This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer (raw, json) Hash identifier: w8N6ccgUScQRPBV8w2BwkzYP3+DMHGwB+5m5TWzjd3o= Subject key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA37A30737048D78030BC8E4504F113 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207613 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7a:30:73:70:48:d7:80:30:bc:8e:45:04:f1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:84:86:45:0d:21:5d:22:bb:5a:9d:10:3e: 36:78:d1:29:aa:37:a5:15:6f:42:94:f3:fa:2f:c0: 79:93:52:9d:be:6f:e2:e9:54:70:7b:9f:23:53:b7: c6:aa:5c:d7:b0:a4:bc:66:36:56:87:cb:e2:27:a9: 85:ef:a0:7a:0e:b7:c7:87:3c:03:66:cc:f8:fc:43: b3:1b:df:ef:9a:c7:54:07:cd:d8:5c:fa:80:9d:a0: 7d:ce:49:84:4d:57:b5:bb:11:97:e3:31:96:40:6f: a8:8a:35:70:6c:ca:7c:d8:42:1e:6b:99:60:42:2c: 9a:13:7a:53:53:6a:b6:e7:ba:7d:21:4a:48:e8:4a: 94:b6:dd:7a:b9:ae:1b:8f:cb:cc:d8:ce:d9:1c:25: ea:e1:5f:ea:30:57:0a:5a:9f:8e:60:0a:88:2f:7d: 99:25:5f:3f:03:ac:02:de:c2:75:50:2f:c5:d3:01: 61:f7:29:ad:08:52:0f:82:dc:04:2a:d6:8e:9b:a4: d2:0c:e7:e7:fb:4d:06:77:a0:fa:f2:1c:14:32:54: c9:9c:38:d6:ab:fe:61:1a:72:df:36:ca:77:c1:93: d2:69:f3:5c:c2:69:e3:8f:65:85:70:4f:6f:14:75: 88:0e:51:ed:7d:e7:de:8d:a6:82:a5:c4:0e:ad:a2: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207613 Signature Algorithm: sha256WithRSAEncryption 8e:78:2a:a8:28:b9:f4:56:70:6f:cd:e1:68:ca:d5:20:1c:8b: 19:a1:de:b0:71:fd:e0:2b:6c:5a:c8:fd:df:35:42:64:52:d5: b7:22:99:97:74:1b:e7:e2:70:37:a0:4a:5e:69:af:76:79:a3: f1:2e:a2:31:12:48:76:2f:8e:72:f9:c2:ff:2d:dd:9a:3f:21: 29:9c:d8:ae:29:a9:c3:62:de:a9:ad:13:73:f0:84:4b:11:eb: e1:ea:7a:ea:9a:41:67:4b:81:a2:71:c3:de:05:b2:80:11:61: 76:82:8b:c2:b9:dc:73:6d:0b:95:7a:80:40:19:69:52:0e:ed: 66:5d:64:f4:79:8c:eb:0a:5c:6b:92:f1:2a:68:a6:d1:8c:51: f2:28:f0:19:1c:f0:29:db:5c:37:4c:37:d6:eb:03:a1:b1:3a: 8d:41:3e:15:c2:40:ad:c1:06:cb:fe:4c:70:b0:62:c4:95:25: 02:86:d5:c9:bf:81:f4:02:67:c9:67:7f:66:3a:cf:8b:d8:ec: ed:26:1d:0f:9a:d4:64:f4:c8:a9:8d:a6:5e:5b:83:4a:5f:c4: 17:3c:30:e9:fa:65:91:e8:ea:cc:ce:7e:04:23:22:a0:ed:01: a3:e1:9e:88:00:6b:0c:37:13:cc:c7:c9:cf:75:85:d5:b8:39: f5:89:5b:c5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7o3owc3BI14AwvI5FBPETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWY1YzY0MGI0YWExNGIyNjExOTI5M2RjNjEzZGM2MzY2YTU2N2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziqEhkUNIV0iu1qdED42eNEpqjel FW9ClPP6L8B5k1Kdvm/i6VRwe58jU7fGqlzXsKS8ZjZWh8viJ6mF76B6DrfHhzwD Zsz4/EOzG9/vmsdUB83YXPqAnaB9zkmETVe1uxGX4zGWQG+oijVwbMp82EIea5lg QiyaE3pTU2q257p9IUpI6EqUtt16ua4bj8vM2M7ZHCXq4V/qMFcKWp+OYAqIL32Z JV8/A6wC3sJ1UC/F0wFh9ymtCFIPgtwEKtaOm6TSDOfn+00Gd6D68hwUMlTJnDjW q/5hGnLfNsp3wZPSafNcwmnjj2WFcE9vFHWIDlHtfefejaaCpcQOraKhjQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOH1xkC0qhSyYRkpPcYT3GNmpWf2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzQzMDhh Yi1iYzA0LTQ5YWYtYmIwMS04OThiMjdjYmZjNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvNDMwOGFi LWJjMDQtNDlhZi1iYjAxLTg5OGIyN2NiZmM0Ny8xLzRmWEdRTFNxRkxKaEdTazl4 aFBjWTJhbFpfWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMq/TANBgkqhkiG9w0BAQsFAAOCAQEAjngqqCi59FZw b83haMrVIByLGaHesHH94CtsWsj93zVCZFLVtyKZl3Qb5+JwN6BKXmmvdnmj8S6i MRJIdi+OcvnC/y3dmj8hKZzYrimpw2Leqa0Tc/CESxHr4ep66ppBZ0uBonHD3gWy gBFhdoKLwrncc20LlXqAQBlpUg7tZl1k9HmM6wpca5LxKmim0YxR8ijwGRzwKdtc N0w31usDobE6jUE+FcJArcEGy/5McLBixJUlAobVyb+B9AJnyWd/ZjrPi9js7SYd D5rUZPTIqY2mXluDSl/EFzww6fplkejqzM5+BCMioO0Bo+GeiABrDDcTzMfJz3WF 1bg59YlbxQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:31 2026 by rpki-client