This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.cer (raw, json) Hash identifier: PZqfLpK9G30KezXAHf0Z2BoFLiurBDDDOqEvlp20uYM= Subject key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C69A49FB58C8FDD3A158FA80918C15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50835 AS: 206943 IP: 31.42.128.0/19 IP: 178.159.64.0/20 IP: 178.218.128.0/20 IP: 185.102.48.0/22 IP: 185.171.28.0/22 IP: 185.183.88.0/22 IP: 185.206.56.0/22 IP: 2a0a:c300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9a:49:fb:58:c8:fd:d3:a1:58:fa:80:91:8c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:72:d5:41:c3:29:6a:91:04:8a:30:74:62: 3c:eb:f4:0b:6a:71:15:77:9b:7d:d3:29:91:27:8e: 21:eb:27:f4:e6:f4:b6:32:bd:3f:18:23:6b:11:eb: 51:5c:a8:d2:d4:8c:ea:04:c3:ed:ac:de:59:71:f1: ba:0c:a2:22:da:6f:cb:77:60:b8:71:3b:b4:5a:5d: db:c2:79:1c:52:82:44:79:a7:5b:da:f1:e0:1e:a9: 03:ed:7d:3b:96:f2:f4:6f:54:5d:ec:b5:56:78:6c: ac:73:30:86:c6:c7:92:52:2b:c6:6a:56:ad:a9:b2: 8a:e5:52:4c:4c:67:44:32:44:e3:f1:c5:3d:05:15: ec:f3:c9:2a:a9:10:1a:47:7a:79:41:90:f4:67:5f: e1:93:0b:eb:f6:1e:5f:2b:4b:57:67:7c:b5:2a:c4: 9a:62:82:ca:4d:00:b3:fa:0d:12:a6:e9:8e:e1:23: 13:fd:ce:31:16:11:5e:4a:f6:9f:db:65:bb:62:e6: 38:99:20:af:1f:35:18:15:a8:50:07:1e:75:1f:08: 92:d1:e9:f3:95:a3:7f:1f:75:74:73:0e:ed:7a:92: b6:3e:fc:87:8c:c7:4d:72:27:34:51:ad:87:75:75: 24:b6:01:41:b5:1d:6b:4e:5d:83:7c:8c:a1:7c:4b: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.128.0/19 178.159.64.0/20 178.218.128.0/20 185.102.48.0/22 185.171.28.0/22 185.183.88.0/22 185.206.56.0/22 IPv6: 2a0a:c300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50835 206943 Signature Algorithm: sha256WithRSAEncryption 36:12:77:b2:7e:81:eb:d4:83:07:10:9e:0d:12:a8:3d:d2:60: 59:d8:73:92:29:59:52:a7:48:c6:d4:1c:69:69:23:72:ac:3d: cd:75:8b:9a:03:95:2a:bf:bb:a9:7e:ea:5c:f2:b5:64:e5:7e: fc:d1:d4:8f:54:fa:ca:cd:f8:ef:1e:85:bb:e2:a2:1a:1c:5b: 8d:0d:2d:17:90:23:fd:7b:09:bc:fb:e2:4d:53:2f:68:e0:4d: ed:75:13:07:4e:0c:56:b3:7f:04:d7:ff:6b:34:c5:87:70:c3: 8f:3b:2d:6b:88:72:08:4b:e8:68:46:22:f9:4f:32:3d:d3:93: 74:e1:40:74:91:11:55:0e:3e:0c:93:75:2c:b7:31:fd:80:97: 8f:b2:7a:d0:75:f9:aa:86:64:89:f3:db:88:09:23:0b:44:ac: 63:2b:f8:5f:0e:27:79:d1:e4:f4:7c:62:7c:01:c1:b9:7d:84: 95:55:2f:c3:30:c5:eb:14:43:10:01:27:d4:7a:36:c1:30:6d: 08:d3:bc:ad:82:51:3f:3b:5d:45:6a:d1:ef:ce:eb:40:38:5c: 01:fc:64:d5:6a:13:1a:76:18:7f:9f:9a:9e:f2:db:58:5d:b7: d2:c2:c8:30:0a:6b:d2:13:49:5b:58:30:bc:41:6f:67:4f:39: ec:bb:28:9a -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt3xppJ+1jI/dOhWPqAkYwVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE5ZDBjZDY1NTkzZDk2OWU4ZDQ1MzgyYTE5NGFhYTczYzBmZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aBy1UHDKWqRBIowdGI86/QLanEV d5t90ymRJ44h6yf05vS2Mr0/GCNrEetRXKjS1IzqBMPtrN5ZcfG6DKIi2m/Ld2C4 cTu0Wl3bwnkcUoJEeadb2vHgHqkD7X07lvL0b1Rd7LVWeGysczCGxseSUivGalat qbKK5VJMTGdEMkTj8cU9BRXs88kqqRAaR3p5QZD0Z1/hkwvr9h5fK0tXZ3y1KsSa YoLKTQCz+g0SpumO4SMT/c4xFhFeSvaf22W7YuY4mSCvHzUYFahQBx51HwiS0enz laN/H3V0cw7tepK2PvyHjMdNcic0Ua2HdXUktgFBtR1rTl2DfIyhfEspVQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2FlODY5 Yy04MTJjLTRjZDYtYmFmOS0yMTdjZjkzODQ1YmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWU4Njlj LTgxMmMtNGNkNi1iYWY5LTIxN2NmOTM4NDViYy8xLzR4blF6V1ZaUFphZWpVVTRL aGxLcW5QQV80dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQFHyqAAwQEsp9AAwQEstqAAwQCuWYwAwQCuasc AwQCubdYAwQCuc44MA0EAgACMAcDBQMqCsMAMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwDGkwIDAyhfMA0GCSqGSIb3DQEBCwUAA4IBAQA2EneyfoHr1IMHEJ4NEqg9 0mBZ2HOSKVlSp0jG1BxpaSNyrD3NdYuaA5Uqv7upfupc8rVk5X780dSPVPrKzfjv HoW74qIaHFuNDS0XkCP9ewm8++JNUy9o4E3tdRMHTgxWs38E1/9rNMWHcMOPOy1r iHIIS+hoRiL5TzI905N04UB0kRFVDj4Mk3UstzH9gJePsnrQdfmqhmSJ89uICSML RKxjK/hfDid50eT0fGJ8AcG5fYSVVS/DMMXrFEMQASfUejbBMG0I07ytglE/O11F atHvzutAOFwB/GTVahMadhh/n5qe8ttYXbfSwsgwCmvSE0lbWDC8QW9nTznsuyia -----END CERTIFICATE-----Generated at Mon Jan 19 19:01:45 2026 by rpki-client