This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer File: 4kycUM9OLawF4fBDKCJOIKRgXXc.cer (raw, json) Hash identifier: 8ZnhXzLhSuja1Dr5o4JC1tVl3jVoAuXHNA8AUptLFPo= Subject key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC8A0B20618955B7774258A2F78E8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52140 IP: 46.255.216.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c8:a0:b2:06:18:95:5b:77:74:25:8a:2f:78:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:71:4f:e6:39:68:74:8f:01:1b:ac:99:dc:cb: 98:9d:2b:5c:8f:7f:5b:2c:73:9c:2a:55:56:c7:a5: 48:af:59:85:2c:a2:50:14:26:6b:9a:2b:fe:e5:b0: 5c:41:94:bf:d9:70:99:02:a1:d1:b7:50:17:d5:64: e7:2e:4c:31:11:f7:86:40:6e:2c:82:36:02:da:a6: af:69:ff:de:78:63:5d:57:4e:a6:45:6d:7d:f1:65: d4:46:d3:66:f1:da:98:d1:d2:17:b6:84:64:3e:ff: 93:66:42:bb:c1:77:72:78:59:61:6c:d9:eb:d1:ad: 54:fa:61:6f:7d:dd:1e:5c:16:14:44:ec:9e:64:ea: e2:b1:a7:35:0f:95:60:72:db:53:05:cc:90:3c:da: fc:d5:03:59:55:89:e4:5d:4e:c5:20:d0:f1:d4:02: ee:13:da:05:d3:b8:78:14:c9:b2:a5:8b:75:82:94: 75:54:02:86:05:14:6d:13:63:1b:44:82:94:b4:1e: 9f:31:f2:42:3b:df:c6:bd:e3:00:e2:ff:1f:10:36: f5:39:62:3c:96:24:8b:4f:f0:b2:fe:3e:f5:dd:61: 28:b4:70:1a:13:02:c6:6c:cf:9d:ad:fc:82:e7:8d: a8:2e:45:1f:15:75:c7:1c:06:74:d4:e7:41:fa:ba: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.216.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52140 Signature Algorithm: sha256WithRSAEncryption 24:1a:45:74:a0:0e:eb:5f:f9:05:0c:0d:57:e8:fa:3c:7d:78: 9a:c9:4e:d8:47:ca:18:2a:42:28:c4:81:5b:08:38:ba:b1:ec: bf:72:f1:21:91:dc:de:e6:05:50:94:29:2b:3c:ee:3b:03:69: 51:f1:b6:37:b4:db:50:02:57:81:1b:e4:d7:cc:7e:ae:4d:27: 29:be:50:0f:4b:b4:9b:b9:7d:59:df:73:19:d0:65:dd:70:60: 43:f0:d3:e7:74:7f:69:96:5b:fb:65:a6:58:73:c0:e4:6b:75: 7f:fe:1b:f5:00:34:79:b0:33:f5:0c:fe:11:c2:64:71:77:8a: 60:9d:d0:99:34:7f:fe:95:6e:9d:36:9a:47:7b:5a:47:2b:33: 24:f0:56:08:f0:a2:8c:a5:f9:2f:fd:c3:7b:96:db:b3:4c:88: 7d:bc:10:9d:06:6e:14:21:4e:14:01:c1:e0:b9:c5:17:42:5c: 90:c6:25:fb:fb:95:94:d9:43:41:7a:b4:43:31:ed:e6:d3:0c: b6:97:e9:c5:9a:ef:df:25:d0:45:2f:35:98:f7:ef:43:37:da: 0d:7d:3b:b1:79:7c:92:3d:4f:1a:59:d8:82:9f:46:a5:7a:2f: 7d:d4:09:1f:e9:1e:ca:b6:58:48:c5:90:64:55:ad:23:3a:18: a0:45:ea:4b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57MigsgYYlVt3dCWKL3joMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjRjOWM1MGNmNGUyZGFjMDVlMWYwNDMyODIyNGUyMGE0NjA1ZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nFP5jlodI8BG6yZ3MuYnStcj39b LHOcKlVWx6VIr1mFLKJQFCZrmiv+5bBcQZS/2XCZAqHRt1AX1WTnLkwxEfeGQG4s gjYC2qavaf/eeGNdV06mRW198WXURtNm8dqY0dIXtoRkPv+TZkK7wXdyeFlhbNnr 0a1U+mFvfd0eXBYUROyeZOrisac1D5VgcttTBcyQPNr81QNZVYnkXU7FINDx1ALu E9oF07h4FMmypYt1gpR1VAKGBRRtE2MbRIKUtB6fMfJCO9/GveMA4v8fEDb1OWI8 liSLT/Cy/j713WEotHAaEwLGbM+drfyC542oLkUfFXXHHAZ01OdB+rp31wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOJMnFDPTi2sBeHwQygiTiCkYF13MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzMxN2Nj MS02NGMyLTQ3MmUtOTE0Yi0wYmZiODY4ODQ0MDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMzE3Y2Mx LTY0YzItNDcyZS05MTRiLTBiZmI4Njg4NDQwNC8xLzRreWNVTTlPTGF3RjRmQkRL Q0pPSUtSZ1hYYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDLv/YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDLrDANBgkqhkiG9w0BAQsFAAOCAQEAJBpFdKAO61/5BQwNV+j6PH14mslO2EfK GCpCKMSBWwg4urHsv3LxIZHc3uYFUJQpKzzuOwNpUfG2N7TbUAJXgRvk18x+rk0n Kb5QD0u0m7l9Wd9zGdBl3XBgQ/DT53R/aZZb+2WmWHPA5Gt1f/4b9QA0ebAz9Qz+ EcJkcXeKYJ3QmTR//pVunTaaR3taRyszJPBWCPCijKX5L/3De5bbs0yIfbwQnQZu FCFOFAHB4LnFF0JckMYl+/uVlNlDQXq0QzHt5tMMtpfpxZrv3yXQRS81mPfvQzfa DX07sXl8kj1PGlnYgp9GpXovfdQJH+keyrZYSMWQZFWtIzoYoEXqSw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:17 2026 by rpki-client