This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.cer (raw, json) Hash identifier: rs6VLwe7kgVQAVhsLHQVdZSOGdks47E25s+Pgp7pk88= Subject key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D10AE81B53AB755D4141412DA2E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.203.220.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d1:0a:e8:1b:53:ab:75:5d:41:41:41:2d:a2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:f4:2b:24:1d:ca:36:f8:58:89:ad:23:7f: 6c:45:3c:6d:0f:b5:7e:1a:91:d3:66:5c:0f:e9:32: 1d:8b:24:6c:50:5a:71:01:4e:be:5f:b9:6b:7c:ee: d2:97:c3:cf:9a:5d:0b:85:5f:49:b9:a8:8e:ae:52: b7:b7:35:cb:80:10:00:87:9c:98:dc:bf:a2:43:04: 92:1f:29:3e:c0:84:40:2e:06:94:3f:8a:d6:42:2d: d1:ff:1d:43:a1:9f:10:b9:00:0f:26:68:7e:3f:b1: b6:3c:57:96:e0:e5:d2:8d:9d:68:75:e1:80:58:2d: e9:01:dd:23:7c:b2:da:85:d3:0f:a5:e8:0d:0b:5a: cc:00:17:39:ff:c4:2b:d3:4c:fd:dd:57:dc:ce:68: 46:74:80:91:27:2c:bd:de:b2:eb:a4:d2:79:47:4c: 2d:d1:7f:1a:27:63:b6:40:96:db:f8:04:da:b4:1f: 26:13:8f:28:b7:77:cd:fe:01:c2:1d:56:7d:2a:dc: 92:e3:ff:5d:9d:a9:e0:58:9b:81:3c:a9:79:61:63: ea:60:26:c9:4c:d2:bf:ee:06:16:a3:ff:da:92:af: 31:de:27:fc:d0:00:d9:3f:ac:18:7b:f5:b4:15:ab: 07:4f:ac:9d:17:c4:d6:5c:f7:f2:3a:68:65:69:2f: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.220.0/23 Signature Algorithm: sha256WithRSAEncryption 27:50:13:01:6d:ec:06:57:7d:62:7e:1b:af:5c:89:bc:e6:6f: e5:54:0b:fd:2d:6a:85:b7:ac:a3:9a:ce:39:99:52:0e:3f:a9: 93:53:23:02:14:8d:44:dd:fd:c9:48:70:77:15:7a:77:66:58: 6f:59:19:86:92:8e:7a:cb:b4:91:2b:44:55:9f:81:6f:6a:95: f3:4f:bb:02:fe:d0:2c:86:29:88:fa:7a:d0:ce:ea:11:c5:8c: f5:67:9f:ce:fa:1c:2e:9c:4a:2f:01:10:a9:6d:0f:b6:a3:43: b4:59:bc:33:a0:2b:3b:d8:2c:50:2b:a8:19:ff:88:20:25:a0: 39:8e:c3:ee:13:8c:4a:5a:2b:cf:95:91:4e:45:4b:f5:6c:0d: 5b:69:43:de:ff:ff:16:22:67:5b:8f:e1:77:31:8b:b5:6a:6e: b5:80:23:39:c4:0b:4f:bb:ef:e1:4f:10:ac:c3:6d:fd:6c:d7: dd:38:fb:6c:7d:79:48:34:60:4b:43:3d:fd:4f:a0:d6:62:00: 36:d0:53:cd:93:0b:d1:dd:97:ae:b3:e0:05:3d:db:8f:32:bd: 29:8e:f2:50:bc:d8:5f:1a:0e:c6:7a:97:72:e6:db:26:01:10: 63:e2:40:09:aa:99:0f:7a:c8:c5:c5:e0:1e:51:97:87:08:e4: 2b:8c:1f:eb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FdEK6BtTq3VdQUFBLaLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmQxOTU2MTRlZWU0YTJkYmI1MWY1YjIxZTY5ZDE2YzRlMTQ0MWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHT0KyQdyjb4WImtI39sRTxtD7V+ GpHTZlwP6TIdiyRsUFpxAU6+X7lrfO7Sl8PPml0LhV9JuaiOrlK3tzXLgBAAh5yY 3L+iQwSSHyk+wIRALgaUP4rWQi3R/x1DoZ8QuQAPJmh+P7G2PFeW4OXSjZ1odeGA WC3pAd0jfLLahdMPpegNC1rMABc5/8Qr00z93VfczmhGdICRJyy93rLrpNJ5R0wt 0X8aJ2O2QJbb+ATatB8mE48ot3fN/gHCHVZ9KtyS4/9dnangWJuBPKl5YWPqYCbJ TNK/7gYWo//akq8x3if80ADZP6wYe/W0FasHT6ydF8TWXPfyOmhlaS+elwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOLRlWFO7kotu1H1sh5p0WxOFEGvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2NlYjRj Yi0yZWE3LTQyZDAtYmIyYS01ZGFjNjM3ODQwNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvY2ViNGNi LTJlYTctNDJkMC1iYjJhLTVkYWM2Mzc4NDA1OC8xLzR0R1ZZVTd1U2kyN1VmV3lI bW5SYkU0VVFhOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwcvcMA0GCSqGSIb3DQEBCwUAA4IBAQAnUBMB bewGV31ifhuvXIm85m/lVAv9LWqFt6yjms45mVIOP6mTUyMCFI1E3f3JSHB3FXp3 ZlhvWRmGko56y7SRK0RVn4FvapXzT7sC/tAshimI+nrQzuoRxYz1Z5/O+hwunEov ARCpbQ+2o0O0WbwzoCs72CxQK6gZ/4ggJaA5jsPuE4xKWivPlZFORUv1bA1baUPe //8WImdbj+F3MYu1am61gCM5xAtPu+/hTxCsw239bNfdOPtsfXlINGBLQz39T6DW YgA20FPNkwvR3Zeus+AFPduPMr0pjvJQvNhfGg7Gepdy5tsmARBj4kAJqpkPesjF xeAeUZeHCOQrjB/r -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:19 2026 by rpki-client