This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer (raw, json) Hash identifier: FsANSTlwwv9WIStKOBs2CgKLpDpq0oi87qlrBAkWIOA= Subject key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783557121F87DED99F06B927588CC2BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5416 AS: 15539 AS: 209752 IP: 77.69.128.0/17 IP: 82.194.32.0/19 IP: 84.255.128.0/18 IP: 88.201.0.0/17 IP: 89.148.0.0/18 IP: 185.165.176.0/22 IP: 193.188.96.0/19 IP: 217.17.224.0/19 IP: 2001:1a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:57:12:1f:87:de:d9:9f:06:b9:27:58:8c:c2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d7:a5:6c:64:20:3e:3f:19:38:f1:e7:b3:a5: 8d:bd:7c:96:4d:e7:39:7c:bb:1f:02:40:ec:1e:a8: 02:e9:c6:43:f9:d5:d3:29:b8:91:91:50:56:6a:42: b4:83:02:cf:36:fe:79:60:03:6c:99:ab:1b:77:a2: 28:35:98:1c:ab:fb:38:d3:af:f6:ee:b4:be:92:3b: 02:20:8e:ff:5b:5f:8f:48:d8:88:74:ab:90:43:5a: 2a:70:99:08:b0:a1:ed:43:29:21:d9:60:e4:c7:15: 56:0c:a2:0e:5c:34:a5:0c:7b:14:d3:1e:a3:cd:c1: df:1b:cf:cf:90:50:32:e5:c7:13:26:6a:e3:e4:8a: 39:04:2e:e4:a7:ea:6c:ad:cc:03:8c:13:d8:6c:06: fd:ff:90:94:77:c8:00:03:d4:be:54:80:09:23:b2: b6:e1:67:1d:bb:aa:ee:c8:a2:2d:51:5a:8f:0a:7b: 7d:fc:3c:0d:97:60:fe:13:26:38:fe:8e:1e:90:e0: 15:02:bd:32:b7:4b:06:7c:9b:8c:4a:b2:ba:16:bf: ca:ef:05:3a:83:49:5c:b0:4b:d1:c3:41:1a:e6:f5: d0:49:ec:b7:3d:4d:21:01:2a:fb:45:59:e4:c2:7f: ed:8a:36:d8:50:47:aa:b6:e6:ee:96:b1:08:c8:c8: 2d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.69.128.0/17 82.194.32.0/19 84.255.128.0/18 88.201.0.0/17 89.148.0.0/18 185.165.176.0/22 193.188.96.0/19 217.17.224.0/19 IPv6: 2001:1a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5416 15539 209752 Signature Algorithm: sha256WithRSAEncryption 01:9f:c2:99:5b:5f:e8:63:7f:6f:4d:97:a8:61:0a:a6:42:86: 55:f0:7f:1f:3f:fd:01:58:01:88:12:6c:c5:98:6f:8e:2b:86: 42:e0:83:79:2a:8c:ce:ef:4e:06:99:2f:25:66:e2:83:fb:a1: f3:e8:6e:d6:08:e9:0b:95:3e:a7:7e:53:b0:6d:ea:e1:8c:9a: ae:ac:59:0c:d5:a4:0f:9f:36:02:fd:94:c3:25:e5:61:2c:d2: a7:24:5f:64:92:40:42:6a:fa:63:83:8e:0b:fc:dd:ac:0d:bd: 31:7b:ef:37:33:e7:b8:e4:1b:87:75:b9:49:29:e8:13:d5:b9: 64:60:0a:ce:88:8d:45:ac:76:12:a4:d9:6e:9b:0c:92:85:ac: ee:5b:63:f3:25:87:27:a1:87:67:db:37:2a:96:d4:67:61:26: 40:44:90:8f:2d:b9:c1:e4:d7:df:15:25:60:fe:88:1d:e7:b2: 38:c3:02:89:19:6d:47:cd:41:e6:4c:25:4f:50:6d:f7:9f:f1: 6c:2f:58:56:c8:dd:70:50:90:2b:59:03:83:4d:f6:e9:79:c0: 29:27:40:8d:08:39:3d:c2:ff:95:a8:44:4e:ad:8f:42:6f:4c: f6:0d:09:2f:80:03:d0:d6:60:00:67:28:32:a8:68:55:3d:78: a8:28:2d:2f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZt4NVcSH4fe2Z8GuSdYjMK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzJiY2Q0MGM2Nzc0Njc3ZDJjMzcwMmVmNTllZGY0OWQwYjM2YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNelbGQgPj8ZOPHns6WNvXyWTec5 fLsfAkDsHqgC6cZD+dXTKbiRkVBWakK0gwLPNv55YANsmasbd6IoNZgcq/s406/2 7rS+kjsCII7/W1+PSNiIdKuQQ1oqcJkIsKHtQykh2WDkxxVWDKIOXDSlDHsU0x6j zcHfG8/PkFAy5ccTJmrj5Io5BC7kp+psrcwDjBPYbAb9/5CUd8gAA9S+VIAJI7K2 4Wcdu6ruyKItUVqPCnt9/DwNl2D+EyY4/o4ekOAVAr0yt0sGfJuMSrK6Fr/K7wU6 g0lcsEvRw0Ea5vXQSey3PU0hASr7RVnkwn/tijbYUEeqtubulrEIyMgtTQIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFOMrzUDGd0Z30sNwLvWe30nQs2xsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzRiN2Vm OC04NjQzLTRkYmItOTJhYS0wNzQwMTE1YjVhNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvNGI3ZWY4 LTg2NDMtNGRiYi05MmFhLTA3NDAxMTViNWE1Mi8xLzR5dk5RTVozUm5mU3czQXU5 WjdmU2RDemJHdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQHTUWAAwQFUsIgAwQGVP+AAwQHWMkAAwQGWZQA AwQCuaWwAwQFwbxgAwQF2RHgMA0EAgACMAcDBQMgARpAMCIGCCsGAQUFBwEIAQH/ BBMwEaAPMA0CAhUoAgI8swIDAzNYMA0GCSqGSIb3DQEBCwUAA4IBAQABn8KZW1/o Y39vTZeoYQqmQoZV8H8fP/0BWAGIEmzFmG+OK4ZC4IN5KozO704GmS8lZuKD+6Hz 6G7WCOkLlT6nflOwberhjJqurFkM1aQPnzYC/ZTDJeVhLNKnJF9kkkBCavpjg44L /N2sDb0xe+83M+e45BuHdblJKegT1blkYArOiI1FrHYSpNlumwyShazuW2PzJYcn oYdn2zcqltRnYSZARJCPLbnB5NffFSVg/ogd57I4wwKJGW1HzUHmTCVPUG33n/Fs L1hWyN1wUJArWQODTfbpecApJ0CNCDk9wv+VqEROrY9Cb0z2DQkvgAPQ1mAAZygy qGhVPXioKC0v -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:17 2026 by rpki-client