This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer File: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer (raw, json) Hash identifier: KGUgtlnUupILyLGgUAEx5ZSp61QMJ0E8RkWF+Agm2cI= Subject key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC94132ECDC66CDA5B9AB5AEACE07D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199481 IP: 185.10.88.0/22 IP: 185.113.16.0/22 IP: 2a03:5bc0::/32 IP: 2a06:6600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:41:32:ec:dc:66:cd:a5:b9:ab:5a:ea:ce:07:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e33779b8388d001fdcbddc48ace227f009850660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:69:9f:3a:83:d0:5c:10:e3:10:e3:db:66: eb:fc:e9:88:b9:9a:ff:88:18:bc:45:f1:15:88:1d: ee:da:8b:8e:93:3e:3b:c5:1f:a4:97:ef:0d:85:b7: 8e:fe:fd:77:ce:aa:fd:b7:29:21:ab:0c:15:fa:5e: 88:8a:d6:79:3f:5e:67:29:6e:7b:c1:50:77:e8:74: 87:b6:39:ac:ad:c4:04:aa:a3:51:bb:9b:68:0f:18: c9:b4:ed:ea:86:79:43:41:7a:aa:73:89:d9:98:df: 4e:f1:f9:82:55:0e:a6:40:cf:b9:51:17:3e:96:f0: af:37:1f:12:ce:f6:52:65:f5:0f:cf:f9:95:3f:d8: b8:24:cd:94:f4:ef:9a:d1:eb:8b:67:fe:4c:20:ad: e0:38:4c:ed:92:08:97:4e:e7:4a:a0:ae:ce:12:0d: 4d:54:2e:f8:28:90:61:11:73:03:ea:9b:9b:bc:09: 63:e0:76:8a:02:22:c9:6f:8a:8b:24:8c:ae:6a:e9: 00:b7:dd:66:40:42:53:7a:82:24:fd:21:21:95:1d: 1d:48:6c:88:ed:1d:60:e5:97:d2:c1:f4:52:5c:c7: 3d:79:35:96:dc:32:99:56:a9:f4:56:5e:9f:89:27: be:71:b4:77:7a:a5:58:df:7b:27:a9:6a:af:77:71: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.88.0/22 185.113.16.0/22 IPv6: 2a03:5bc0::/32 2a06:6600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199481 Signature Algorithm: sha256WithRSAEncryption 28:3f:c5:78:71:5a:98:ce:59:d0:8f:27:9b:60:22:b9:1e:00: 7a:93:58:8d:2b:53:4d:5b:63:ea:f9:4c:0d:52:ad:aa:01:6b: b0:3d:fd:86:82:32:a7:8b:10:83:5c:d1:10:b3:1c:3b:9b:cd: 9e:01:f4:8c:c1:b2:07:8c:90:2c:78:c5:98:f6:5e:4c:f3:9c: ce:58:61:6e:f4:8e:a2:6b:1f:80:f0:6b:0f:a2:95:3f:e4:25: 1d:e0:ca:5c:d0:0e:61:7d:04:e7:7d:f3:04:e6:fb:d5:9a:ea: b4:0c:c1:b6:93:7d:eb:ab:69:d2:7b:f8:54:7b:b5:39:30:c2: b4:22:6c:97:a3:10:aa:fb:ea:f6:3b:3f:6d:42:e4:ab:3c:e0: 25:04:ba:be:62:36:7e:1e:41:e9:a2:fb:db:5e:93:61:e0:17: 66:cd:3f:09:4f:5c:22:3e:a9:51:84:2f:00:df:b2:82:7f:63: 82:1c:82:32:26:9c:ad:c8:a4:ee:a3:03:3a:0f:13:5b:0c:bb: 1a:83:4a:05:f1:13:e0:99:76:84:77:d9:9e:95:1e:45:4b:71: 4d:90:f8:f1:5e:ab:ff:91:7c:9f:ff:eb:ff:9f:6e:eb:ae:c6: d1:34:b7:09:5a:24:f6:08:34:70:6c:b0:a9:00:05:19:0f:07: 10:79:1f:f9 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt6yUEy7NxmzaW5q1rqzgfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzM3NzliODM4OGQwMDFmZGNiZGRjNDhhY2UyMjdmMDA5ODUwNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5NpnzqD0FwQ4xDj22br/OmIuZr/ iBi8RfEViB3u2ouOkz47xR+kl+8NhbeO/v13zqr9tykhqwwV+l6IitZ5P15nKW57 wVB36HSHtjmsrcQEqqNRu5toDxjJtO3qhnlDQXqqc4nZmN9O8fmCVQ6mQM+5URc+ lvCvNx8SzvZSZfUPz/mVP9i4JM2U9O+a0euLZ/5MIK3gOEztkgiXTudKoK7OEg1N VC74KJBhEXMD6pubvAlj4HaKAiLJb4qLJIyuaukAt91mQEJTeoIk/SEhlR0dSGyI 7R1g5ZfSwfRSXMc9eTWW3DKZVqn0Vl6fiSe+cbR3eqVY33snqWqvd3Fh9QIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFOM3ebg4jQAf3L3cSKziJ/AJhQZgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzlkYjMy Ni0xMTg5LTRhYzktYjQxMi1mMjk0ZDNiMTJjZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvOWRiMzI2 LTExODktNGFjOS1iNDEyLWYyOTRkM2IxMmNmZC8xLzR6ZDV1RGlOQUJfY3ZkeEly T0luOEFtRkJtQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuQpYAwQCuXEQMBQEAgACMA4DBQAqA1vAAwUD KgZmADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDCzkwDQYJKoZIhvcNAQELBQAD ggEBACg/xXhxWpjOWdCPJ5tgIrkeAHqTWI0rU01bY+r5TA1SraoBa7A9/YaCMqeL EINc0RCzHDubzZ4B9IzBsgeMkCx4xZj2XkzznM5YYW70jqJrH4Dwaw+ilT/kJR3g ylzQDmF9BOd98wTm+9Wa6rQMwbaTfeuradJ7+FR7tTkwwrQibJejEKr76vY7P21C 5Ks84CUEur5iNn4eQemi+9tek2HgF2bNPwlPXCI+qVGELwDfsoJ/Y4IcgjImnK3I pO6jAzoPE1sMuxqDSgXxE+CZdoR32Z6VHkVLcU2Q+PFeq/+RfJ//6/+fbuuuxtE0 twlaJPYINHBssKkABRkPBxB5H/k= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:38 2026 by rpki-client