This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer File: 4u1kMJX_plfeBc7spdILJlwbf1I.cer (raw, json) Hash identifier: v3UHy6P63y2/pATRTYXFd5PxCH/qzNDqwEcvDUalX3k= Subject key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8911AE28D04729B8D131C0AEF2BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.255.156.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:89:11:ae:28:d0:47:29:b8:d1:31:c0:ae:f2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:17:bb:2e:f7:aa:df:00:c7:39:7b:50:0f: 1f:ab:1d:9f:a8:79:31:11:fd:5b:e3:9d:52:ba:3d: ed:3c:cc:a5:f7:41:71:4e:34:3d:c8:e7:42:9d:37: 22:ca:53:eb:ab:79:31:40:8a:f2:8f:42:45:71:ef: 3b:8a:0d:0c:b9:e3:d5:79:7c:3a:da:82:f6:0f:05: 9b:4f:ab:cc:42:36:e2:5d:c8:6c:2e:69:88:a1:38: 49:9d:f4:9d:67:57:fa:46:f4:15:cf:92:cc:cb:6c: 49:ee:1e:39:b1:e2:99:bb:54:61:b1:45:63:7c:30: 4d:77:bd:69:f4:f1:e5:ca:25:79:7b:36:bb:34:c0: 77:70:9a:5b:d5:7a:78:04:f9:71:be:5f:01:42:42: 17:f9:4c:09:ed:e8:2d:a5:14:3f:eb:29:a6:89:41: c3:2d:47:db:b0:21:6f:48:a4:fa:db:da:cc:48:61: a9:23:0e:28:8b:a5:0d:d1:4d:88:e1:0d:17:cf:d6: 93:49:f3:64:d5:46:f4:48:61:d8:32:63:19:77:c8: 16:59:0c:6b:4e:61:a6:a9:e2:15:b0:24:ed:8e:86: 3c:0e:fe:27:1f:19:67:35:9a:16:4a:e5:46:9d:49: da:dc:6a:e2:94:37:7b:b8:bf:c3:b5:d2:b2:bd:b4: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.156.0/22 Signature Algorithm: sha256WithRSAEncryption 96:e4:fa:9e:c7:27:fd:4b:49:91:d1:c9:4d:0f:49:b5:15:37: 62:7c:85:6e:5c:48:b9:25:ae:7d:69:bd:f1:7c:b4:75:e9:70: 25:b9:cb:53:a3:ac:7e:82:14:d0:13:80:2a:84:2f:43:4c:4c: 3d:4d:18:24:1a:b9:15:e9:5c:cf:cc:25:54:ca:1a:5a:aa:18: 47:8d:30:e1:1e:d5:2e:f2:84:39:4f:f1:49:ec:64:19:91:f8: f9:1c:00:13:57:28:62:57:a4:08:fa:4e:da:48:cd:8d:17:bb: dd:cd:64:35:f5:d4:a6:81:82:97:8d:ab:c4:41:09:b5:dc:2b: 57:f9:e2:11:ae:e0:8c:8d:04:6e:90:3f:5b:7b:ab:37:f2:b9: fd:30:12:a0:e7:79:bd:58:cf:07:32:3e:05:61:6a:dc:f4:9b: 2d:e1:bd:55:6f:ec:7d:4a:c5:4b:3a:dd:21:3c:be:41:2b:6b: 3b:21:06:86:2d:ba:ea:b5:61:ff:af:5e:53:53:9c:b5:61:dc: 90:30:1c:6e:4f:49:56:b1:d5:3f:29:d6:4f:a2:f8:b1:6f:7c: dd:03:53:43:d3:0c:97:43:3f:b3:9a:00:2e:f0:30:76:59:ad: df:25:96:39:75:6d:47:32:1c:8a:2e:f0:0c:b6:1b:1d:b6:85: b2:07:f5:fe -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WokRrijQRym40THArvK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmVkNjQzMDk1ZmZhNjU3ZGUwNWNlZWNhNWQyMGIyNjVjMWI3ZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8IXuy73qt8Axzl7UA8fqx2fqHkx Ef1b451Suj3tPMyl90FxTjQ9yOdCnTciylPrq3kxQIryj0JFce87ig0MuePVeXw6 2oL2DwWbT6vMQjbiXchsLmmIoThJnfSdZ1f6RvQVz5LMy2xJ7h45seKZu1RhsUVj fDBNd71p9PHlyiV5eza7NMB3cJpb1Xp4BPlxvl8BQkIX+UwJ7egtpRQ/6ymmiUHD LUfbsCFvSKT629rMSGGpIw4oi6UN0U2I4Q0Xz9aTSfNk1Ub0SGHYMmMZd8gWWQxr TmGmqeIVsCTtjoY8Dv4nHxlnNZoWSuVGnUna3GrilDd7uL/DtdKyvbSh4wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOLtZDCV/6ZX3gXO7KXSCyZcG39SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2L2VlZTZm NC01NDhlLTRjZWYtOGZhNC05M2IwMjBmZThmZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvZWVlNmY0 LTU0OGUtNGNlZi04ZmE0LTkzYjAyMGZlOGZmMS8xLzR1MWtNSlhfcGxmZUJjN3Nw ZElMSmx3YmYxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuf+cMA0GCSqGSIb3DQEBCwUAA4IBAQCW5Pqe xyf9S0mR0clND0m1FTdifIVuXEi5Ja59ab3xfLR16XAluctTo6x+ghTQE4AqhC9D TEw9TRgkGrkV6VzPzCVUyhpaqhhHjTDhHtUu8oQ5T/FJ7GQZkfj5HAATVyhiV6QI +k7aSM2NF7vdzWQ19dSmgYKXjavEQQm13CtX+eIRruCMjQRukD9be6s38rn9MBKg 53m9WM8HMj4FYWrc9Jst4b1Vb+x9SsVLOt0hPL5BK2s7IQaGLbrqtWH/r15TU5y1 YdyQMBxuT0lWsdU/KdZPovixb3zdA1ND0wyXQz+zmgAu8DB2Wa3fJZY5dW1HMhyK LvAMthsdtoWyB/X+ -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:12 2026 by rpki-client