This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer File: 4wEfCFnQaghJdfTovStVZxDdjDA.cer (raw, json) Hash identifier: naKhIa5D7Ud7dqYQRSt52JyqEGtm4vGAr8P/g0RRekc= Subject key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C128C3441590B9514F1E03DC3A15DAE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211696 IP: 2001:67c:2724::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8c:34:41:59:0b:95:14:f1:e0:3d:c3:a1:5d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:fc:45:57:bc:2b:62:9f:54:33:b6:8a:60: c1:28:ba:91:61:d2:3e:ca:89:51:b8:7e:fa:ce:52: 05:29:7f:17:cc:98:bd:c4:23:ac:05:2f:e2:7a:8f: a9:20:98:91:2a:a1:70:c3:5f:5c:8f:84:74:ae:0a: 68:be:43:96:c4:50:d6:89:99:82:79:95:79:00:9e: 05:dd:b7:58:2a:58:4e:c1:e1:c1:01:22:0a:0c:df: d2:bb:95:1d:72:67:40:38:fb:d3:f3:70:5c:24:1b: 80:50:fa:f4:88:69:4f:9a:26:96:34:1a:92:d3:32: f3:c9:6f:41:a2:dc:61:c7:d5:79:48:2e:2e:15:ca: 8b:08:25:cc:72:82:5c:eb:e8:b5:d6:16:17:06:47: 43:c2:9b:13:ad:39:b6:a5:4a:25:83:c6:36:c3:c3: 64:b1:ca:fa:79:c9:2a:a8:73:34:00:57:47:eb:8d: 69:9f:e9:69:57:6d:75:37:6d:10:d4:3e:bf:18:84: 2f:6d:6f:87:3f:37:cc:f8:61:60:77:cb:01:3b:fd: ad:9f:68:57:8c:1a:27:d6:12:20:c5:e2:07:13:d6: 9d:b2:77:9a:10:a6:d3:26:30:f8:e9:1c:ce:d2:a9: 14:a4:5e:cc:1f:71:7b:b9:92:51:1e:55:8e:7d:65: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2724::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211696 Signature Algorithm: sha256WithRSAEncryption 6b:aa:60:06:21:15:b8:73:b3:0d:4c:a4:49:fa:7a:60:57:24: 26:36:5f:ba:1d:2b:c4:6c:5d:d0:c9:92:7e:57:8e:cb:9f:03: 70:3e:6a:0e:d0:92:2b:43:26:7d:4e:cb:4e:eb:b5:a2:aa:ca: 2e:fd:2d:bc:67:05:80:a2:01:4c:68:52:ee:9d:50:db:17:4c: 36:e5:fd:15:fb:67:58:1d:f4:76:1d:d6:86:71:cb:43:49:f6: 59:63:2d:bc:44:f5:6c:81:fc:ba:0a:88:75:14:44:73:9b:1b: 19:ba:8f:f3:66:52:b5:bb:56:95:d9:1f:3a:03:16:12:86:7b: c4:fc:fd:61:76:ee:80:a2:5f:ea:52:f2:96:d5:3d:e3:0c:cf: f1:f8:38:18:3d:65:d5:a2:40:97:83:fd:9f:94:4b:6b:5b:41: c7:c5:aa:65:51:b8:1f:80:27:3e:98:76:6a:c7:ec:f9:d2:69: f6:29:9d:5c:cc:ee:c6:6f:83:46:1f:1e:f5:a0:35:98:8b:49: 54:c3:7f:49:80:e8:e6:4d:43:a6:15:23:17:d4:5b:8c:ef:ec: 84:d3:52:2d:d0:14:d3:e9:e4:fa:77:58:07:85:bf:0f:89:fa: fb:bc:18:d4:3b:e3:37:06:46:48:9c:3a:19:4c:be:6c:d2:61: 79:06:e7:11 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8Eow0QVkLlRTx4D3DoV2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzAxMWYwODU5ZDA2YTA4NDk3NWY0ZThiZDJiNTU2NzEwZGQ4YzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKv8RVe8K2KfVDO2imDBKLqRYdI+ yolRuH76zlIFKX8XzJi9xCOsBS/ieo+pIJiRKqFww19cj4R0rgpovkOWxFDWiZmC eZV5AJ4F3bdYKlhOweHBASIKDN/Su5UdcmdAOPvT83BcJBuAUPr0iGlPmiaWNBqS 0zLzyW9Botxhx9V5SC4uFcqLCCXMcoJc6+i11hYXBkdDwpsTrTm2pUolg8Y2w8Nk scr6eckqqHM0AFdH641pn+lpV211N20Q1D6/GIQvbW+HPzfM+GFgd8sBO/2tn2hX jBon1hIgxeIHE9adsneaEKbTJjD46RzO0qkUpF7MH3F7uZJRHlWOfWUDewIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFOMBHwhZ0GoISXX06L0rVWcQ3YwwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2U4Zjcy Ny1jYjIzLTQzY2UtODVkMi1kNDhiN2QyNjI0ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZThmNzI3 LWNiMjMtNDNjZS04NWQyLWQ0OGI3ZDI2MjRkYi8xLzR3RWZDRm5RYWdoSmRmVG92 U3RWWnhEZGpEQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCckMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM68DANBgkqhkiG9w0BAQsFAAOCAQEAa6pgBiEVuHOzDUykSfp6YFckJjZf uh0rxGxd0MmSfleOy58DcD5qDtCSK0MmfU7LTuu1oqrKLv0tvGcFgKIBTGhS7p1Q 2xdMNuX9FftnWB30dh3WhnHLQ0n2WWMtvET1bIH8ugqIdRREc5sbGbqP82ZStbtW ldkfOgMWEoZ7xPz9YXbugKJf6lLyltU94wzP8fg4GD1l1aJAl4P9n5RLa1tBx8Wq ZVG4H4AnPph2asfs+dJp9imdXMzuxm+DRh8e9aA1mItJVMN/SYDo5k1DphUjF9Rb jO/shNNSLdAU0+nk+ndYB4W/D4n6+7wY1DvjNwZGSJw6GUy+bNJheQbnEQ== -----END CERTIFICATE-----Generated at Tue Jan 27 05:35:07 2026 by rpki-client