQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOG6+Q7RPRdUUs9eWhYyp5S/H0yaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2U2ZWZj Zi1lNWQ5LTQ5ZjAtYjExZi1kNTJmZGM5ZTgyODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZTZlZmNm LWU1ZDktNDlmMC1iMTFmLWQ1MmZkYzllODI4Ny8xLzRicjVEdEU5RjFSU3oxNWFG aktubEw4ZlRKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuUVGMA0EAgACMAcDBQMqBSEAMA0GCSqGSIb3 DQEBCwUAA4IBAQB8huMRX1U7fbyxflAkAkhqJUZDzSj7U/8a4f+shjwcatJL3C4i eRqPmP57DDmxHxjWQZDk3xv3XpUDhofGryDKV0Vg+Lpq7Dk9YfCLIXl4R6M81yPe Q76vkuaIwbRDUFbE+XMA1K1ObHDXaX4nQ1iyyhTpmj2/kyEklymI02DS8mtStbMQ ufqWfmuGUh3WjeSQMvmc/wPM1xExfTUFlU4XSy8uiRetMUJYrUXnZ6bvVKQVpypG PIdQZgpH5fvzYunL3dH6kt+AjTySOmDXRVzFppJuJ+X1xWuhba5rknuEo6dKPyyQ wZj/gBIiwCMzf/43vGwWhR9D0LHoJ28mmhm+ -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:22 2026 by rpki-client