This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer File: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer (raw, json) Hash identifier: j0HX7nS12b1HBnf2Xr5u2fntjfPSgqMMKAcTOR8bbQo= Subject key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8023BE8676516C720349978224C368 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60952 IP: 167.94.246.0/24 IP: 194.110.0.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:23:be:86:76:51:6c:72:03:49:97:82:24:c3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a6:d6:f5:34:97:df:51:ce:15:f3:9c:80:e5: fb:22:2b:a0:40:a1:cc:d0:15:37:ce:67:42:47:a5: a1:3d:90:51:9f:aa:2d:62:eb:a6:76:be:26:ef:3b: 31:d7:d7:36:83:dd:04:9b:76:71:70:c6:45:b3:64: 4c:7c:8e:16:27:c1:ba:d5:b6:b7:a9:b8:c1:67:c5: 26:02:1a:ee:c5:f8:27:7d:3f:21:f7:4f:52:b5:bc: 24:71:8b:67:23:bf:dd:02:90:b9:f4:a5:e3:e8:03: 83:5a:a2:7d:86:cd:e2:23:66:ab:42:0f:aa:46:42: 10:a6:7a:a0:10:c6:a1:33:ba:54:c3:87:26:3b:d2: 80:2f:00:92:af:63:18:2e:53:00:17:63:1a:a1:f6: a5:60:60:39:7f:d2:90:9a:ff:4c:1b:cc:39:e7:28: a9:89:88:08:e6:db:be:65:13:a1:cf:e8:cb:73:1e: e3:88:3f:0b:76:26:43:f4:79:62:14:d8:75:2c:8c: 16:09:18:20:24:b2:5e:c9:18:3d:be:07:08:bb:bb: a5:26:f5:d7:a8:86:bd:fa:31:d6:5f:26:c8:d0:1b: 17:03:48:3c:44:19:3b:0a:f5:48:c5:39:ad:35:85: 8c:6d:63:f9:f3:ea:f9:13:ab:17:65:17:22:a7:c9: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.94.246.0/24 194.110.0.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60952 Signature Algorithm: sha256WithRSAEncryption 62:81:88:f4:b8:e7:d3:10:60:e1:6b:05:9f:92:c7:e0:93:ef: f6:78:46:84:b0:04:fb:ac:de:d1:5f:11:c5:b8:07:82:f9:8b: a3:f6:84:94:2a:5d:87:0b:7b:d2:7b:25:a8:47:83:78:90:e1: d1:e7:78:62:bc:e4:cf:6c:67:6d:49:6a:59:77:ce:a9:b3:ce: 25:73:34:23:b5:8b:6a:b7:ad:38:e9:bb:27:40:ba:bf:b9:a0: aa:16:25:8e:0a:d3:90:ce:7a:61:7a:65:7d:06:bd:1f:09:d1: 70:f5:95:10:30:17:2c:3e:bc:35:18:08:40:9a:06:d2:a9:35: 66:70:b3:0b:aa:e6:b6:ae:c4:a6:a6:c3:44:da:de:34:be:f5: c5:91:52:4c:46:61:85:1b:f0:5a:3c:88:ef:00:cb:0e:23:35: 30:d4:0b:a4:b1:47:52:42:fa:b4:58:34:fc:b9:68:d4:a8:a5: 29:f7:3d:8d:cf:1a:7e:be:92:7e:43:c8:1f:12:42:c1:69:56: da:7e:ec:76:41:29:07:be:6a:b3:59:a6:c2:50:a7:8b:57:47: eb:ce:d4:ad:17:ec:12:9c:ae:31:14:6c:59:75:f4:a3:c4:52: bb:4f:51:c5:53:a6:b9:cf:b0:43:1e:08:76:7d:c1:de:84:d3: 08:a3:7d:56 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8gCO+hnZRbHIDSZeCJMNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjJkODNiNzgzMDhkMDllNjVkMjE1MGVhYzE2MjNkZWU5NmQ0YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66bW9TSX31HOFfOcgOX7IiugQKHM 0BU3zmdCR6WhPZBRn6otYuumdr4m7zsx19c2g90Em3ZxcMZFs2RMfI4WJ8G61ba3 qbjBZ8UmAhruxfgnfT8h909StbwkcYtnI7/dApC59KXj6AODWqJ9hs3iI2arQg+q RkIQpnqgEMahM7pUw4cmO9KALwCSr2MYLlMAF2MaofalYGA5f9KQmv9MG8w55yip iYgI5tu+ZROhz+jLcx7jiD8LdiZD9HliFNh1LIwWCRggJLJeyRg9vgcIu7ulJvXX qIa9+jHWXybI0BsXA0g8RBk7CvVIxTmtNYWMbWP58+r5E6sXZRcip8mf/QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOItg7eDCNCeZdIVDqwWI97pbUxLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzE4ZmMx NC0wODc3LTRmYTgtYTRhNC02MDNiMjlmZDFhMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMThmYzE0 LTA4NzctNGZhOC1hNGE0LTYwM2IyOWZkMWEwOC8xLzRpMkR0NE1JMEo1bDBoVU9y QllqM3VsdFRFcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAp172AwQAwm4AMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDuGDANBgkqhkiG9w0BAQsFAAOCAQEAYoGI9Ljn0xBg4WsFn5LH4JPv 9nhGhLAE+6ze0V8RxbgHgvmLo/aElCpdhwt70nslqEeDeJDh0ed4Yrzkz2xnbUlq WXfOqbPOJXM0I7WLaretOOm7J0C6v7mgqhYljgrTkM56YXplfQa9HwnRcPWVEDAX LD68NRgIQJoG0qk1ZnCzC6rmtq7EpqbDRNreNL71xZFSTEZhhRvwWjyI7wDLDiM1 MNQLpLFHUkL6tFg0/Llo1KilKfc9jc8afr6SfkPIHxJCwWlW2n7sdkEpB75qs1mm wlCni1dH687UrRfsEpyuMRRsWXX0o8RSu09RxVOmuc+wQx4Idn3B3oTTCKN9Vg== -----END CERTIFICATE-----Generated at Tue Jan 20 01:54:25 2026 by rpki-client