This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer (raw, json) Hash identifier: 52+1H5SY/ASqNBZo4V0l8ipDLuMFYXZh0G9SUJ+IZNs= Subject key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E378357EB60E0D9293D87F86D3BEFE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41003 IP: 83.97.120.0/21 IP: 193.22.171.0/24 IP: 2a00:77c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:83:57:eb:60:e0:d9:29:3d:87:f8:6d:3b:ef:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:c7:1f:40:c7:40:2e:40:c7:78:c7:b6:ad: 3d:06:d3:ab:a9:4f:bc:b4:29:ac:ab:e8:d1:da:2c: ad:7b:ec:7c:de:53:c1:e7:a6:03:8d:94:d1:79:92: bd:37:22:86:ca:2f:20:7e:ef:5c:c9:ce:5f:06:a7: e0:f7:16:c3:27:d1:39:9f:9b:5a:2a:53:e1:9f:f9: 84:d8:a1:ef:f4:6f:fc:c7:48:55:47:2e:26:50:35: e9:22:b4:f0:10:ef:a5:dc:c5:b5:60:b3:8e:cf:8c: 69:06:00:b6:56:67:82:b4:11:15:fb:08:cc:ac:ca: 90:f8:28:55:0e:32:e9:6d:8a:b4:a1:73:ca:05:74: b0:7c:f8:01:a1:9c:3e:f4:9d:42:b4:4a:d8:67:13: 77:c9:47:9e:45:31:aa:1c:9d:12:74:3f:09:e0:dd: db:c5:a3:81:91:4b:3e:31:e6:cb:38:7f:df:d6:f6: a6:49:f2:a5:2f:a0:85:1c:0a:ff:53:69:7e:1b:4c: a6:b2:76:db:ed:60:78:d7:32:d6:c9:b5:30:b9:76: bd:fa:06:8e:45:dc:79:62:0a:8b:59:d8:53:f8:22: fe:28:c8:9b:ad:9b:f9:46:c3:17:cf:1e:25:aa:fb: 38:b3:fc:66:d2:51:04:85:18:98:93:a2:f9:ce:d1: 0d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.120.0/21 193.22.171.0/24 IPv6: 2a00:77c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41003 Signature Algorithm: sha256WithRSAEncryption 40:8d:0c:31:c5:ed:1e:90:6d:33:de:7c:5b:4b:46:68:0c:63: f7:d7:ab:01:46:74:3c:7d:4e:80:b7:9d:fd:35:50:04:99:99: a9:da:52:a4:1f:d3:16:5e:a1:9b:29:94:68:2f:b2:5f:99:df: 5b:e9:bd:17:e5:89:49:3d:ae:41:83:b4:e7:b5:00:62:ce:ee: a2:81:35:03:2d:25:97:df:1c:ca:06:e4:fc:08:b0:72:bd:3d: 02:7e:c1:cb:25:f0:4e:c6:fa:e8:46:c3:eb:27:52:e8:d5:fb: e0:6d:9e:9d:9b:24:5d:1c:4d:ba:05:ff:88:9a:30:2a:29:5d: 58:0f:da:8f:b9:9c:74:43:11:3e:0a:e0:c3:0b:13:8c:ca:50: fe:15:ea:7d:7c:79:35:20:e3:65:75:51:6c:39:3f:e5:f2:98: 80:5e:19:c6:52:53:3e:3e:ca:d0:9a:8d:dc:63:24:16:24:02: 50:4e:54:35:ab:09:cc:5e:39:a0:8e:83:8d:30:cb:8d:00:9d: da:26:f3:3c:88:10:7f:ad:1d:97:df:9f:8b:ab:d8:cf:09:df: fb:67:c4:10:d0:9f:cf:f2:26:e8:3e:ae:5b:bd:69:41:27:44: 53:0f:02:c1:76:c5:2b:d6:97:ec:6c:92:d2:9f:bc:6e:e2:b0: f1:c6:59:12 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+N4NX62Dg2Sk9h/htO+/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWQzYzlhZjZjZjUyYjhhMzkwYjU4ZjAwYjE0YTg4NzEwMzM2OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krHH0DHQC5Ax3jHtq09BtOrqU+8 tCmsq+jR2iyte+x83lPB56YDjZTReZK9NyKGyi8gfu9cyc5fBqfg9xbDJ9E5n5ta KlPhn/mE2KHv9G/8x0hVRy4mUDXpIrTwEO+l3MW1YLOOz4xpBgC2VmeCtBEV+wjM rMqQ+ChVDjLpbYq0oXPKBXSwfPgBoZw+9J1CtErYZxN3yUeeRTGqHJ0SdD8J4N3b xaOBkUs+MebLOH/f1vamSfKlL6CFHAr/U2l+G0ymsnbb7WB41zLWybUwuXa9+gaO Rdx5YgqLWdhT+CL+KMibrZv5RsMXzx4lqvs4s/xm0lEEhRiYk6L5ztENcQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOHTya9s9SuKOQtY8AsUqIcQM2lEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzJjMGRj ZC04ZTQ3LTQ0MmMtYjBmNC1jYzc2NzlmMTgwMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMmMwZGNk LThlNDctNDQyYy1iMGY0LWNjNzY3OWYxODAyZi8xLzRkUEpyMnoxSzRvNUMxandD eFNvaHhBemFVUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDU2F4AwQAwRarMA0EAgACMAcDBQAqAHfAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCgKzANBgkqhkiG9w0BAQsFAAOCAQEAQI0M McXtHpBtM958W0tGaAxj99erAUZ0PH1OgLed/TVQBJmZqdpSpB/TFl6hmymUaC+y X5nfW+m9F+WJST2uQYO057UAYs7uooE1Ay0ll98cygbk/Aiwcr09An7ByyXwTsb6 6EbD6ydS6NX74G2enZskXRxNugX/iJowKildWA/aj7mcdEMRPgrgwwsTjMpQ/hXq fXx5NSDjZXVRbDk/5fKYgF4ZxlJTPj7K0JqN3GMkFiQCUE5UNasJzF45oI6DjTDL jQCd2ibzPIgQf60dl9+fi6vYzwnf+2fEENCfz/Im6D6uW71pQSdEUw8CwXbFK9aX 7GyS0p+8buKw8cZZEg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:14 2026 by rpki-client