This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.cer (raw, json) Hash identifier: jid75gnvEAg3cgBT7pweURvYAvr0lvv2mnDhaBv1sJA= Subject key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36C29EA5F5D92CC108BB3EF1001412 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206280 IP: 185.190.252.0/22 IP: 2a0a:12c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c2:9e:a5:f5:d9:2c:c1:08:bb:3e:f1:00:14:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:07:91:27:73:6c:35:9b:99:c6:6c:3f:7d:94: 41:b8:d6:0e:4c:21:41:22:c7:a8:0f:c7:e1:26:6f: 65:55:4d:ec:32:14:ab:35:30:51:4b:02:ee:11:1d: 92:a2:0b:fd:58:41:2f:84:cf:84:8f:ab:6b:68:ec: 85:26:1c:eb:fe:71:6d:78:c5:b1:23:ac:73:7c:1e: 12:8a:f0:54:e2:ee:72:98:5e:c9:39:b5:95:80:e1: 39:de:99:2b:0b:72:fe:ff:72:ca:e8:43:eb:0b:bb: 76:55:34:35:01:33:ec:f8:a9:ef:5c:aa:82:84:f0: b0:ad:cf:a4:ab:9a:cc:2c:bf:26:40:6b:71:48:68: 90:58:63:a5:dc:3b:fa:60:d1:97:26:e8:ce:ca:58: 58:25:12:50:35:68:50:76:67:ec:ce:25:92:c5:f4: 9b:89:92:1a:52:da:33:3b:56:e9:9d:2d:43:50:f6: 4f:58:11:c5:29:f4:65:66:9b:ac:98:26:0f:c2:c4: 66:23:5c:84:3a:cd:61:6e:f4:9e:aa:89:58:71:58: b4:dd:ad:48:f4:de:5c:a0:26:d8:90:34:4f:64:92: 33:03:e2:c5:fd:62:6a:b4:da:69:b2:4b:f7:cc:51: d1:4e:48:b6:9e:0d:75:07:97:f6:66:6f:d1:0e:89: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.252.0/22 IPv6: 2a0a:12c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206280 Signature Algorithm: sha256WithRSAEncryption 0c:02:f9:ed:86:97:20:f6:f1:c2:b7:6f:7d:ee:6b:1d:4d:df: 20:0c:e4:db:fa:8c:99:df:39:97:bd:90:e4:6b:a5:dd:32:5c: e5:7a:48:b0:e8:18:e3:9d:40:04:b2:08:d6:f6:b0:5b:51:67: 47:5d:64:e7:7f:cf:04:76:8e:b5:c3:38:a9:1e:8c:8e:6a:cd: 9b:8d:5e:38:f1:25:21:39:83:83:e6:d4:0f:d3:c1:ed:80:2d: 48:92:8c:c3:50:38:f8:7d:66:44:9c:bb:57:78:04:5f:e6:42: 84:00:f0:60:e4:00:73:51:56:c9:76:15:9a:38:74:0b:6b:2c: 08:3f:92:04:0b:95:b3:3e:c6:f3:69:a8:b2:45:dc:c8:d5:fe: 37:cd:bf:c3:cb:0d:e3:58:cc:16:15:17:ba:7c:58:cb:f2:35: 7f:ff:4d:4d:d5:29:4e:bf:79:0e:c9:1f:e2:80:e5:d1:f0:ab: 9a:b7:b1:db:f1:5f:47:20:b6:9e:aa:0b:b7:f3:da:c6:ec:1b: f3:26:78:5e:4f:71:19:43:d1:ca:85:a5:8c:b0:a5:ef:8c:06: b7:38:4a:7a:99:f2:18:c3:df:85:3d:c2:61:72:52:a4:e8:d6: 44:51:65:9f:69:fc:40:c1:2a:78:2b:3d:6c:e9:8d:ff:1e:d0: 7f:6d:cc:5a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NsKepfXZLMEIuz7xABQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjRhMDNmODBmNjJkYTg2NjM1MmUxOTkwOTk3ZjFkNDZjZWIyZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3weRJ3NsNZuZxmw/fZRBuNYOTCFB IseoD8fhJm9lVU3sMhSrNTBRSwLuER2Sogv9WEEvhM+Ej6traOyFJhzr/nFteMWx I6xzfB4SivBU4u5ymF7JObWVgOE53pkrC3L+/3LK6EPrC7t2VTQ1ATPs+KnvXKqC hPCwrc+kq5rMLL8mQGtxSGiQWGOl3Dv6YNGXJujOylhYJRJQNWhQdmfsziWSxfSb iZIaUtozO1bpnS1DUPZPWBHFKfRlZpusmCYPwsRmI1yEOs1hbvSeqolYcVi03a1I 9N5coCbYkDRPZJIzA+LF/WJqtNppskv3zFHRTki2ng11B5f2Zm/RDol0LwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOJKA/gPYtqGY1LhmQmX8dRs6y+wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzU0MGM1 Zi1hMmEyLTQ0ZTQtOTI4Ny00MWI1NDUwMGZkY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNTQwYzVm LWEyYTItNDRlNC05Mjg3LTQxYjU0NTAwZmRjZi8xLzRrb0QtQTlpMm9aalV1R1pD WmZ4MUd6ckw3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCub78MA0EAgACMAcDBQAqChLAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMlyDANBgkqhkiG9w0BAQsFAAOCAQEADAL57YaXIPbx wrdvfe5rHU3fIAzk2/qMmd85l72Q5Gul3TJc5XpIsOgY451ABLII1vawW1FnR11k 53/PBHaOtcM4qR6MjmrNm41eOPElITmDg+bUD9PB7YAtSJKMw1A4+H1mRJy7V3gE X+ZChADwYOQAc1FWyXYVmjh0C2ssCD+SBAuVsz7G82moskXcyNX+N82/w8sN41jM FhUXunxYy/I1f/9NTdUpTr95Dskf4oDl0fCrmrex2/FfRyC2nqoLt/Paxuwb8yZ4 Xk9xGUPRyoWljLCl74wGtzhKepnyGMPfhT3CYXJSpOjWRFFln2n8QMEqeCs9bOmN /x7Qf23MWg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:11 2026 by rpki-client