This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.cer (raw, json) Hash identifier: xJlHCHXA1OqerACBkEiHzIhzL15xmG5XQxJHbCo/s00= Subject key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6CA150EC4EDD8E3C5FCE00D2F1970 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42195 IP: 193.16.247.0/24 IP: 194.110.219.0/24 IP: 2001:67c:290::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ca:15:0e:c4:ed:d8:e3:c5:fc:e0:0d:2f:19:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e229b37eb630686b1328338471b52da95d204911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:d8:59:9b:5e:35:e2:bd:ab:19:f1:b0:82: 46:0c:d3:a8:c9:d0:90:c0:0b:16:21:c6:1c:ec:10: 11:0c:48:e2:09:ee:b1:7a:b3:20:14:6e:b2:2a:9c: 5e:e8:36:28:0b:d6:2b:e4:bb:dc:b9:ed:ec:3b:0d: 6b:30:2c:b4:0c:5b:33:a0:d6:cc:90:a3:ba:ec:80: c6:4b:d2:d6:9e:97:c1:16:da:9b:ab:b2:d4:40:e8: fa:6b:32:a2:de:78:1f:2d:0f:67:77:30:a0:0d:ae: 79:fd:76:0c:06:c7:6d:c0:73:96:b5:0d:ac:12:04: 92:91:42:46:fd:60:e8:c6:9c:e5:22:2f:06:5d:50: 37:36:fb:af:98:ca:4e:f0:05:a1:1b:dd:2e:9c:c8: 1e:cd:fd:ee:ae:a8:7a:68:5c:38:da:74:0f:de:9b: 70:7c:0b:5a:04:89:d1:a6:83:cc:5e:cb:e2:15:2e: c8:68:4b:47:e8:bf:2c:7e:ad:b3:3a:75:aa:44:94: 8c:71:c9:52:c1:34:ea:d4:ce:64:1d:35:31:6b:7d: 79:5e:59:52:c6:5d:9b:e1:a7:50:96:14:23:dd:03: cf:ed:2b:b1:6e:b6:50:f2:6b:ce:30:d1:07:5c:6c: 8c:19:cc:15:30:be:23:e7:e2:f4:4c:8e:0a:fa:62: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.247.0/24 194.110.219.0/24 IPv6: 2001:67c:290::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42195 Signature Algorithm: sha256WithRSAEncryption 13:4d:00:3d:54:d5:ba:62:ae:ba:0c:26:95:be:a9:cf:07:01: 8f:df:d4:34:06:53:06:b7:dd:5e:12:44:b0:66:4d:bd:56:65: 43:e1:d9:a5:cd:ba:e8:13:0b:c6:fa:4a:62:5b:41:65:9f:81: 83:ae:de:f3:0e:c0:68:7b:94:42:52:b3:8f:a2:ce:1e:a6:92: b5:b3:24:07:54:94:fa:05:d1:b7:82:98:d4:de:65:d6:09:6a: 07:99:8c:3b:0c:ee:6b:c2:c5:3f:ac:20:75:28:fa:b4:be:ee: 4d:2f:1b:b8:f3:94:12:ca:a5:04:4d:45:42:7f:71:73:78:3b: 37:5b:25:5e:04:88:43:a2:7f:ff:6e:9d:a3:63:e6:d5:34:ae: 46:fb:7a:fb:4a:22:3f:40:5e:4f:74:cb:77:05:93:a6:4a:ab: 50:15:c6:d0:75:fd:2b:77:c2:3f:b4:db:9c:5a:87:3f:b1:8b: 73:d8:b3:27:9f:3f:27:2c:5d:91:f3:3a:8d:1c:42:50:9e:ba: f7:6a:5d:df:46:e1:7a:86:c5:bc:d6:8d:cd:bf:a1:65:ac:55: 71:74:89:ee:5f:65:4e:5f:91:4a:f0:84:26:df:b0:48:d9:06: 97:b6:9e:6a:93:4d:b5:8f:86:49:f2:b9:ad:ca:96:b1:d4:e4: 5f:19:37:01 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt3xsoVDsTt2OPF/OANLxlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjI5YjM3ZWI2MzA2ODZiMTMyODMzODQ3MWI1MmRhOTVkMjA0OTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxobYWZteNeK9qxnxsIJGDNOoydCQ wAsWIcYc7BARDEjiCe6xerMgFG6yKpxe6DYoC9Yr5Lvcue3sOw1rMCy0DFszoNbM kKO67IDGS9LWnpfBFtqbq7LUQOj6azKi3ngfLQ9ndzCgDa55/XYMBsdtwHOWtQ2s EgSSkUJG/WDoxpzlIi8GXVA3NvuvmMpO8AWhG90unMgezf3urqh6aFw42nQP3ptw fAtaBInRpoPMXsviFS7IaEtH6L8sfq2zOnWqRJSMcclSwTTq1M5kHTUxa315XllS xl2b4adQlhQj3QPP7SuxbrZQ8mvOMNEHXGyMGcwVML4j5+L0TI4K+mJClQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFOIps362MGhrEygzhHG1LaldIEkRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5Lzc0NTAy NC05ZTM3LTQ3OTAtODZhYy03ZGU4ZDhjMmU5MzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvNzQ1MDI0 LTllMzctNDc5MC04NmFjLTdkZThkOGMyZTkzMC8xLzRpbXpmcll3YUdzVEtET0Vj YlV0cVYwZ1NSRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwRD3AwQAwm7bMA8EAgACMAkDBwAgAQZ8ApAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKTTMA0GCSqGSIb3DQEBCwUAA4IBAQAT TQA9VNW6Yq66DCaVvqnPBwGP39Q0BlMGt91eEkSwZk29VmVD4dmlzbroEwvG+kpi W0Fln4GDrt7zDsBoe5RCUrOPos4eppK1syQHVJT6BdG3gpjU3mXWCWoHmYw7DO5r wsU/rCB1KPq0vu5NLxu485QSyqUETUVCf3FzeDs3WyVeBIhDon//bp2jY+bVNK5G +3r7SiI/QF5PdMt3BZOmSqtQFcbQdf0rd8I/tNucWoc/sYtz2LMnnz8nLF2R8zqN HEJQnrr3al3fRuF6hsW81o3Nv6FlrFVxdInuX2VOX5FK8IQm37BI2QaXtp5qk021 j4ZJ8rmtypax1ORfGTcB -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:55 2026 by rpki-client