This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer File: 4sP8GYx3L1m47eUphWtS6heaTjg.cer (raw, json) Hash identifier: ZqsdGGljvFWL61vAxoj5RfGZZv9HdE5amh9Hk/a8J9U= Subject key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154A3AA2F4854A9BDDF5A51461E950 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39628 IP: 194.50.97.0/24 IP: 2001:67c:314::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4a:3a:a2:f4:85:4a:9b:dd:f5:a5:14:61:e9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:62:83:cd:34:3a:8c:5c:3d:46:ca:d2:68: 41:3a:85:9f:00:fc:03:17:87:fb:65:51:e3:4e:62: 23:bc:8b:7a:51:63:b5:4d:38:db:e5:dd:00:90:85: d8:19:62:b2:f3:c8:c3:a5:e5:0d:a8:04:20:96:b5: 4c:43:b7:9a:93:c2:e7:c0:46:3f:28:d9:af:14:6e: 87:00:7e:0b:c5:be:f1:b9:3d:b7:0f:8f:31:95:6a: aa:00:ae:4b:d4:b4:0d:c7:82:68:ad:48:96:2f:46: f6:7b:e4:4d:d7:97:74:2e:1b:f4:fa:b6:2b:95:63: 64:bd:5e:27:56:7e:35:8d:0f:43:d5:74:e7:9e:b6: 35:e2:01:6a:47:51:31:70:2e:5b:27:d3:dc:34:56: de:e3:21:59:c5:0c:6e:20:6e:64:c7:fc:0c:02:5d: a7:17:b8:8e:22:d7:ef:6e:89:8a:fc:91:41:e2:e4: f4:1d:ec:df:fc:08:36:0e:8e:f5:b9:3a:51:8d:7b: e7:dc:35:f0:be:22:15:74:63:60:73:9a:ce:2e:94: bf:29:98:38:7e:45:7e:f3:75:66:a2:6f:77:b4:8a: b6:70:f0:20:17:23:d2:f2:59:a4:e3:cb:3a:06:ea: c7:ad:03:d9:45:ba:7a:e9:9d:31:45:0d:3a:e9:42: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.97.0/24 IPv6: 2001:67c:314::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39628 Signature Algorithm: sha256WithRSAEncryption 3b:04:30:20:2c:3b:9d:27:86:a7:d8:33:51:67:59:26:ba:12: 0a:4c:0a:30:87:06:53:a5:32:bc:b3:63:ef:7b:b4:de:08:c8: ce:ff:a6:e7:27:25:ed:73:db:e6:02:ba:27:65:ac:e7:6e:52: 02:17:1f:ee:1c:a2:ac:b0:9e:d4:4c:c0:d7:2c:a9:d3:58:4a: fa:31:b1:3b:e3:50:7d:e4:37:b5:03:06:67:7d:55:17:60:fe: 16:5a:cc:8a:f0:89:0e:25:89:43:6f:c6:e7:d9:b5:84:56:af: f1:81:12:0c:03:9d:67:7c:d8:ce:d5:34:95:64:4f:15:aa:81: 5d:24:83:86:62:80:5a:ea:5a:d6:2e:b6:7b:3d:a3:aa:a0:fa: 3d:dd:04:19:90:8f:1c:3e:55:00:d1:6e:c0:0f:6e:a6:1d:9a: f4:ce:12:ec:4c:5f:a4:a6:5f:ba:24:87:35:c7:7f:31:f8:19: ab:b9:4f:3f:c6:90:60:b1:1c:f4:b7:e0:71:69:e5:cc:f5:dd: a6:e8:ee:dd:18:67:96:b8:0c:b2:30:c0:9f:df:9c:1f:40:82: eb:55:6a:94:91:2e:db:cc:77:fd:bf:b7:36:4c:22:45:22:2b: 74:a1:39:18:80:cd:ed:40:53:63:5e:0d:da:92:2e:c0:17:7f: c7:a8:46:22 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt/FUo6ovSFSpvd9aUUYelQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmMzZmMxOThjNzcyZjU5YjhlZGU1Mjk4NTZiNTJlYTE3OWE0ZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Vig800OoxcPUbK0mhBOoWfAPwD F4f7ZVHjTmIjvIt6UWO1TTjb5d0AkIXYGWKy88jDpeUNqAQglrVMQ7eak8LnwEY/ KNmvFG6HAH4Lxb7xuT23D48xlWqqAK5L1LQNx4JorUiWL0b2e+RN15d0Lhv0+rYr lWNkvV4nVn41jQ9D1XTnnrY14gFqR1ExcC5bJ9PcNFbe4yFZxQxuIG5kx/wMAl2n F7iOItfvbomK/JFB4uT0Hezf/Ag2Do71uTpRjXvn3DXwviIVdGNgc5rOLpS/KZg4 fkV+83Vmom93tIq2cPAgFyPS8lmk48s6BurHrQPZRbp66Z0xRQ066UL0qwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFOLD/BmMdy9ZuO3lKYVrUuoXmk44MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzY4M2Zm Yi02NWViLTQ5NzItOTk3YS01ZjI5YzlmNTQ5ZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvNjgzZmZi LTY1ZWItNDk3Mi05OTdhLTVmMjljOWY1NDllOC8xLzRzUDhHWXgzTDFtNDdlVXBo V3RTNmhlYVRqZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwjJhMA8EAgACMAkDBwAgAQZ8AxQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAJrMMA0GCSqGSIb3DQEBCwUAA4IBAQA7BDAgLDud J4an2DNRZ1kmuhIKTAowhwZTpTK8s2Pve7TeCMjO/6bnJyXtc9vmAronZaznblIC Fx/uHKKssJ7UTMDXLKnTWEr6MbE741B95De1AwZnfVUXYP4WWsyK8IkOJYlDb8bn 2bWEVq/xgRIMA51nfNjO1TSVZE8VqoFdJIOGYoBa6lrWLrZ7PaOqoPo93QQZkI8c PlUA0W7AD26mHZr0zhLsTF+kpl+6JIc1x38x+BmruU8/xpBgsRz0t+BxaeXM9d2m 6O7dGGeWuAyyMMCf35wfQILrVWqUkS7bzHf9v7c2TCJFIit0oTkYgM3tQFNjXg3a ki7AF3/HqEYi -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:59 2026 by rpki-client