This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer File: N4G6usaSUnGxeYF1FeBuahCs9rQ.cer (raw, json) Hash identifier: AIXjb0dcRwnErmO25OhIQ8KdRst69JTWEhdSHaQB3jM= Subject key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1293E4BE6F995178FD2ACBA364B061 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204538 IP: 185.245.204.0/22 IP: 212.108.105.0/24 IP: 2a0d:6a80::/29 IP: 2a10:10c0::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:93:e4:be:6f:99:51:78:fd:2a:cb:a3:64:b0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3781babac6925271b179817515e06e6a10acf6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:73:aa:91:ee:70:31:83:29:c5:6f:27:55: 81:cf:08:47:99:a0:e1:ae:08:66:35:f5:5a:b1:6e: 16:dd:38:89:43:3e:f7:60:f1:69:0c:9a:1c:25:96: b5:19:6a:a7:0e:d1:b8:7b:ea:bc:ac:b2:3b:5a:4d: 29:86:7d:10:bc:92:d1:77:61:04:e0:13:20:28:08: f6:3f:8e:3a:e5:f0:1c:35:13:76:e8:c6:fe:c0:7c: e9:f2:fa:7b:34:45:d1:d8:04:a9:75:75:fc:80:33: ca:67:8b:f3:ce:96:e8:07:1d:df:dc:6c:0a:3a:26: 88:61:da:c9:63:53:62:1e:61:b6:11:4c:1e:5d:36: cb:6c:9c:f0:ea:20:8d:f0:83:6f:e9:55:44:11:d3: 9a:0c:a9:86:b9:c0:34:85:66:a2:0f:b3:d8:7d:54: ce:b5:b5:6d:ee:6b:18:be:7e:0d:70:0a:4a:e9:e1: 8a:c7:d4:c0:cf:4f:c5:e4:a5:a3:2c:96:2a:6d:02: f3:29:52:99:40:0b:54:41:65:7a:3e:66:4e:d4:a9: 84:72:e7:4b:79:05:6e:86:2a:36:3f:6c:ba:44:cd: 2b:27:c7:91:71:43:5b:54:d6:cc:5f:28:54:9a:92: 3e:9f:3d:c7:fb:ff:02:14:1d:79:22:40:3b:01:17: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.204.0/22 212.108.105.0/24 IPv6: 2a0d:6a80::/29 2a10:10c0::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204538 Signature Algorithm: sha256WithRSAEncryption 4a:dc:76:71:14:57:ff:71:9c:58:6e:a1:94:23:05:ae:d6:dd: ff:ab:05:0b:66:39:e1:2d:45:d5:9c:16:ed:1d:fc:6a:bf:37: 85:0b:12:69:2e:2f:9e:40:75:d0:63:40:74:32:70:d6:fe:91: 38:7d:9d:c1:6f:67:be:98:0f:e0:c3:ef:c2:7f:4a:a4:bf:c2: 1a:04:74:4e:5f:5f:76:49:ed:66:ef:d4:62:0b:79:43:48:18: a4:72:3f:3b:02:2c:74:bd:f1:b5:ba:57:5e:e1:58:ba:c4:17: 05:44:fe:12:40:9b:ef:66:aa:08:83:3e:5c:fb:a5:3f:4e:6f: a3:6d:73:ca:b0:3f:5a:a4:2a:1a:76:fe:d0:ba:1d:15:63:55: 49:5c:bb:56:3a:02:6d:eb:f2:8f:78:4a:eb:3f:16:e8:01:9d: 96:68:ff:55:8a:86:89:c2:b9:19:28:10:81:e2:50:39:c7:7c: e2:0f:82:4d:5c:51:e8:d5:74:48:81:7f:fe:8c:2d:cf:f9:fe: c2:fc:5b:ba:39:55:eb:e3:41:cc:92:98:97:7b:45:e2:7a:a7: 3d:7a:be:70:4b:cc:d2:bd:44:7c:c3:e5:09:5a:73:9b:d1:2d: 1f:db:5b:52:e1:13:59:61:e6:2e:0f:5d:07:1f:c9:4d:8d:2d: 9a:29:39:49 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt8EpPkvm+ZUXj9KsujZLBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzgxYmFiYWM2OTI1MjcxYjE3OTgxNzUxNWUwNmU2YTEwYWNmNmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh9zqpHucDGDKcVvJ1WBzwhHmaDh rghmNfVasW4W3TiJQz73YPFpDJocJZa1GWqnDtG4e+q8rLI7Wk0phn0QvJLRd2EE 4BMgKAj2P4465fAcNRN26Mb+wHzp8vp7NEXR2ASpdXX8gDPKZ4vzzpboBx3f3GwK OiaIYdrJY1NiHmG2EUweXTbLbJzw6iCN8INv6VVEEdOaDKmGucA0hWaiD7PYfVTO tbVt7msYvn4NcApK6eGKx9TAz0/F5KWjLJYqbQLzKVKZQAtUQWV6PmZO1KmEcudL eQVuhio2P2y6RM0rJ8eRcUNbVNbMXyhUmpI+nz3H+/8CFB15IkA7ARfGfQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFDeBurrGklJxsXmBdRXgbmoQrPa0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzhmODNj Mi0zYmIzLTRkNDctODAzMS1kZTU3MWI4OTYxOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvOGY4M2My LTNiYjMtNGQ0Ny04MDMxLWRlNTcxYjg5NjE4ZC8xL040RzZ1c2FTVW5HeGVZRjFG ZUJ1YWhDczlyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCufXMAwQA1GxpMBQEAgACMA4DBQMqDWqAAwUC KhAQwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDHvowDQYJKoZIhvcNAQELBQAD ggEBAErcdnEUV/9xnFhuoZQjBa7W3f+rBQtmOeEtRdWcFu0d/Gq/N4ULEmkuL55A ddBjQHQycNb+kTh9ncFvZ76YD+DD78J/SqS/whoEdE5fX3ZJ7Wbv1GILeUNIGKRy PzsCLHS98bW6V17hWLrEFwVE/hJAm+9mqgiDPlz7pT9Ob6Ntc8qwP1qkKhp2/tC6 HRVjVUlcu1Y6Am3r8o94Sus/FugBnZZo/1WKhonCuRkoEIHiUDnHfOIPgk1cUejV dEiBf/6MLc/5/sL8W7o5VevjQcySmJd7ReJ6pz16vnBLzNK9RHzD5Qlac5vRLR/b W1LhE1lh5i4PXQcfyU2NLZopOUk= -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:20 2026 by rpki-client