This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer File: 4mthhRZS_I_twBGm8i966ba-sKM.cer (raw, json) Hash identifier: EL5uwTyY07k/34SannC0Dx2yRurd6iM5h08BCTWU1Ac= Subject key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834CE6806DDCC4173802AFC77BC54F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212954 IP: 5.253.128.0/22 IP: 80.244.10.0/24 IP: 2a09:5640::/32 IP: 2a13:67c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ce:68:06:dd:cc:41:73:80:2a:fc:77:bc:54:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:d1:37:ed:2f:9e:0d:57:b4:c3:6e:41:81: 1a:a2:83:45:d5:e8:af:1d:96:c1:42:8e:5b:83:40: ba:3c:98:8d:5a:5d:10:21:7b:2c:d7:7b:14:e9:19: 9d:14:bf:d5:68:d2:45:71:4f:0f:7d:a2:b0:0e:bb: c9:86:42:d7:70:52:5b:08:50:85:b0:9e:a7:b0:98: 02:40:e5:1d:eb:d5:2c:f5:df:73:b6:d1:35:3f:f0: fb:3b:32:51:aa:a0:c4:17:c8:60:b5:58:9a:73:ba: 4a:84:b9:69:83:5f:de:58:66:da:60:e0:da:1a:dc: eb:5f:fb:a4:1e:8c:c5:5e:d3:ad:59:98:5b:ae:ca: 7c:95:1e:a2:5a:79:37:17:fc:59:ee:78:bc:9b:8d: ba:70:56:6e:48:ac:e2:84:ae:d7:48:87:48:e8:d5: 48:20:5f:b6:29:70:c1:c6:fb:ec:65:61:e0:38:3f: c9:e9:23:94:81:2d:08:da:81:b5:d0:2f:7a:23:b8: b6:eb:1d:85:87:3f:b3:37:b3:0f:b9:6c:1e:52:0b: 66:43:e8:fa:ce:64:ec:bb:2d:bd:46:89:ff:53:2f: 5f:0b:a9:bd:00:32:22:c0:0d:90:53:4c:ac:bd:4c: 94:da:6e:c6:bd:7b:8e:13:4c:57:b7:92:a4:bc:6c: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.128.0/22 80.244.10.0/24 IPv6: 2a09:5640::/32 2a13:67c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212954 Signature Algorithm: sha256WithRSAEncryption 53:e9:8b:00:40:bc:0e:8c:99:72:c1:2f:f6:c4:34:d3:8d:54: 08:f6:d8:49:8a:8c:65:a9:bd:f7:b0:7a:1d:8d:5a:6a:5d:1c: 44:49:28:03:1d:d9:66:fd:b9:4c:8b:5d:1c:56:32:fe:93:be: 3e:3f:a2:89:84:07:08:5b:77:a2:e4:7b:d9:7d:11:64:06:59: bb:ac:82:2e:ef:5d:a3:0c:ee:82:ba:be:de:01:62:d1:50:17: e5:73:35:2e:20:ef:ae:d5:46:7f:40:f1:ec:6e:30:23:b0:16: 77:3b:66:8c:f6:f2:db:e4:84:bc:53:bf:51:fa:09:d6:b9:31: ea:81:2b:5d:71:34:74:c2:c9:55:4d:a2:c3:42:fe:90:ca:bc: f8:ec:e3:75:48:72:16:1d:06:11:96:7b:70:b5:94:27:24:95: 3a:26:e4:8d:3b:e7:68:7f:1e:c9:2b:e1:01:d1:f4:d9:72:01: 13:d2:d8:53:a0:71:cb:14:ab:57:7f:1b:58:f7:7a:b1:fa:9b: 8e:81:98:af:e8:c4:78:27:f7:9c:00:72:7c:65:ff:b9:f5:61: 7a:ef:a1:d6:9b:04:25:24:2d:6d:11:36:86:2d:cb:54:d1:d3: 30:3e:dc:7d:02:da:93:95:93:ed:b2:63:34:21:0f:ac:db:82: c2:45:5a:5b -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt4NM5oBt3MQXOAKvx3vFT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjZiNjE4NTE2NTJmYzhmZWRjMDExYTZmMjJmN2FlOWI2YmViMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldzRN+0vng1XtMNuQYEaooNF1eiv HZbBQo5bg0C6PJiNWl0QIXss13sU6RmdFL/VaNJFcU8PfaKwDrvJhkLXcFJbCFCF sJ6nsJgCQOUd69Us9d9zttE1P/D7OzJRqqDEF8hgtViac7pKhLlpg1/eWGbaYODa GtzrX/ukHozFXtOtWZhbrsp8lR6iWnk3F/xZ7ni8m426cFZuSKzihK7XSIdI6NVI IF+2KXDBxvvsZWHgOD/J6SOUgS0I2oG10C96I7i26x2Fhz+zN7MPuWweUgtmQ+j6 zmTsuy29Ron/Uy9fC6m9ADIiwA2QU0ysvUyU2m7GvXuOE0xXt5KkvGxkLQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFOJrYYUWUvyP7cARpvIveum2vrCjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2Q3MDgz My02OGViLTQxMDAtOTEyMy05NGUxYWI1NzUwOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvZDcwODMz LTY4ZWItNDEwMC05MTIzLTk0ZTFhYjU3NTA5NC8xLzRtdGhoUlpTX0lfdHdCR204 aTk2NmJhLXNLTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCBf2AAwQAUPQKMBQEAgACMA4DBQAqCVZAAwUD KhNnwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDP9owDQYJKoZIhvcNAQELBQAD ggEBAFPpiwBAvA6MmXLBL/bENNONVAj22EmKjGWpvfeweh2NWmpdHERJKAMd2Wb9 uUyLXRxWMv6Tvj4/oomEBwhbd6Lke9l9EWQGWbusgi7vXaMM7oK6vt4BYtFQF+Vz NS4g767VRn9A8exuMCOwFnc7Zoz28tvkhLxTv1H6Cda5MeqBK11xNHTCyVVNosNC /pDKvPjs43VIchYdBhGWe3C1lCcklTom5I0752h/Hskr4QHR9NlyARPS2FOgccsU q1d/G1j3erH6m46BmK/oxHgn95wAcnxl/7n1YXrvodabBCUkLW0RNoYty1TR0zA+ 3H0C2pOVk+2yYzQhD6zbgsJFWls= -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:42 2026 by rpki-client