This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer File: 4trBUISDJfD3JYcGT4q6N8X_N5A.cer (raw, json) Hash identifier: 9CnvI37Pw8L2/2bRMgB04ZESKNPCKwJtrlffsgkmUi0= Subject key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15E8D5168411BF2ED7F87FEAD7ACDD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209270 IP: 45.67.28.0/22 IP: 2a09:6cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e8:d5:16:84:11:bf:2e:d7:f8:7f:ea:d7:ac:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2dac150848325f0f72587064f8aba37c5ff3790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f5:88:ca:34:cf:7c:e7:f8:c9:88:1f:38:71: c1:8e:25:d8:44:a1:90:96:0f:e7:05:ce:15:6d:dd: 22:37:f6:42:19:d7:91:85:61:15:97:4c:ea:21:c8: a9:03:51:90:79:ec:3a:0f:74:93:10:41:e6:f6:02: 3c:00:26:b9:2d:e7:a2:ac:81:ae:05:9e:ef:b9:89: 74:84:22:11:1e:d8:43:47:81:3c:b2:db:a1:4c:53: 0b:79:bd:5a:08:6b:38:ec:e1:6f:3f:cd:5d:ed:39: 44:81:4d:62:ea:cf:84:c7:83:1e:53:ba:63:24:83: 69:30:16:e2:60:52:a9:7d:26:35:77:93:b3:07:6d: c1:a9:95:9c:3b:e4:3b:c2:62:25:0e:c6:c4:12:41: 7d:c4:79:2d:ff:dd:93:3e:0a:f5:5a:73:9f:b7:c2: 2f:83:43:6a:1c:b5:12:b1:3f:09:9f:ce:73:39:a9: d0:ec:a4:83:b5:06:82:81:76:71:7e:42:4e:98:5a: 55:ca:9b:de:ad:fa:96:d2:e7:1f:9b:ba:65:d2:ab: dd:29:ed:2f:bb:aa:f6:09:41:b8:0e:98:37:23:b0: 5b:13:0e:bc:32:d4:15:0b:9f:35:65:28:50:0a:7d: 23:3f:52:98:fd:e5:e2:f4:a8:2f:fb:c2:0e:66:9d: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.28.0/22 IPv6: 2a09:6cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209270 Signature Algorithm: sha256WithRSAEncryption 88:fc:a4:28:c7:35:4b:b3:08:7a:6c:01:80:83:2c:0e:de:0a: b5:3f:84:56:69:d0:9f:f4:0e:36:d7:30:40:ce:c4:ca:bb:15: ce:46:5d:27:46:89:97:83:e8:ee:28:1c:59:0d:40:2b:f6:56: 28:9d:d3:82:50:c6:2a:44:9a:37:cd:91:03:87:21:dd:6f:a5: 2c:02:e0:73:76:63:ca:a5:fb:f3:ff:05:28:08:a8:8f:f1:21: a8:a6:a4:8d:d5:3b:a4:7f:49:5a:e5:53:9f:5d:4f:39:d1:5d: 19:8a:c0:e5:a8:2f:8a:09:21:29:fb:e5:ec:4f:56:bc:d9:83: e6:9a:69:68:30:2c:ca:85:90:51:07:4f:be:ed:19:79:be:ae: 7a:9c:96:2e:2d:2d:7c:33:35:04:d2:53:e1:38:dd:97:1d:be: 50:a6:f8:20:8d:39:1b:07:ff:07:1c:7c:bd:1f:dc:6f:9a:a1: 08:66:59:28:47:48:98:45:34:80:20:3b:cf:4d:57:37:a0:59: f5:3c:98:c2:89:a4:4c:c4:68:48:35:c9:3d:78:f6:6a:4f:c8: 40:bb:f5:4a:67:d6:d8:a8:de:1e:c8:38:76:aa:dd:33:4b:0e: 4f:98:ae:e4:90:66:f5:17:7e:4a:fa:7a:dc:ed:01:3b:dc:4c: 50:8c:37:88 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FejVFoQRvy7X+H/q16zdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmRhYzE1MDg0ODMyNWYwZjcyNTg3MDY0ZjhhYmEzN2M1ZmYzNzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPWIyjTPfOf4yYgfOHHBjiXYRKGQ lg/nBc4Vbd0iN/ZCGdeRhWEVl0zqIcipA1GQeew6D3STEEHm9gI8ACa5LeeirIGu BZ7vuYl0hCIRHthDR4E8stuhTFMLeb1aCGs47OFvP81d7TlEgU1i6s+Ex4MeU7pj JINpMBbiYFKpfSY1d5OzB23BqZWcO+Q7wmIlDsbEEkF9xHkt/92TPgr1WnOft8Iv g0NqHLUSsT8Jn85zOanQ7KSDtQaCgXZxfkJOmFpVypverfqW0ucfm7pl0qvdKe0v u6r2CUG4Dpg3I7BbEw68MtQVC581ZShQCn0jP1KY/eXi9Kgv+8IOZp1s/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOLawVCEgyXw9yWHBk+KujfF/zeQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2YwOTc1 OS02Y2ViLTQ3NTQtYmJlNS0zYjllM2M1M2JhYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvZjA5NzU5 LTZjZWItNDc1NC1iYmU1LTNiOWUzYzUzYmFiMC8xLzR0ckJVSVNESmZEM0pZY0dU NHE2TjhYX041QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLUMcMA0EAgACMAcDBQMqCWzAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxdjANBgkqhkiG9w0BAQsFAAOCAQEAiPykKMc1S7MI emwBgIMsDt4KtT+EVmnQn/QONtcwQM7EyrsVzkZdJ0aJl4Po7igcWQ1AK/ZWKJ3T glDGKkSaN82RA4ch3W+lLALgc3ZjyqX78/8FKAioj/EhqKakjdU7pH9JWuVTn11P OdFdGYrA5agvigkhKfvl7E9WvNmD5pppaDAsyoWQUQdPvu0Zeb6uepyWLi0tfDM1 BNJT4Tjdlx2+UKb4II05Gwf/Bxx8vR/cb5qhCGZZKEdImEU0gCA7z01XN6BZ9TyY womkTMRoSDXJPXj2ak/IQLv1SmfW2KjeHsg4dqrdM0sOT5iu5JBm9Rd+Svp63O0B O9xMUIw3iA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:50 2026 by rpki-client