This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer (raw, json) Hash identifier: VVlg/eDfbge158nhGD44TTxvDd+Gkv/e2Z501Bp/0TY= Subject key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CCC5F4A99522DE2D7E00D077D3763 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.29.72.0/22 IP: 2a00:a3e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:5f:4a:99:52:2d:e2:d7:e0:0d:07:7d:37:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8a:3c:39:07:17:06:36:f6:f9:f6:98:22:34: e1:11:24:89:e4:e5:21:31:ba:dd:f9:46:45:8f:02: 65:b9:2a:d6:0e:52:16:9f:81:0e:97:b8:d3:4a:51: ad:bd:dd:5f:af:e6:1b:09:3b:ee:71:29:2b:ed:64: d7:7f:01:3f:41:df:7e:13:03:8a:66:3d:b3:fa:83: 2f:58:dc:1d:5a:a0:76:3d:6f:9f:e2:57:09:f9:ac: 4d:5a:6f:fb:61:8a:61:1d:6e:11:74:ad:bc:28:98: 57:3b:64:87:97:7a:b0:9c:d7:49:4f:d2:f9:d2:42: 6a:d9:27:bf:a0:81:a9:3e:dc:28:8f:b5:c8:cc:25: a0:71:d9:65:00:9d:c2:17:c5:34:0e:14:2c:22:32: 1a:b6:c9:eb:70:85:10:07:be:d9:11:23:aa:a0:1f: 0e:7c:39:53:4c:75:66:51:f4:5a:a2:90:22:7d:8b: e8:17:4c:5c:97:76:d3:a5:34:e0:57:68:6e:4b:b4: 6a:3f:a6:2c:f0:b2:6b:a7:10:d3:38:e0:e6:f5:50: 3b:34:bc:3f:27:e2:4f:66:90:61:a8:f4:68:d3:3b: c1:2a:82:b1:8f:12:e7:46:d6:66:19:61:5b:84:4f: d6:4b:b3:30:ab:9b:1a:01:fc:41:6e:ed:7d:40:71: 82:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.72.0/22 IPv6: 2a00:a3e0::/32 Signature Algorithm: sha256WithRSAEncryption 20:8b:c6:48:fe:fc:49:8d:9a:6e:51:ec:a7:37:e5:09:d3:d2: 63:5c:31:cd:1a:b3:4f:0c:0e:72:35:8d:00:7b:a7:08:8f:4a: 67:ac:d4:63:09:c5:bd:c9:99:99:e3:2b:3d:82:66:37:b5:84: c9:b9:f0:36:f5:a5:5c:0c:e6:35:2b:6c:32:c6:1e:5c:59:6d: 17:ee:73:62:be:57:f4:4a:dc:ea:b9:88:cf:48:8f:d0:e6:b3: 7f:6a:25:b5:87:10:9f:3f:4e:64:8b:e3:4d:04:39:2d:cc:49: 3b:6c:d7:b7:a9:eb:0f:ab:9a:56:79:36:59:26:cf:48:08:7b: 40:5e:94:68:c0:f9:88:97:c3:99:a7:63:d4:b4:49:71:57:bf: f4:28:b4:60:5d:70:bd:4d:69:84:a9:e7:46:af:3d:eb:fc:4c: d6:ba:c5:23:e8:49:4b:0e:64:82:48:f6:2a:ef:b2:b9:69:a9: d8:67:e3:3d:29:60:c4:9e:b3:bd:df:6a:d9:c7:22:c2:77:74: b8:12:ce:67:37:6e:ce:ff:34:89:32:49:db:52:7b:a8:67:f2: a9:c9:b1:2e:0c:5f:bb:1a:1c:fd:94:bb:66:d0:72:80:de:c8: 1a:d1:0d:d3:c8:1c:57:6b:21:8b:e1:0f:4b:95:30:5e:cb:ab: a1:1e:b0:fb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XMxfSplSLeLX4A0HfTdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjA0NDlmZTdmNGIyY2YxZjdmZDY3MGU1ODJlYmNjOTdlNDVmN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84o8OQcXBjb2+faYIjThESSJ5OUh Mbrd+UZFjwJluSrWDlIWn4EOl7jTSlGtvd1fr+YbCTvucSkr7WTXfwE/Qd9+EwOK Zj2z+oMvWNwdWqB2PW+f4lcJ+axNWm/7YYphHW4RdK28KJhXO2SHl3qwnNdJT9L5 0kJq2Se/oIGpPtwoj7XIzCWgcdllAJ3CF8U0DhQsIjIatsnrcIUQB77ZESOqoB8O fDlTTHVmUfRaopAifYvoF0xcl3bTpTTgV2huS7RqP6Ys8LJrpxDTOODm9VA7NLw/ J+JPZpBhqPRo0zvBKoKxjxLnRtZmGWFbhE/WS7Mwq5saAfxBbu19QHGCUQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOIESf5/Syzx9/1nDlguvMl+Rff/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzNkYzg3 OS0xMWI5LTRmYTYtODQxZC05MDZhOTFlZTlmZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvM2RjODc5 LTExYjktNGZhNi04NDFkLTkwNmE5MWVlOWZlNC8xLzRnUkpfbjlMTFBIM19XY09X QzY4eVg1RjlfOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuR1IMA0EAgACMAcDBQAqAKPgMA0GCSqGSIb3 DQEBCwUAA4IBAQAgi8ZI/vxJjZpuUeynN+UJ09JjXDHNGrNPDA5yNY0Ae6cIj0pn rNRjCcW9yZmZ4ys9gmY3tYTJufA29aVcDOY1K2wyxh5cWW0X7nNivlf0StzquYjP SI/Q5rN/aiW1hxCfP05ki+NNBDktzEk7bNe3qesPq5pWeTZZJs9ICHtAXpRowPmI l8OZp2PUtElxV7/0KLRgXXC9TWmEqedGrz3r/EzWusUj6ElLDmSCSPYq77K5aanY Z+M9KWDEnrO932rZxyLCd3S4Es5nN27O/zSJMknbUnuoZ/KpybEuDF+7Ghz9lLtm 0HKA3sga0Q3TyBxXayGL4Q9LlTBey6uhHrD7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:57 2026 by rpki-client