This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer (raw, json) Hash identifier: NGzZNSQ3RtOoiVJiAFtfJX2ICHYT7jVAyteqsUAc738= Subject key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA70F7FA27245041953AE50D85ADCC7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198459 IP: 91.239.53.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0f:7f:a2:72:45:04:19:53:ae:50:d8:5a:dc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31722d79bff4384a597cb544d9e7974490d8734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:d3:0e:38:a2:ec:5e:76:e6:fb:75:67:30: c0:54:ac:db:ce:e4:48:e0:48:6e:ab:95:a8:3f:ba: 91:2b:14:41:3b:c4:3a:5b:95:4f:f6:ae:de:4d:38: 0a:a7:67:db:86:08:29:31:8b:d9:fd:fc:04:0a:70: 21:40:6b:64:21:10:d9:b8:da:00:bb:7e:5a:a8:ef: e5:2a:52:5f:bf:7d:f0:ed:5f:a8:19:6e:7a:39:79: 77:07:0a:d8:e4:a7:11:c2:b2:c5:46:47:cb:50:ec: bc:46:50:be:ac:7c:91:49:62:20:7c:fc:a6:f4:1a: 6d:58:10:4b:c5:2e:14:90:d3:b3:8c:b2:74:dd:d6: b8:08:22:d1:5a:fa:4f:a7:ad:51:bb:8b:74:11:29: 83:86:7e:32:05:fe:35:be:dd:dc:f4:72:33:d6:9c: 73:21:26:94:3d:3f:7f:b2:73:cd:bc:a6:45:25:4b: b7:4f:07:7b:b7:9f:4e:db:10:88:03:c7:c1:e7:51: 5b:92:69:f1:9f:01:a2:b4:6b:16:d6:1c:a4:7a:b6: 8e:3a:c6:1a:25:f4:c0:b3:a0:c7:f2:28:55:53:73: 0a:8a:fb:6b:a3:cb:71:8a:b6:58:24:9b:b1:d5:ea: 8c:be:72:ef:24:16:04:d5:29:ef:d7:94:52:96:15: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.53.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198459 Signature Algorithm: sha256WithRSAEncryption 09:c3:3e:61:bf:d2:10:e1:b7:60:0b:c5:ce:69:f1:e4:65:08: 9a:1d:ec:b6:f1:34:53:10:21:20:04:99:8d:8f:ce:ae:d1:97: e5:67:b7:d6:98:54:24:f0:88:94:43:eb:4b:30:68:dc:43:f0: c4:39:d6:18:4c:f2:a2:08:3d:a3:1a:a4:5a:d8:cf:14:13:ef: ad:24:57:5e:12:e6:66:ca:8a:d8:94:b4:2a:06:07:56:48:ee: ea:d9:73:f1:35:a0:e5:b8:ec:7d:f1:dc:a1:9a:c3:3a:f1:cd: 0b:9e:2e:13:ba:23:89:77:12:86:c8:10:9a:fd:56:6a:26:d3: 2e:2e:5a:e1:9f:3b:23:74:2e:f3:72:69:0a:17:8f:ba:9e:74: 06:ee:5c:98:6d:4f:16:c7:0d:eb:51:d8:8c:c8:14:bc:32:86: 99:18:30:6d:74:91:35:08:f5:5a:f6:21:30:28:ef:d5:bb:67: f9:d8:6b:d9:d2:99:84:db:a5:61:05:1c:20:21:ff:8a:40:04: b7:f9:ec:55:47:43:06:90:60:87:23:54:0a:2b:57:64:41:86: b3:05:b5:e1:34:f5:cb:18:6c:0c:32:0f:62:0e:eb:0c:81:d9: 87:ba:2b:7b:c2:dd:ae:dc:8b:54:93:f7:63:12:59:d1:78:e5: 6b:27:43:78 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pw9/onJFBBlTrlDYWtzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE3MjJkNzliZmY0Mzg0YTU5N2NiNTQ0ZDllNzk3NDQ5MGQ4NzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23vTDjii7F525vt1ZzDAVKzbzuRI 4Ehuq5WoP7qRKxRBO8Q6W5VP9q7eTTgKp2fbhggpMYvZ/fwECnAhQGtkIRDZuNoA u35aqO/lKlJfv33w7V+oGW56OXl3BwrY5KcRwrLFRkfLUOy8RlC+rHyRSWIgfPym 9BptWBBLxS4UkNOzjLJ03da4CCLRWvpPp61Ru4t0ESmDhn4yBf41vt3c9HIz1pxz ISaUPT9/snPNvKZFJUu3Twd7t59O2xCIA8fB51FbkmnxnwGitGsW1hykeraOOsYa JfTAs6DH8ihVU3MKivtro8txirZYJJux1eqMvnLvJBYE1Snv15RSlhU5QQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOMXIteb/0OEpZfLVE2eeXRJDYc0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2I1NTU5 ZS05NTBiLTQ4ZjQtYTJhYi1iMjZmMWE3MGFmMGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYjU1NTll LTk1MGItNDhmNC1hMmFiLWIyNmYxYTcwYWYwZC8xLzR4Y2kxNXZfUTRTbGw4dFVU WjU1ZEVrTmh6US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+81MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMHOzANBgkqhkiG9w0BAQsFAAOCAQEACcM+Yb/SEOG3YAvFzmnx5GUImh3stvE0 UxAhIASZjY/OrtGX5We31phUJPCIlEPrSzBo3EPwxDnWGEzyogg9oxqkWtjPFBPv rSRXXhLmZsqK2JS0KgYHVkju6tlz8TWg5bjsffHcoZrDOvHNC54uE7ojiXcShsgQ mv1WaibTLi5a4Z87I3Qu83JpChePup50Bu5cmG1PFscN61HYjMgUvDKGmRgwbXSR NQj1WvYhMCjv1btn+dhr2dKZhNulYQUcICH/ikAEt/nsVUdDBpBghyNUCitXZEGG swW14TT1yxhsDDIPYg7rDIHZh7ore8LdrtyLVJP3YxJZ0XjlaydDeA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:40:05 2026 by rpki-client