This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer (raw, json) Hash identifier: 3A9D8B9L6sH7porv1jLqoloEmeqkFeacBi1awR/Ahuw= Subject key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC4D724E75E4DF561A17C0EA61A4B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52092 IP: 46.149.112.0/20 IP: 2001:67c:3b4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c4:d7:24:e7:5e:4d:f5:61:a1:7c:0e:a6:1a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:80:5c:a6:8c:3d:af:10:fd:03:58:33:f9: cb:9d:4d:df:bc:0d:10:8b:26:44:46:f0:a8:2c:32: 4c:93:63:26:2d:13:cc:4e:f5:14:32:9a:37:ee:c8: da:ca:ef:65:cd:7c:01:cf:6f:71:32:cd:d9:24:af: bc:49:ef:de:a1:b1:57:d4:7d:f1:b3:8d:d3:71:2d: 6e:b9:02:35:b1:ff:b7:94:2c:47:e9:f4:71:7b:ce: 4b:c3:be:9c:4a:62:25:5f:bd:e2:71:f5:ff:35:0b: 23:19:10:4d:a1:8c:6f:b3:dc:d1:35:94:07:0d:21: 9f:55:6c:2d:cd:f0:be:c6:12:a9:34:3a:58:06:47: f6:d2:a9:fe:cd:50:c9:d7:a0:46:8c:d7:72:44:40: c3:3f:ee:8a:c2:ab:6c:ac:01:9d:59:13:2b:a0:ae: 8e:61:35:ca:4e:e2:32:48:2c:98:40:56:c6:cf:22: 87:a2:d1:6d:ed:0c:67:ea:72:5b:dd:7d:1f:ae:41: 10:49:49:58:9e:51:18:d5:e6:eb:e9:d8:cd:a2:02: ad:12:d3:b3:e1:a8:f4:ab:19:c8:b1:b9:a7:10:50: a1:67:cc:89:80:e3:5a:38:05:2d:b4:4e:6f:f7:67: 18:f7:fa:b2:48:4c:1d:c2:a4:f7:45:af:7f:cd:d5: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.112.0/20 IPv6: 2001:67c:3b4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52092 Signature Algorithm: sha256WithRSAEncryption 90:87:0b:05:c4:78:88:32:03:e8:f2:35:32:a5:37:d2:d3:f9: c1:a3:1d:c2:10:be:ef:bc:a9:b6:dc:d7:5e:1d:dc:28:4d:48: 17:1f:a4:bd:07:3c:e0:f5:eb:b1:30:bf:11:72:79:6b:81:45: cb:b3:a5:78:0b:4d:0d:2b:39:df:fd:ed:da:b2:06:85:c0:17: da:e7:31:3d:c4:fb:e4:69:f6:5c:ec:6b:eb:dd:09:8c:a2:85: 4b:14:4d:8d:6e:27:b4:88:ef:b7:52:c6:db:ef:95:b8:ef:9e: 93:62:90:fa:58:9c:76:02:a9:79:b2:3c:f8:a8:d3:9d:a4:54: 4e:eb:02:4f:7f:9b:97:3d:a9:1c:64:b0:c7:b6:00:b4:68:a9: c3:95:3f:bd:44:9e:04:6d:cb:45:d5:11:be:75:1e:01:4f:8e: c2:74:2d:b2:b8:69:4f:48:a4:48:4a:9a:0f:54:a0:0c:64:23: f8:b4:8e:8e:e5:90:64:c2:1a:fd:d6:3a:29:d4:77:6f:ee:ec: 40:ed:71:6b:8b:96:ad:45:50:a6:ee:1e:b9:34:ef:69:fc:df: cb:de:23:6f:3d:da:0e:af:da:40:69:00:32:1e:bd:f4:b9:67: ef:a5:cc:90:7a:54:14:c0:9f:1f:67:88:67:8c:4b:17:8d:7c: c5:f3:b7:bb -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt57MTXJOdeTfVhoXwOphpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQ4ZDViZjAxYjBlMjk1YmQwODg1ZmM1YzRkZjgyNzU0MzgyMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIWAXKaMPa8Q/QNYM/nLnU3fvA0Q iyZERvCoLDJMk2MmLRPMTvUUMpo37sjayu9lzXwBz29xMs3ZJK+8Se/eobFX1H3x s43TcS1uuQI1sf+3lCxH6fRxe85Lw76cSmIlX73icfX/NQsjGRBNoYxvs9zRNZQH DSGfVWwtzfC+xhKpNDpYBkf20qn+zVDJ16BGjNdyREDDP+6KwqtsrAGdWRMroK6O YTXKTuIySCyYQFbGzyKHotFt7Qxn6nJb3X0frkEQSUlYnlEY1ebr6djNogKtEtOz 4aj0qxnIsbmnEFChZ8yJgONaOAUttE5v92cY9/qySEwdwqT3Ra9/zdVdtwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFOJI1b8BsOKVvQiF/FxN+CdUOCLtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2ViZThl MS01MzliLTQwMDQtOGQ0Yy1hMDBiNTcxM2M2YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZWJlOGUx LTUzOWItNDAwNC04ZDRjLWEwMGI1NzEzYzZhYS8xLzRralZ2d0d3NHBXOUNJWDhY RTM0SjFRNEl1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQELpVwMA8EAgACMAkDBwAgAQZ8A7QwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMt8MA0GCSqGSIb3DQEBCwUAA4IBAQCQhwsFxHiI MgPo8jUypTfS0/nBox3CEL7vvKm23NdeHdwoTUgXH6S9Bzzg9euxML8RcnlrgUXL s6V4C00NKznf/e3asgaFwBfa5zE9xPvkafZc7Gvr3QmMooVLFE2Nbie0iO+3Usbb 75W4756TYpD6WJx2Aql5sjz4qNOdpFRO6wJPf5uXPakcZLDHtgC0aKnDlT+9RJ4E bctF1RG+dR4BT47CdC2yuGlPSKRISpoPVKAMZCP4tI6O5ZBkwhr91jop1Hdv7uxA 7XFri5atRVCm7h65NO9p/N/L3iNvPdoOr9pAaQAyHr30uWfvpcyQelQUwJ8fZ4hn jEsXjXzF87e7 -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:05 2026 by rpki-client