This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.cer (raw, json) Hash identifier: G0Quspy+kbYz9tNbVE/6drgExM92y7rDY5G+CzwXlY8= Subject key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB4A21353F344BA3D158792A17D99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60056 IP: 185.57.244.0/22 IP: 2a02:5f20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b4:a2:13:53:f3:44:ba:3d:15:87:92:a1:7d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:b6:35:2c:19:12:c1:aa:4b:6d:cf:44:28: bf:4b:67:43:02:aa:c0:a5:78:24:b5:44:73:38:ad: da:ff:27:8a:b0:5a:00:36:74:36:f4:18:37:17:19: d5:ca:ba:67:e7:73:69:5e:96:39:4b:03:d1:f7:9d: b1:55:57:bf:19:51:60:ac:d6:b4:33:e8:ee:c8:69: 46:7c:a7:81:5f:05:45:16:4c:ab:64:a5:ad:6b:db: 28:89:a9:01:b9:4c:40:a1:2c:e5:15:6b:1f:06:79: aa:d5:0b:e0:cb:d9:09:75:13:e6:04:96:97:de:8a: c9:47:5b:97:11:2d:16:ab:f3:1f:4f:10:87:eb:50: 25:bd:54:c0:64:02:06:ea:c9:5b:61:9c:c9:3c:5a: aa:99:32:fb:c7:b8:bc:0f:c4:cf:e8:f3:6a:58:b4: 09:24:ad:ca:9e:f6:88:1a:e2:7a:aa:96:20:40:3c: cc:08:23:5c:89:7b:02:18:db:1b:73:47:28:57:bd: df:65:f7:80:b3:36:eb:6a:03:21:80:11:41:08:1e: 05:83:fc:b7:41:42:d1:25:4a:5b:2c:83:b4:8f:eb: 85:5e:8b:25:c8:81:06:28:62:89:7c:fd:a2:bc:fd: ab:0f:4c:a4:cf:32:38:e6:59:64:33:15:6e:f7:28: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.244.0/22 IPv6: 2a02:5f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60056 Signature Algorithm: sha256WithRSAEncryption 1f:28:25:7b:54:6a:c5:bc:7e:0f:64:34:65:fe:83:db:58:83: b4:d9:b3:96:80:e8:52:a8:b8:02:0c:4d:50:77:68:cb:5a:9e: 61:3f:16:80:7c:06:d0:6c:82:9a:42:dd:8a:a1:68:b4:da:e5: 36:f8:58:9b:b9:23:85:0f:54:d7:b7:95:21:a7:54:07:52:54: 90:d2:ec:1c:eb:56:d3:11:d6:80:e4:f0:0d:82:e0:f6:51:ea: bb:cb:60:cc:84:59:9b:cc:e4:d9:6a:9e:21:a6:9a:e2:ed:3b: 44:57:68:a2:c6:bc:1c:2f:e3:e6:fa:6a:c7:d4:c3:85:20:99: b1:27:1b:e9:38:95:6d:8a:17:e2:2d:b5:a9:47:83:53:ef:88: 69:90:38:eb:61:c6:ad:b9:d2:08:0e:d2:b0:74:08:c7:10:5b: fa:8b:8b:ca:eb:e1:50:9a:5e:96:a5:62:3d:13:df:dc:20:0b: 64:09:4f:6a:fc:ca:0b:2a:de:69:ca:c6:04:f9:f1:46:1d:5f: 69:9f:85:67:8c:0c:25:d1:03:9a:eb:8c:6d:09:35:4a:df:3e: 38:68:1c:2a:75:db:7f:09:84:38:10:d0:08:2d:64:22:e4:37: 72:47:3c:65:21:75:d1:54:2f:01:59:42:01:29:03:c2:d4:2d: 53:9f:6c:6a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XLSiE1PzRLo9FYeSoX2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmU0YWM2MjI0ZmUxOTQ0NDIwZGMzYTk4ZGQ2M2FiYWU0YWY3ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3a2NSwZEsGqS23PRCi/S2dDAqrA pXgktURzOK3a/yeKsFoANnQ29Bg3FxnVyrpn53NpXpY5SwPR952xVVe/GVFgrNa0 M+juyGlGfKeBXwVFFkyrZKWta9soiakBuUxAoSzlFWsfBnmq1Qvgy9kJdRPmBJaX 3orJR1uXES0Wq/MfTxCH61AlvVTAZAIG6slbYZzJPFqqmTL7x7i8D8TP6PNqWLQJ JK3KnvaIGuJ6qpYgQDzMCCNciXsCGNsbc0coV73fZfeAszbragMhgBFBCB4Fg/y3 QULRJUpbLIO0j+uFXoslyIEGKGKJfP2ivP2rD0ykzzI45llkMxVu9yh4iQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOLkrGIk/hlEQg3DqY3WOrrkr34AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2Y2YmUw My00ZjQ0LTQzNTQtYjllYi1iYTRkMDZkZjBiZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvZjZiZTAz LTRmNDQtNDM1NC1iOWViLWJhNGQwNmRmMGJlNS8xLzR1U3NZaVQtR1VSQ0RjT3Bq ZFk2dXVTdmZnQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTn0MA0EAgACMAcDBQAqAl8gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDqmDANBgkqhkiG9w0BAQsFAAOCAQEAHygle1Rqxbx+ D2Q0Zf6D21iDtNmzloDoUqi4AgxNUHdoy1qeYT8WgHwG0GyCmkLdiqFotNrlNvhY m7kjhQ9U17eVIadUB1JUkNLsHOtW0xHWgOTwDYLg9lHqu8tgzIRZm8zk2WqeIaaa 4u07RFdoosa8HC/j5vpqx9TDhSCZsScb6TiVbYoX4i21qUeDU++IaZA462HGrbnS CA7SsHQIxxBb+ouLyuvhUJpelqViPRPf3CALZAlPavzKCyreacrGBPnxRh1faZ+F Z4wMJdEDmuuMbQk1St8+OGgcKnXbfwmEOBDQCC1kIuQ3ckc8ZSF10VQvAVlCASkD wtQtU59sag== -----END CERTIFICATE-----Generated at Wed Jan 21 14:33:56 2026 by rpki-client