This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer (raw, json) Hash identifier: AiDui6oo6voD6L3X2uXWIB/WL/adWgnX8YDU0EeSkwM= Subject key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75B715AD3C7F84ABFB76EC1F27415 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198023 IP: 178.239.0.0/20 IP: 185.60.184.0/22 IP: 2a04:e600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5b:71:5a:d3:c7:f8:4a:bf:b7:6e:c1:f2:74:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:bf:ed:92:c0:78:7f:bd:dc:97:52:ad:25: af:a7:50:80:0e:3e:be:e5:15:5e:e7:8f:21:a3:59: 38:74:f8:27:6b:3a:a7:68:28:7e:a1:38:37:1a:34: 39:54:bd:49:c3:2e:a4:ea:3d:92:69:fd:80:7d:dd: 0e:5c:f0:8c:23:f8:af:c1:ed:ed:bb:b2:58:bc:0c: be:b6:66:df:81:af:40:0e:96:4c:88:87:f3:14:ca: b8:8d:54:be:3d:9d:04:05:bd:00:3c:1e:63:5b:8e: 7a:ef:6b:fc:68:0c:08:6e:65:3f:86:2d:d1:4a:76: a9:f5:d5:88:9f:fd:51:5d:06:8a:5d:e7:df:74:1b: 40:08:ee:71:7a:d8:a0:29:9f:84:26:33:e9:5d:00: e4:8d:43:bf:7c:40:45:5a:0e:95:0a:b2:64:6c:c3: fc:c8:a6:f2:c6:45:c4:f7:55:63:75:58:54:cb:58: 5b:34:08:16:69:cb:77:1b:3f:14:5b:ec:c1:1b:27: ed:95:12:e6:4f:a0:d8:ba:3b:d8:0e:bc:0a:ec:64: 6a:25:ff:a8:2a:27:c0:ea:b9:79:b7:2c:e4:9b:a1: 55:d2:c3:2c:b5:68:07:a9:0c:64:94:d1:bf:4c:b7: 39:4a:4d:70:9d:ed:fb:1d:e8:ae:ee:fc:5a:08:e4: 8b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.0.0/20 185.60.184.0/22 IPv6: 2a04:e600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198023 Signature Algorithm: sha256WithRSAEncryption 18:e7:f6:bd:db:fc:6a:ae:fb:74:48:22:97:e9:a1:e2:0a:9f: 41:88:f1:4d:9d:57:4d:1c:69:95:0a:62:46:bb:4c:2e:f0:57: d7:71:0c:1f:47:6c:4e:f5:ec:52:35:f6:d2:15:ee:ac:52:05: 9c:01:7c:f3:98:57:f2:91:6e:26:5a:0c:37:47:7f:28:60:e8: d4:3f:31:fa:f4:6c:ff:21:06:79:cb:ea:c7:03:b2:fa:cf:7c: 57:ba:60:61:f0:fa:32:47:46:8d:89:6a:52:9d:10:66:2b:aa: 8b:1d:aa:5f:fa:ca:89:82:ab:41:56:5c:5f:40:c3:92:bb:95: 46:59:d3:4b:fa:8c:71:d2:95:cb:54:9d:24:80:0e:0b:cc:9a: 1c:e4:29:75:be:11:dd:6d:13:be:80:54:d4:ed:79:a3:24:64: 48:8b:17:17:79:e9:8a:b1:a4:57:f1:3d:23:86:95:0c:e3:2b: c4:8c:b9:3e:2e:b6:38:88:bc:a9:e6:8d:fa:a2:90:8b:d9:82: fd:0b:ba:5b:8e:93:1a:49:1d:04:9d:44:21:0f:19:dc:b5:f6: 32:6d:b0:2a:26:d5:7b:04:3c:d6:b8:b3:a7:07:6e:18:c2:fa: 03:3b:f3:c4:8a:fd:d3:c6:41:fa:13:d4:cf:16:e1:45:2a:ea: eb:c9:f3:0e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3x1txWtPH+Eq/t27B8nQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjg0YTlkYmU2MzEwZDdiZmFlODM4YmEyMmZhMDQ3MTI2YjU1NDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFS/7ZLAeH+93JdSrSWvp1CADj6+ 5RVe548ho1k4dPgnazqnaCh+oTg3GjQ5VL1Jwy6k6j2Saf2Afd0OXPCMI/ivwe3t u7JYvAy+tmbfga9ADpZMiIfzFMq4jVS+PZ0EBb0APB5jW45672v8aAwIbmU/hi3R Snap9dWIn/1RXQaKXeffdBtACO5xetigKZ+EJjPpXQDkjUO/fEBFWg6VCrJkbMP8 yKbyxkXE91VjdVhUy1hbNAgWact3Gz8UW+zBGyftlRLmT6DYujvYDrwK7GRqJf+o KifA6rl5tyzkm6FV0sMstWgHqQxklNG/TLc5Sk1wne37Heiu7vxaCOSL1wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAuEqdvmMQ17+ug4uiL6BHEmtVRYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2E3NjMz Zi0yNDE3LTRlMDMtOTRhOS1hODVkZGUyMTQ1ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvYTc2MzNm LTI0MTctNGUwMy05NGE5LWE4NWRkZTIxNDVlYS8xL0M0U3AyLVl4RFh2NjZEaTZJ dm9FY1NhMVZGZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEsu8AAwQCuTy4MA0EAgACMAcDBQMqBOYAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMFhzANBgkqhkiG9w0BAQsFAAOCAQEAGOf2 vdv8aq77dEgil+mh4gqfQYjxTZ1XTRxplQpiRrtMLvBX13EMH0dsTvXsUjX20hXu rFIFnAF885hX8pFuJloMN0d/KGDo1D8x+vRs/yEGecvqxwOy+s98V7pgYfD6MkdG jYlqUp0QZiuqix2qX/rKiYKrQVZcX0DDkruVRlnTS/qMcdKVy1SdJIAOC8yaHOQp db4R3W0TvoBU1O15oyRkSIsXF3npirGkV/E9I4aVDOMrxIy5Pi62OIi8qeaN+qKQ i9mC/Qu6W46TGkkdBJ1EIQ8Z3LX2Mm2wKibVewQ81rizpwduGML6AzvzxIr908ZB +hPUzxbhRSrq68nzDg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:19 2026 by rpki-client