This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer (raw, json) Hash identifier: FCkE1JRKZCyu3fzkoHI+fKA9KjT4iYTzkh+BXfvVY9A= Subject key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366BF5C69159A0A43A415A9CFC6036 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199469 IP: 185.15.112.0/22 IP: 2a03:c240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6b:f5:c6:91:59:a0:a4:3a:41:5a:9c:fc:60:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31aba3c2f56283ce5c74bce405844c1591babfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:a6:a9:80:2d:37:54:2c:ad:87:7a:e8:9e: 1f:8d:98:ae:08:51:ae:59:ae:ec:ce:49:c5:40:5f: 2f:80:ba:9a:1b:b3:09:3c:fd:1d:b0:09:c6:ee:63: 46:ba:3f:6a:dc:cc:29:f2:ea:36:17:e6:3f:69:a1: 80:98:15:e2:10:9f:f8:7b:3c:b4:5c:0f:b7:4a:b5: 0d:24:45:52:de:26:57:bd:42:87:25:3b:be:7b:a2: bd:05:1d:ed:9d:e3:ba:c9:72:55:ad:68:7f:61:1d: bc:e9:77:7a:cf:9c:87:9c:d9:fb:3a:80:b7:26:b4: c8:9a:72:00:5a:00:e8:c0:87:73:15:30:da:e0:e7: 27:e7:1d:62:dc:32:a8:dd:78:0f:29:24:07:81:d4: 3a:c8:ee:07:98:a8:75:f2:0c:25:d7:1f:39:0e:fa: a8:64:af:bc:8b:e4:87:8d:90:69:30:88:3c:e2:a5: 3b:8f:6b:9a:b8:f0:c6:4f:37:86:72:58:6b:9a:8c: 75:d5:2d:84:64:0d:fd:d7:39:2a:65:4d:b7:ee:c0: 7a:ab:f2:16:81:29:b2:e7:7e:46:a0:9c:8a:b8:29: f4:2a:bd:68:25:01:a7:ef:1f:7d:8f:ef:37:fb:b6: a1:a1:aa:9b:e3:66:bf:31:29:c8:0a:eb:d7:90:c4: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.112.0/22 IPv6: 2a03:c240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199469 Signature Algorithm: sha256WithRSAEncryption b0:c4:82:69:6b:c2:2c:3b:32:1a:a5:c0:b9:b1:6f:fe:6c:2b: 85:2d:29:d0:48:5c:98:ec:26:2f:e1:8e:83:3f:ce:41:27:cf: 36:c7:20:64:c9:91:8d:f9:c6:b6:52:93:88:9a:7a:b1:da:c1: b9:a3:b9:61:94:ad:2a:4b:66:c9:4f:f2:b3:bd:11:da:85:e9: ed:cd:47:d4:7b:b5:df:03:38:b2:fb:1d:b1:92:b5:27:6c:f8: 4c:4f:2d:80:01:56:df:90:42:b3:da:a8:bd:d1:b6:6c:cb:ed: 90:ac:b1:30:62:63:44:11:c6:4c:83:a3:e4:98:29:6f:b3:42: 27:bc:be:af:fd:25:06:76:b1:b2:c4:2c:6f:48:67:48:33:82: 6b:d7:6f:4c:c7:db:51:74:2a:47:43:b1:8f:19:e9:98:d1:7d: aa:42:94:dd:26:7c:37:4d:c1:23:c3:d0:51:d1:66:f1:13:15: b7:b3:5c:ce:8d:25:1e:32:3e:2f:36:c4:33:7f:60:c0:f3:57: d5:16:08:71:c4:8c:89:c3:40:cd:d7:82:69:81:65:23:58:61: 3a:7f:9e:c6:23:a3:a6:ed:e2:f7:c0:b4:9c:3c:bc:a2:8f:67: 68:30:8e:86:1a:73:e6:06:95:fa:7b:df:f4:15:9e:5d:a2:bb: 80:e9:58:37 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7Nmv1xpFZoKQ6QVqc/GA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzFhYmEzYzJmNTYyODNjZTVjNzRiY2U0MDU4NDRjMTU5MWJhYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKumqYAtN1QsrYd66J4fjZiuCFGu Wa7szknFQF8vgLqaG7MJPP0dsAnG7mNGuj9q3Mwp8uo2F+Y/aaGAmBXiEJ/4ezy0 XA+3SrUNJEVS3iZXvUKHJTu+e6K9BR3tneO6yXJVrWh/YR286Xd6z5yHnNn7OoC3 JrTImnIAWgDowIdzFTDa4Ocn5x1i3DKo3XgPKSQHgdQ6yO4HmKh18gwl1x85Dvqo ZK+8i+SHjZBpMIg84qU7j2uauPDGTzeGclhrmox11S2EZA391zkqZU237sB6q/IW gSmy535GoJyKuCn0Kr1oJQGn7x99j+83+7ahoaqb42a/MSnICuvXkMQdTwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOMaujwvVig85cdLzkBYRMFZG6v8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2Y4MzA3 My05ZTgwLTQyZjItYjBhOC01ZjI4MTM3YTc2NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjgzMDcz LTllODAtNDJmMi1iMGE4LTVmMjgxMzdhNzY1OC8xLzR4cTZQQzlXS0R6bHgwdk9R RmhFd1ZrYnFfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ9wMA0EAgACMAcDBQAqA8JAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLLTANBgkqhkiG9w0BAQsFAAOCAQEAsMSCaWvCLDsy GqXAubFv/mwrhS0p0EhcmOwmL+GOgz/OQSfPNscgZMmRjfnGtlKTiJp6sdrBuaO5 YZStKktmyU/ys70R2oXp7c1H1Hu13wM4svsdsZK1J2z4TE8tgAFW35BCs9qovdG2 bMvtkKyxMGJjRBHGTIOj5Jgpb7NCJ7y+r/0lBnaxssQsb0hnSDOCa9dvTMfbUXQq R0OxjxnpmNF9qkKU3SZ8N03BI8PQUdFm8RMVt7Nczo0lHjI+LzbEM39gwPNX1RYI ccSMicNAzdeCaYFlI1hhOn+exiOjpu3i98C0nDy8oo9naDCOhhpz5gaV+nvf9BWe XaK7gOlYNw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:09 2026 by rpki-client