This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.cer (raw, json) Hash identifier: 4CNH5Gu6GECMlkbAXYlv62SUwaLbXoLt/w9E5FwJ+Ew= Subject key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36E7158A5AB5D3F0EDAEBA335B4BA6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:28b4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e7:15:8a:5a:b5:d3:f0:ed:ae:ba:33:5b:4b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:64:a5:3a:36:ad:09:21:9e:95:0c:dd:cd: 4c:62:9d:27:ab:49:6c:cf:0a:4a:b2:ce:5c:90:a8: c5:12:14:17:35:c8:a2:32:84:7b:d1:51:c6:d7:4a: 06:6b:a9:00:a6:b5:bd:9c:51:e6:4d:1e:95:54:ac: f3:25:95:33:7d:ee:4e:04:9b:08:6f:43:c1:45:20: be:8b:de:78:10:27:fc:aa:7f:35:ea:be:10:3c:92: 3b:19:6e:3e:cf:6a:dc:3b:e5:85:86:e1:00:9f:c0: 39:7c:67:68:0c:96:7b:76:8a:11:9e:70:f2:a6:d7: 51:f6:c7:15:a3:c4:12:a8:e4:bf:7d:1c:df:05:1e: a9:cf:e0:a3:47:ff:53:73:b1:48:bf:b3:20:fb:0b: 6d:9d:7f:e9:57:28:9b:f6:6e:2c:bb:23:cf:6d:e1: cc:93:c2:88:5d:f8:d7:a7:6b:49:cc:9a:6c:7a:03: 81:11:f3:55:b5:14:dd:e8:62:51:5f:3b:40:44:30: 02:8e:81:03:70:5e:2f:1c:5f:7e:3f:50:bf:f3:c3: 6b:2a:7e:d3:a1:05:97:1e:4b:25:89:8b:85:76:98: 27:b1:4c:59:ed:18:eb:d9:ce:9e:69:2c:3e:0a:04: ad:56:dd:4a:d0:41:90:6e:c2:6f:86:1e:0f:88:ed: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:28b4::/48 Signature Algorithm: sha256WithRSAEncryption 45:53:7b:22:3a:3b:ab:f5:dc:36:24:5e:f3:da:88:44:28:18: a3:16:a8:37:53:56:f5:19:d4:79:7d:df:53:87:3d:d0:9d:c1: 9c:36:7a:98:60:9f:15:18:2e:c6:53:30:a2:53:00:a8:1f:a6: 0a:7f:ab:3e:e8:63:27:a4:0b:97:39:86:70:fa:d4:c7:84:b5: 99:4f:ef:9e:a0:46:f9:fe:69:b5:18:db:5d:77:4a:e9:4b:49: 6f:d4:a3:b6:4e:18:13:bd:60:44:bf:6c:9c:e5:b3:bd:70:5f: 5e:05:63:ef:dd:c5:62:9b:b0:dd:cf:2f:37:c2:a5:c6:1c:b9: d0:3c:b1:0f:78:0b:ee:25:ac:9d:12:32:bf:cc:72:06:ac:7b: 6d:8a:a5:b4:92:c6:5e:c0:d7:7a:f7:f1:73:3c:d7:af:99:34: d1:7b:9f:66:2e:71:53:56:a3:fd:dc:86:37:30:fc:de:95:d6: 04:d9:e8:91:ff:3f:08:c7:c9:83:73:df:71:47:40:ed:47:d7: e0:2e:db:68:93:0f:0f:2e:07:b1:15:3e:67:53:fa:52:e6:cb: 1a:56:6b:c7:4b:2f:18:81:da:aa:8b:35:40:35:9f:2a:57:14: 6a:50:6b:b9:af:e0:ba:f0:cf:6c:d7:35:bf:29:9a:e7:5a:da: eb:8e:89:df -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt7NucVilq10/DtrrozW0umMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWQ5NzRjM2JkNGZlYTRlOWZlYjUxMjlkYmVkMjAzYzA3NWM4ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/lkpTo2rQkhnpUM3c1MYp0nq0ls zwpKss5ckKjFEhQXNciiMoR70VHG10oGa6kAprW9nFHmTR6VVKzzJZUzfe5OBJsI b0PBRSC+i954ECf8qn816r4QPJI7GW4+z2rcO+WFhuEAn8A5fGdoDJZ7dooRnnDy ptdR9scVo8QSqOS/fRzfBR6pz+CjR/9Tc7FIv7Mg+wttnX/pVyib9m4suyPPbeHM k8KIXfjXp2tJzJpsegOBEfNVtRTd6GJRXztARDACjoEDcF4vHF9+P1C/88NrKn7T oQWXHksliYuFdpgnsUxZ7Rjr2c6eaSw+CgStVt1K0EGQbsJvhh4PiO0jfwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFOHZdMO9T+pOn+tRKdvtIDwHXI1oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2M0OWU2 MC05ZjliLTRmZmUtYWRhMC1jMDM0MTA5NGIwOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYzQ5ZTYw LTlmOWItNGZmZS1hZGEwLWMwMzQxMDk0YjA5YS8xLzRkbDB3NzFQNms2ZjYxRXAy LTBnUEFkY2pXZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCi0MA0GCSqGSIb3DQEBCwUAA4IBAQBF U3siOjur9dw2JF7z2ohEKBijFqg3U1b1GdR5fd9Thz3QncGcNnqYYJ8VGC7GUzCi UwCoH6YKf6s+6GMnpAuXOYZw+tTHhLWZT++eoEb5/mm1GNtdd0rpS0lv1KO2ThgT vWBEv2yc5bO9cF9eBWPv3cVim7Ddzy83wqXGHLnQPLEPeAvuJaydEjK/zHIGrHtt iqW0ksZewNd69/FzPNevmTTRe59mLnFTVqP93IY3MPzeldYE2eiR/z8Ix8mDc99x R0DtR9fgLttokw8PLgexFT5nU/pS5ssaVmvHSy8YgdqqizVANZ8qVxRqUGu5r+C6 8M9s1zW/KZrnWtrrjonf -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:22 2026 by rpki-client