This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer (raw, json) Hash identifier: L084Y9CrU92nFFs6t7rcbzXZKmcoKgVFhTQYWc/+Oks= Subject key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4A016B518B9BAB37BC7617E6B1388 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34729 IP: 193.138.8.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a0:16:b5:18:b9:ba:b3:7b:c7:61:7e:6b:13:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:8c:6f:2d:fe:88:a2:f1:f4:80:c2:80:a8: 9a:36:be:ad:1a:77:cd:a3:f2:d1:52:d4:d4:2f:07: da:b1:ce:2d:82:85:34:03:50:24:f7:77:2b:e9:06: 6a:3e:48:ee:4b:2e:f4:22:e7:26:e7:f0:88:ec:47: e4:a4:7d:f9:2a:6e:23:40:0c:7a:b8:e1:8e:18:66: c0:ec:ed:5b:cd:fd:65:9a:d4:23:41:e1:43:62:95: 45:db:54:c4:a1:d9:64:bf:c1:3b:64:0f:bf:10:a5: f6:d4:b4:f1:8f:0f:54:c3:70:04:d3:4a:75:9d:be: ce:07:2f:e8:0f:a9:17:13:7c:89:15:3d:2c:79:ff: 15:aa:0d:46:14:9a:e8:11:74:90:f2:b1:f1:87:dc: 45:dd:53:0d:e0:f7:4b:ad:2c:e3:31:ee:03:4d:cb: 9f:c0:b0:e0:29:9a:dd:5a:2d:43:7b:d1:75:f6:35: 37:69:61:a6:dc:5f:4b:e9:da:3c:3d:53:49:f1:0d: 7a:7b:43:64:1f:2f:74:06:05:88:78:7a:74:a3:46: 9d:2e:47:c7:94:40:47:f0:6d:67:74:40:ad:73:89: 27:24:cc:63:fd:75:01:5f:ed:4a:f4:12:46:35:33: b8:7e:e4:26:68:cb:fb:9f:d5:40:a0:55:8b:7d:c5: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.8.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34729 Signature Algorithm: sha256WithRSAEncryption 61:74:76:3b:a2:77:22:ff:56:16:a6:1f:2e:07:86:75:9e:fc: f0:b3:27:99:80:bf:2f:36:4f:32:93:e7:82:64:5d:7a:4b:76: d1:71:6f:2b:55:5c:65:72:f4:2e:3a:a0:e2:13:97:a2:4b:4f: 81:37:d7:74:19:42:d6:62:8e:f2:0b:dd:b4:77:d5:a2:a2:cd: 43:b8:50:a4:4b:d1:3b:f1:e1:b8:4a:45:f3:89:c4:b2:78:7c: a1:85:4a:b7:90:e5:2e:29:1a:88:a1:6c:e7:93:3f:7f:93:93: 32:24:b7:40:1b:2a:e0:10:e5:32:c1:1e:62:3c:1d:69:66:9a: 8d:1a:89:22:e8:2a:a3:3e:17:a9:82:da:66:9a:21:18:e6:da: 63:06:d2:1e:83:a5:25:3e:b4:3c:56:ff:4a:b8:90:37:90:b2: fe:6f:7b:72:4d:56:12:cb:9c:ab:92:9b:b7:9e:9f:48:02:43: 02:d8:ab:1a:f9:60:e5:52:89:e3:8b:a5:ee:4a:5f:94:75:e7: 6d:37:c2:d3:fe:03:17:f6:dd:3d:95:ba:47:d8:aa:00:f1:4b: 80:80:91:ef:a5:d5:61:4e:21:32:b9:29:ef:3c:29:d9:3f:8e: c8:cf:48:a7:59:ae:20:93:ec:99:8f:e5:bd:58:21:29:56:d8: e0:21:88:6f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pKAWtRi5urN7x2F+axOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE1NGFkYjVhMmVkOTk5Y2YxZGI5YzEyNzFiMjIwOWRhZDM0NDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+2Mby3+iKLx9IDCgKiaNr6tGnfN o/LRUtTULwfasc4tgoU0A1Ak93cr6QZqPkjuSy70Iucm5/CI7EfkpH35Km4jQAx6 uOGOGGbA7O1bzf1lmtQjQeFDYpVF21TEodlkv8E7ZA+/EKX21LTxjw9Uw3AE00p1 nb7OBy/oD6kXE3yJFT0sef8Vqg1GFJroEXSQ8rHxh9xF3VMN4PdLrSzjMe4DTcuf wLDgKZrdWi1De9F19jU3aWGm3F9L6do8PVNJ8Q16e0NkHy90BgWIeHp0o0adLkfH lEBH8G1ndECtc4knJMxj/XUBX+1K9BJGNTO4fuQmaMv7n9VAoFWLfcUHBQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOMVSttaLtmZzx25wScbIgna00SeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzAxNjdl Yi0wZDE2LTRjYzEtODA0Ny0xNDJmY2FjZDdhNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvMDE2N2Vi LTBkMTYtNGNjMS04MDQ3LTE0MmZjYWNkN2E0OS8xLzR4VksyMW91MlpuUEhibkJK eHNpQ2RyVFJKNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwYoIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCHqTANBgkqhkiG9w0BAQsFAAOCAQEAYXR2O6J3Iv9WFqYfLgeGdZ788LMnmYC/ LzZPMpPngmRdekt20XFvK1VcZXL0Ljqg4hOXoktPgTfXdBlC1mKO8gvdtHfVoqLN Q7hQpEvRO/HhuEpF84nEsnh8oYVKt5DlLikaiKFs55M/f5OTMiS3QBsq4BDlMsEe YjwdaWaajRqJIugqoz4XqYLaZpohGObaYwbSHoOlJT60PFb/SriQN5Cy/m97ck1W Esucq5Kbt56fSAJDAtirGvlg5VKJ44ul7kpflHXnbTfC0/4DF/bdPZW6R9iqAPFL gICR76XVYU4hMrkp7zwp2T+OyM9Ip1muIJPsmY/lvVghKVbY4CGIbw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:04 2026 by rpki-client