This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer (raw, json) Hash identifier: DiiiWHJnt5v8YDDXt2w0/Gic1bYR1cW2wn36muPXRqo= Subject key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9E95558DB8721A69492A144A75572 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 92.249.25.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e9:55:58:db:87:21:a6:94:92:a1:44:a7:55:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:c6:1f:d0:b1:6c:4a:e1:dc:e5:96:d5:24: fd:83:a5:70:4b:3a:e1:80:0c:fe:34:9e:2b:76:60: e9:a6:fe:d7:93:ec:33:48:20:89:6a:7d:81:6b:b1: 11:12:35:f5:7f:92:73:35:3d:25:a5:50:65:fc:64: 3d:e0:0e:9d:29:74:a3:b4:33:e6:98:84:1f:85:90: 46:40:30:b9:80:0d:ad:9d:15:e1:58:73:9a:27:a5: 17:68:f4:ef:98:73:92:bf:47:98:33:b1:50:6f:16: 36:ff:38:c1:45:65:22:da:76:21:b9:ae:c2:72:6e: 8a:b4:5c:7c:55:94:3a:09:dc:bd:d2:d1:bd:7a:79: 30:68:b4:57:d8:8d:4b:77:8a:80:5e:e1:36:6c:43: e6:40:b6:94:f6:99:57:7a:89:3c:9d:fc:eb:49:c8: cf:4e:37:c7:6a:66:07:4f:86:24:44:3f:ff:12:9b: cd:89:07:a4:c1:5a:86:57:9a:61:c5:6c:b8:09:6a: 4c:d0:7b:8c:96:2a:8b:a9:3b:6d:97:3a:7c:16:00: fd:d4:ba:84:2a:6c:80:65:71:52:12:a7:e1:94:5a: 3f:6e:64:39:62:3e:1c:21:b5:a3:1d:2e:9b:f1:ca: b8:61:93:cf:ec:12:86:f1:34:7c:92:1d:a9:36:a0: 73:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.25.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:44:88:3d:60:0e:d2:54:d3:f0:7d:c4:b0:78:dd:03:64:19: 7e:a7:f7:6a:72:2b:d5:0d:5f:e8:ce:23:4e:bd:a2:e4:f4:ea: 5b:0a:fb:3d:7c:b1:81:e5:9c:d2:70:c1:f0:e4:a9:7e:14:a5: 93:39:9f:67:01:98:43:34:b0:46:d2:9f:26:6f:a6:f9:a9:3d: 1f:94:81:71:4b:21:b7:0a:ee:ca:38:07:ea:3a:aa:83:ce:a4: 24:f2:09:27:ae:0d:35:c9:65:55:ac:4c:f8:95:01:57:48:05: 4f:5e:0f:51:ce:42:3a:55:d7:bd:42:6e:02:a1:b0:f8:bb:f6: 9d:8e:2f:d9:93:fa:75:36:88:76:5a:3f:d3:77:e4:7c:b3:40: 7b:92:66:88:ed:33:7a:85:79:1f:56:36:7d:51:54:d0:39:4f: 91:4c:f6:6e:47:52:6a:20:82:56:d2:c2:04:9a:f5:d8:21:c0: 0f:5e:85:93:34:e7:fa:c0:14:f2:92:e5:d3:37:1c:1a:32:98: 34:d6:fa:4a:a0:5b:1e:a2:66:b4:71:7d:14:25:91:d0:96:70: 9a:b6:c3:fb:c5:60:fa:4b:7d:ff:ee:35:82:15:b4:5c:fe:c4: a8:2e:ab:3c:da:8b:ae:ac:b2:80:37:10:c3:7d:7d:a8:0e:a5: 9b:ec:82:cc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9yelVWNuHIaaUkqFEp1VyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzFmMzY1NmM2ZWQ5YTNmOWE0MmM2NzhhNzhhMmUzNzRmOGU1N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXzGH9CxbErh3OWW1ST9g6VwSzrh gAz+NJ4rdmDppv7Xk+wzSCCJan2Ba7EREjX1f5JzNT0lpVBl/GQ94A6dKXSjtDPm mIQfhZBGQDC5gA2tnRXhWHOaJ6UXaPTvmHOSv0eYM7FQbxY2/zjBRWUi2nYhua7C cm6KtFx8VZQ6Cdy90tG9enkwaLRX2I1Ld4qAXuE2bEPmQLaU9plXeok8nfzrScjP TjfHamYHT4YkRD//EpvNiQekwVqGV5phxWy4CWpM0HuMliqLqTttlzp8FgD91LqE KmyAZXFSEqfhlFo/bmQ5Yj4cIbWjHS6b8cq4YZPP7BKG8TR8kh2pNqBzsQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzAyZjhh MS0zMzgzLTRkMjEtYWEyNS1lNzMzYzI2MmEzODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvMDJmOGEx LTMzODMtNGQyMS1hYTI1LWU3MzNjMjYyYTM4Mi8xLzR4ODJWc2J0bWotYVFzWjRw NG91TjAtT1Y5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAXPkZMA0GCSqGSIb3DQEBCwUAA4IBAQBPRIg9 YA7SVNPwfcSweN0DZBl+p/dqcivVDV/oziNOvaLk9OpbCvs9fLGB5ZzScMHw5Kl+ FKWTOZ9nAZhDNLBG0p8mb6b5qT0flIFxSyG3Cu7KOAfqOqqDzqQk8gknrg01yWVV rEz4lQFXSAVPXg9RzkI6Vde9Qm4CobD4u/adji/Zk/p1Noh2Wj/Td+R8s0B7kmaI 7TN6hXkfVjZ9UVTQOU+RTPZuR1JqIIJW0sIEmvXYIcAPXoWTNOf6wBTykuXTNxwa Mpg01vpKoFseoma0cX0UJZHQlnCatsP7xWD6S33/7jWCFbRc/sSoLqs82ouurLKA NxDDfX2oDqWb7ILM -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:59 2026 by rpki-client