This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer File: 4fI_OJG9feF53kEDCi_R-ljkPRc.cer (raw, json) Hash identifier: 2FwZa59kOYR9jwkEpVfTEXQaXinvyzZBjz/kF00+1Kg= Subject key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D51CC46E117EAF00C269DB5A35B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214633 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d5:1c:c4:6e:11:7e:af:00:c2:69:db:5a:35:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:79:af:8b:b9:ed:4e:df:c4:e5:30:11:f8: 84:8c:1a:0b:d3:ee:ed:76:92:1d:f9:33:47:5c:c9: f4:51:58:e1:ef:e8:9b:d8:44:79:b3:1b:54:49:3c: cf:24:2d:7c:94:d8:fa:71:8e:2f:b1:9a:4a:7f:1d: c5:23:ad:6f:73:d2:b7:ef:70:f9:3e:01:f5:bb:a5: 74:fc:4b:4a:97:0d:76:bb:1b:8c:a7:34:01:6c:53: f9:9c:20:69:81:60:37:0e:8c:58:de:3d:55:f2:3c: 42:a3:75:44:b3:27:72:64:fd:56:d9:02:3f:5e:9d: b7:e9:1e:2c:17:f1:53:d7:86:9f:fb:58:dc:37:ef: 70:a9:1f:ee:00:b0:78:a1:9e:63:35:48:69:87:8a: 95:13:56:9b:a2:a7:5d:49:64:98:26:63:e5:8d:0e: d5:25:bb:a1:bc:c1:ad:6b:68:de:a5:d1:bb:1d:9f: 36:62:f9:d9:68:3e:3d:bb:41:d4:77:ac:9a:5a:f6: b5:92:87:54:cb:81:25:a7:ec:d4:1c:cf:96:6c:be: 99:bb:91:e5:96:fb:ad:81:16:3f:df:05:33:73:ee: 8c:42:84:79:4e:e7:bc:f3:49:31:e2:a7:3e:34:65: 9e:34:28:35:9e:d2:62:6c:99:bb:c8:51:13:5e:5d: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214633 Signature Algorithm: sha256WithRSAEncryption 13:e0:65:48:27:c4:65:3c:d6:ee:db:f0:b0:de:d2:43:d5:16: 36:21:b7:0b:95:e6:50:36:12:6d:d7:d3:ed:0d:05:42:af:4c: 33:6f:a2:8c:55:b1:60:1d:0e:9f:8d:82:1c:4b:ce:c4:ad:82: e6:52:a7:11:cc:b3:d3:e4:11:a6:72:f0:a4:4e:ba:60:e0:6d: 6f:b8:42:e0:2e:6c:6c:9a:42:90:98:c1:71:4e:4b:1b:3d:4e: 91:34:11:16:d8:74:9b:f0:5b:4d:f2:aa:23:3d:95:8d:ee:d1: ba:43:6b:94:c1:3a:c4:05:65:13:ac:82:d4:1b:f1:a3:3d:82: 3e:24:ef:11:1b:71:fd:81:2b:2f:e9:2c:76:97:9d:93:f2:01: 34:15:37:43:36:eb:a5:1d:ff:23:e2:24:ca:e7:29:99:6d:30: 21:c8:0b:57:5b:b1:9b:aa:53:7f:ac:75:07:cd:e5:b6:18:5d: 64:0b:48:1a:99:27:a0:be:e7:cb:37:0f:71:0a:ed:29:e5:4d: 3e:fe:f4:c7:71:44:72:ef:52:86:98:9c:e8:dc:84:3c:87:76: 4b:43:05:9d:36:c5:53:a5:2b:2e:8e:b6:77:05:70:d7:af:3b: 0e:7a:5d:30:e9:ec:82:6a:74:9f:37:c9:7d:24:b8:e1:33:53: 3f:1c:83:b6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FdUcxG4Rfq8AwmnbWjW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWYyM2YzODkxYmQ3ZGUxNzlkZTQxMDMwYTJmZDFmYTU4ZTQzZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcl5r4u57U7fxOUwEfiEjBoL0+7t dpId+TNHXMn0UVjh7+ib2ER5sxtUSTzPJC18lNj6cY4vsZpKfx3FI61vc9K373D5 PgH1u6V0/EtKlw12uxuMpzQBbFP5nCBpgWA3DoxY3j1V8jxCo3VEsydyZP1W2QI/ Xp236R4sF/FT14af+1jcN+9wqR/uALB4oZ5jNUhph4qVE1aboqddSWSYJmPljQ7V JbuhvMGta2jepdG7HZ82YvnZaD49u0HUd6yaWva1kodUy4Elp+zUHM+WbL6Zu5Hl lvutgRY/3wUzc+6MQoR5Tue880kx4qc+NGWeNCg1ntJibJm7yFETXl1bCQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOHyPziRvX3hed5BAwov0fpY5D0XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2MzY2Q2 YS1jNmMxLTQwODctOTZmNi04NjE3NjNiNWYwNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvYzNjZDZh LWM2YzEtNDA4Ny05NmY2LTg2MTc2M2I1ZjA2NS8xLzRmSV9PSkc5ZmVGNTNrRURD aV9SLWxqa1BSYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGaTANBgkqhkiG9w0BAQsFAAOCAQEAE+BlSCfEZTzW 7tvwsN7SQ9UWNiG3C5XmUDYSbdfT7Q0FQq9MM2+ijFWxYB0On42CHEvOxK2C5lKn Ecyz0+QRpnLwpE66YOBtb7hC4C5sbJpCkJjBcU5LGz1OkTQRFth0m/BbTfKqIz2V je7RukNrlME6xAVlE6yC1Bvxoz2CPiTvERtx/YErL+ksdpedk/IBNBU3QzbrpR3/ I+IkyucpmW0wIcgLV1uxm6pTf6x1B83lthhdZAtIGpknoL7nyzcPcQrtKeVNPv70 x3FEcu9Shpic6NyEPId2S0MFnTbFU6UrLo62dwVw1687DnpdMOnsgmp0nzfJfSS4 4TNTPxyDtg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:53 2026 by rpki-client