This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer File: 4oqGzL9We9migv3fdfC39VQiItI.cer (raw, json) Hash identifier: yAIio7SemIWH341Yf3uWiG5Z8v2QE/p+4Tdp1+m8IOg= Subject key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5230AA4639E877CBEA1A2839FEA80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 38949 IP: 80.94.48.0/20 IP: 2a02:c80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:23:0a:a4:63:9e:87:7c:be:a1:a2:83:9f:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:f3:85:a7:6f:54:40:95:4d:2d:89:5a:7f: 02:d6:11:e5:43:52:3c:ff:e8:09:55:f8:0a:56:10: 54:46:e2:b6:83:dd:01:18:be:5c:e0:8d:7e:4b:de: 26:06:de:bb:e0:84:14:dd:ed:c2:df:70:e2:32:af: 9c:f3:c9:0b:fa:db:2c:b3:11:80:42:f9:8e:c1:88: 97:90:30:93:88:7f:c4:3e:e2:1e:ab:65:32:ff:94: fa:22:47:af:7b:e5:d2:cc:8b:a9:05:b3:18:1a:ea: bf:a0:f4:80:65:94:96:9b:0f:45:4a:bf:2e:fe:32: 96:37:7e:dd:e9:65:85:aa:c9:72:8e:98:71:cc:5a: 00:c6:59:ee:96:9e:c4:c1:ff:d0:44:bb:d8:ca:ac: b1:76:b1:99:3d:7a:c3:04:51:c5:fb:a2:ac:b0:27: 04:a9:57:c6:3b:ff:ea:3c:96:e2:ef:fb:97:58:da: 56:e8:cc:7f:c3:e3:f3:91:90:de:20:91:d6:eb:cd: 59:a1:36:ef:f8:74:8d:5f:e7:96:cb:22:de:26:b5: 23:6d:b4:51:55:ba:61:9b:21:eb:2f:a9:cf:a5:e6: 39:6a:25:9c:a0:ec:10:65:d7:1e:78:b6:1a:bc:8c: cc:51:3b:1d:1e:8a:54:27:6a:1f:a6:70:0b:1f:73: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.94.48.0/20 IPv6: 2a02:c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38949 Signature Algorithm: sha256WithRSAEncryption 82:0c:2e:97:40:04:e5:49:23:a7:e8:9a:d7:3a:36:2e:44:48: 8b:28:71:05:4e:ca:61:2f:c9:88:af:ce:50:6c:4c:80:4d:6b: fd:1d:09:ab:3f:d3:92:a9:c4:c8:5b:0d:21:5e:2a:e8:8b:3f: 2a:9e:9b:1b:fc:f0:b2:93:fe:f0:ee:de:12:cb:e4:59:8a:0c: 4c:28:68:59:10:12:cc:cb:93:67:21:96:52:23:71:ec:12:5c: 0f:73:48:80:6a:c3:15:e2:d8:e2:60:71:f3:0c:24:a1:5c:62: f3:bd:98:23:78:ee:d7:52:e7:2e:29:e9:a4:86:0d:6d:92:b0: 89:5c:76:a7:0d:4d:c9:82:6a:48:fb:6c:ed:af:27:93:19:cc: 88:93:0f:44:5e:0c:02:f8:87:f2:2b:78:09:b9:b5:8e:d0:87: 6c:56:f2:72:e0:c8:41:0d:11:a5:28:7a:f7:12:05:bf:2c:b5: 96:0f:e2:02:38:17:7a:a0:1c:5a:59:f3:f8:4f:0d:9c:90:b1: 50:5b:ed:3d:94:2d:60:20:f5:ea:65:ef:d0:81:2d:a3:86:d2: 9c:2e:b3:12:e6:29:2a:c5:8c:a7:0f:12:13:e0:9d:66:b4:ac: f1:5c:c0:74:88:9f:52:f9:58:47:3d:43:d8:8f:eb:4a:13:2e: 6a:e5:76:e5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pSMKpGOeh3y+oaKDn+qAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjhhODZjY2JmNTY3YmQ5YTI4MmZkZGY3NWYwYjdmNTU0MjIyMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcfzhadvVECVTS2JWn8C1hHlQ1I8 /+gJVfgKVhBURuK2g90BGL5c4I1+S94mBt674IQU3e3C33DiMq+c88kL+tsssxGA QvmOwYiXkDCTiH/EPuIeq2Uy/5T6Ikeve+XSzIupBbMYGuq/oPSAZZSWmw9FSr8u /jKWN37d6WWFqslyjphxzFoAxlnulp7Ewf/QRLvYyqyxdrGZPXrDBFHF+6KssCcE qVfGO//qPJbi7/uXWNpW6Mx/w+PzkZDeIJHW681ZoTbv+HSNX+eWyyLeJrUjbbRR VbphmyHrL6nPpeY5aiWcoOwQZdceeLYavIzMUTsdHopUJ2ofpnALH3OZ8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOKKhsy/VnvZooL933Xwt/VUIiLSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2M4OTAw Yy1mM2QyLTQ1N2MtYjM4Yi02ZDc2NTBjYTNkMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYzg5MDBj LWYzZDItNDU3Yy1iMzhiLTZkNzY1MGNhM2QwNC8xLzRvcUd6TDlXZTltaWd2M2Zk ZkMzOVZRaUl0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEUF4wMA0EAgACMAcDBQAqAgyAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCYJTANBgkqhkiG9w0BAQsFAAOCAQEAggwul0AE5Ukj p+ia1zo2LkRIiyhxBU7KYS/JiK/OUGxMgE1r/R0Jqz/TkqnEyFsNIV4q6Is/Kp6b G/zwspP+8O7eEsvkWYoMTChoWRASzMuTZyGWUiNx7BJcD3NIgGrDFeLY4mBx8wwk oVxi872YI3ju11LnLinppIYNbZKwiVx2pw1NyYJqSPts7a8nkxnMiJMPRF4MAviH 8it4Cbm1jtCHbFbycuDIQQ0RpSh69xIFvyy1lg/iAjgXeqAcWlnz+E8NnJCxUFvt PZQtYCD16mXv0IEto4bSnC6zEuYpKsWMpw8SE+CdZrSs8VzAdIifUvlYRz1D2I/r ShMuauV25Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:18 2026 by rpki-client