This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.cer (raw, json) Hash identifier: WgVOvfbG7guTeuHgEy6NOn+uWaE84yBoAKBayRXAQsk= Subject key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA332D399D0EAEB7BAE09F652E1889D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51435 IP: 91.217.147.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:32:d3:99:d0:ea:eb:7b:ae:09:f6:52:e1:88:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:75:be:45:cd:99:1a:9c:8f:11:8c:a5:f7: 75:1c:70:fe:2e:ad:bf:c5:07:1b:59:ee:b3:1b:00: 4d:55:87:df:d4:0d:c3:8d:fd:8b:bb:01:0e:4f:2a: 00:45:de:01:44:46:13:73:ac:2c:de:70:7c:87:61: 8f:2d:45:42:92:1a:a6:6a:cc:6c:ab:a3:cb:14:8b: b4:7d:18:c7:6a:b1:7b:fe:df:b0:10:bf:55:90:44: 58:13:df:36:93:93:b6:d8:4c:a2:3a:d8:54:db:cf: 81:4b:f4:0d:8f:71:7c:af:f4:0c:4c:c3:09:fb:82: 32:71:50:df:8a:68:1c:e4:9e:db:ee:4c:a2:13:5c: 82:4c:6a:ed:33:ea:28:98:68:d9:6c:87:dd:45:64: 72:78:61:d8:6f:fd:a8:48:81:a3:34:12:fc:56:1e: 64:97:bc:89:06:bf:74:c1:71:5a:dc:2f:ff:50:77: 0c:91:6b:63:a5:13:0f:b5:c7:ed:ab:e3:b8:ac:9c: f0:f7:14:2a:ba:c6:58:70:cd:5d:32:11:f1:ff:d8: bb:cc:2e:a8:85:95:57:51:dd:9e:83:a3:4a:e7:d2: db:c7:8f:e9:76:0b:f4:94:89:2f:2f:35:7c:56:9c: 6a:fd:a9:0c:0a:0f:99:cb:26:35:a0:47:c0:65:f3: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.147.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51435 Signature Algorithm: sha256WithRSAEncryption 8c:d0:58:46:0f:02:5f:6d:07:da:6d:b8:e5:cc:84:c6:02:4a: ef:f1:28:06:8b:d2:30:ae:66:cf:71:2d:61:42:87:b0:b6:9a: 35:4e:98:5d:09:c5:e2:e2:e5:45:cc:a0:05:8f:b0:18:f5:0d: e8:de:71:a5:ae:2c:2e:b4:f7:83:fe:19:50:7b:ff:12:f3:1c: f4:06:08:b7:67:36:7b:30:e2:e2:7b:ea:51:cb:0b:85:14:88: 83:e8:5d:0d:f2:e9:0a:9c:6e:b9:95:fe:f3:ca:d3:50:02:ca: 36:d4:db:bb:f0:21:65:36:c2:dc:76:2a:c9:a5:03:af:bd:dc: db:0e:fc:c4:d0:89:9f:02:cf:58:3a:ad:e4:aa:ae:5a:ef:94: 48:1f:af:42:8e:18:1f:a2:e1:69:f3:45:11:7f:25:e4:40:fe: 8e:5a:cc:a4:79:81:95:b8:99:b9:3d:1c:18:39:ed:f7:82:b2: 13:66:75:03:c8:71:dd:ec:94:f7:86:c8:de:a2:cc:9e:57:95: 66:40:ef:bd:d0:56:20:db:e8:98:fa:f1:2a:10:05:ba:40:29: d5:d3:35:90:3e:50:c0:1c:ad:7b:8d:69:80:ce:a7:2b:fd:cd: e9:a8:2b:6b:30:b6:1f:6c:e1:c8:8d:06:5b:c4:03:45:96:4d: 62:9d:1d:63 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7ozLTmdDq63uuCfZS4YidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmJiYzcwNjdmOGE3YzU3ZDY4NmQ2NzVlYjQ2OGU5OWI4NmJkNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/J1vkXNmRqcjxGMpfd1HHD+Lq2/ xQcbWe6zGwBNVYff1A3Djf2LuwEOTyoARd4BREYTc6ws3nB8h2GPLUVCkhqmasxs q6PLFIu0fRjHarF7/t+wEL9VkERYE982k5O22EyiOthU28+BS/QNj3F8r/QMTMMJ +4IycVDfimgc5J7b7kyiE1yCTGrtM+oomGjZbIfdRWRyeGHYb/2oSIGjNBL8Vh5k l7yJBr90wXFa3C//UHcMkWtjpRMPtcftq+O4rJzw9xQqusZYcM1dMhHx/9i7zC6o hZVXUd2eg6NK59Lbx4/pdgv0lIkvLzV8Vpxq/akMCg+ZyyY1oEfAZfOwnwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOK7xwZ/inxX1obWdetGjpm4a9YtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzJkYWM4 Yi03NmNkLTQwZjAtODU0ZS0xZGEyYWNjNzZlMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvMmRhYzhi LTc2Y2QtNDBmMC04NTRlLTFkYTJhY2M3NmUxMS8xLzRydkhCbi1LZkZmV2h0WjE2 MGFPbWJocjFpMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9mTMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDI6zANBgkqhkiG9w0BAQsFAAOCAQEAjNBYRg8CX20H2m245cyExgJK7/EoBovS MK5mz3EtYUKHsLaaNU6YXQnF4uLlRcygBY+wGPUN6N5xpa4sLrT3g/4ZUHv/EvMc 9AYIt2c2ezDi4nvqUcsLhRSIg+hdDfLpCpxuuZX+88rTUALKNtTbu/AhZTbC3HYq yaUDr73c2w78xNCJnwLPWDqt5KquWu+USB+vQo4YH6LhafNFEX8l5ED+jlrMpHmB lbiZuT0cGDnt94KyE2Z1A8hx3eyU94bI3qLMnleVZkDvvdBWINvomPrxKhAFukAp 1dM1kD5QwByte41pgM6nK/3N6agrazC2H2zhyI0GW8QDRZZNYp0dYw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:11 2026 by rpki-client