This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer File: 4sWGEhDcOL2660d9bacZZkqEprw.cer (raw, json) Hash identifier: h+rkXx8/x3AdQk4hcs9R0t/88UGe37DEcL4MubHpvuE= Subject key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6BCD7D5FA88031DF60C77DE87299E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197772 IP: 91.226.176.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bc:d7:d5:fa:88:03:1d:f6:0c:77:de:87:29:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:67:41:4f:60:59:86:46:18:1d:67:3c:e6: 4a:1d:47:11:a3:03:07:33:8e:67:a7:ed:bb:0f:47: 57:0f:9e:48:8c:16:6b:3d:41:d5:7d:d6:af:6f:f9: 0f:10:14:37:e8:88:0e:fc:c2:95:b5:84:b5:a6:7d: 07:80:e9:81:bd:a8:3f:31:b8:62:6d:f9:dc:9c:37: 27:2e:b4:86:67:ef:63:52:8c:e2:02:b5:0a:8b:93: fd:e2:22:e0:d3:29:53:5d:ef:49:58:72:31:e1:e0: 89:76:20:12:21:ae:c9:5b:c7:5c:03:44:87:f0:d2: 43:52:b3:1c:f2:c9:0f:bc:27:09:be:ec:7e:28:22: 9d:af:53:01:f6:d6:9f:27:d1:d4:e8:9e:af:38:21: f9:82:bd:2e:8d:62:55:b2:f8:d4:ba:1d:7c:09:3a: 40:99:e3:9e:ce:77:51:37:a2:cd:86:52:73:ab:71: 31:df:f7:4f:1f:a5:d1:78:50:74:90:01:67:ad:33: 03:e2:62:54:9a:b1:b2:99:2f:f6:92:4b:65:84:56: a3:76:25:c1:98:82:6d:e8:14:0c:9a:99:2f:62:17: 9d:3c:2e:a0:66:3c:a6:4b:89:64:7b:ea:82:e1:06: 59:4f:3c:be:76:9f:8e:2c:1b:8a:af:54:ea:e8:fe: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.176.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197772 Signature Algorithm: sha256WithRSAEncryption 7a:84:a6:3b:12:e5:60:a8:46:86:8c:3f:8a:82:34:7d:6c:24: 58:95:d3:52:ad:64:ba:d8:4a:65:53:ea:c2:2e:e4:55:c2:27: 92:e5:1f:20:ea:74:10:55:81:50:81:1e:03:24:15:d0:2a:18: bb:12:3c:b5:9e:86:ea:7a:e0:e0:59:75:f5:60:29:8d:0c:d6: 23:4b:be:0b:13:31:ce:c6:16:bf:85:3d:ea:7e:70:03:50:fc: c0:c9:fc:b7:a9:b0:f1:e6:44:88:6f:f7:e5:23:2b:f7:e1:92: db:25:2c:d5:7f:51:60:2f:25:93:b0:0c:41:c1:3d:a9:9e:45: 4d:16:9b:95:0e:f5:42:8f:d5:45:6a:d5:0d:00:79:26:1a:25: 80:b9:b9:5c:f7:d2:70:05:2f:5c:4f:69:81:89:04:58:10:2a: 6e:3a:a4:41:5a:84:11:e5:44:94:2d:87:d4:4b:90:01:d3:9a: 81:dc:9f:c0:25:0f:d8:b6:87:25:1c:51:67:b7:85:55:0a:ea: 28:71:9e:9f:01:bf:71:4a:57:ec:36:02:69:01:35:f5:b5:b7: b0:56:ea:b6:9e:d6:d2:88:1c:57:01:de:31:99:61:a5:7e:da: 14:1a:ca:7c:35:f7:8b:09:11:dd:6c:6e:88:01:a4:9c:34:39: 76:ef:49:45 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xrzX1fqIAx32DHfehymeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmM1ODYxMjEwZGMzOGJkYmFlYjQ3N2Q2ZGE3MTk2NjRhODRhNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMFnQU9gWYZGGB1nPOZKHUcRowMH M45np+27D0dXD55IjBZrPUHVfdavb/kPEBQ36IgO/MKVtYS1pn0HgOmBvag/Mbhi bfncnDcnLrSGZ+9jUoziArUKi5P94iLg0ylTXe9JWHIx4eCJdiASIa7JW8dcA0SH 8NJDUrMc8skPvCcJvux+KCKdr1MB9tafJ9HU6J6vOCH5gr0ujWJVsvjUuh18CTpA meOezndRN6LNhlJzq3Ex3/dPH6XReFB0kAFnrTMD4mJUmrGymS/2kktlhFajdiXB mIJt6BQMmpkvYhedPC6gZjymS4lke+qC4QZZTzy+dp+OLBuKr1Tq6P6yEQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOLFhhIQ3Di9uutHfW2nGWZKhKa8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2YyZGIw OC1jODQ1LTQxYWItYTA4YS0zMzc1NjE3ZDRlZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvZjJkYjA4 LWM4NDUtNDFhYi1hMDhhLTMzNzU2MTdkNGVmZC8xLzRzV0dFaERjT0wyNjYwZDli YWNaWmtxRXBydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+KwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMEjDANBgkqhkiG9w0BAQsFAAOCAQEAeoSmOxLlYKhGhow/ioI0fWwkWJXTUq1k uthKZVPqwi7kVcInkuUfIOp0EFWBUIEeAyQV0CoYuxI8tZ6G6nrg4Fl19WApjQzW I0u+CxMxzsYWv4U96n5wA1D8wMn8t6mw8eZEiG/35SMr9+GS2yUs1X9RYC8lk7AM QcE9qZ5FTRablQ71Qo/VRWrVDQB5JholgLm5XPfScAUvXE9pgYkEWBAqbjqkQVqE EeVElC2H1EuQAdOagdyfwCUP2LaHJRxRZ7eFVQrqKHGenwG/cUpX7DYCaQE19bW3 sFbqtp7W0ogcVwHeMZlhpX7aFBrKfDX3iwkR3WxuiAGknDQ5du9JRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:07 2026 by rpki-client