This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer (raw, json) Hash identifier: IONw/JkuCD/9eg8pG/3IKZHQNFN+Pa0sCnPRRKCG5M0= Subject key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366FA5D3BEDBE4142B8367DBD59ACD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202462 IP: 194.113.240.0/23 IP: 2001:67c:97c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6f:a5:d3:be:db:e4:14:2b:83:67:db:d5:9a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:fa:5b:e6:4d:45:bf:6e:81:14:23:8e:b2: c2:33:2a:71:f2:5d:7c:ef:06:01:df:40:49:67:75: c8:6a:85:24:25:15:53:ef:34:b6:29:90:39:6a:6d: c9:57:b1:94:83:84:6e:45:9c:93:2f:99:97:07:e1: 0f:6f:18:2d:15:fb:17:d5:1d:c6:67:a6:75:ba:5e: 53:f9:c7:d4:9b:e1:fa:3b:6e:90:dc:e6:10:9d:9d: a0:dd:86:69:ab:61:f6:b6:ea:47:84:92:e4:cb:9f: a4:2f:ea:7d:91:8f:f2:65:90:87:fd:6f:6f:13:67: 49:36:81:5b:13:b6:ff:cd:59:79:87:e0:a0:bb:af: 13:a9:3f:4e:07:2e:90:9e:25:45:61:b5:5f:27:08: df:f9:43:62:f7:d0:24:23:6f:37:84:f0:99:a9:5f: 81:06:3f:74:94:be:68:0a:49:5d:4f:e0:98:67:46: b0:99:7d:43:fd:64:c7:e8:ce:32:ba:3f:ea:d0:84: 7f:1b:8a:11:17:dc:e4:a6:a8:e0:9b:b3:31:90:26: 8c:57:24:02:08:a6:96:62:e7:e6:0a:72:e9:84:6b: ff:2c:98:7f:cc:08:50:7e:74:63:91:ce:b6:1a:23: 39:c2:41:99:05:b2:e6:21:01:eb:e6:68:71:cd:b2: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.240.0/23 IPv6: 2001:67c:97c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202462 Signature Algorithm: sha256WithRSAEncryption 8a:35:25:53:ea:8f:b9:b3:fb:af:78:2d:a5:98:b3:48:51:63: 18:6a:79:4e:f7:65:65:04:19:b8:ec:b5:a2:83:5b:2b:13:1e: 4b:ae:53:f9:9a:4a:3d:98:31:62:af:9d:85:a6:e8:87:13:56: 35:7f:2f:d6:77:c1:71:f2:fb:17:46:d2:dc:e8:ba:80:da:dd: c0:55:b4:ae:23:02:9d:fb:5c:6c:f4:7d:68:b9:ba:36:49:82: af:a2:0b:62:e7:4f:5d:ae:8c:81:48:9c:19:ca:e1:18:c3:f5: c5:d2:10:02:eb:d7:26:b1:b6:2f:1f:2c:13:6a:16:6e:f8:07: f2:a8:78:bb:8b:b8:99:73:60:ab:0a:3f:bc:b2:7f:83:38:5a: 5e:c1:f8:54:12:bc:6b:e9:b1:46:fc:37:0d:bc:de:49:47:b5: 32:c4:4a:7e:f2:ea:59:bc:07:e5:3e:5c:ff:0c:d7:ae:5d:83: 71:2f:d2:71:68:ce:32:95:10:3c:fc:97:9e:33:d6:3a:94:a2: 48:e8:74:db:63:ea:dc:8d:fc:4a:3d:e7:ff:20:39:48:9f:10: e7:65:77:4e:16:cc:5b:85:02:0a:8d:77:f2:97:6d:9f:d5:6c: c5:72:59:c9:a8:02:c7:ed:cf:8e:f2:d1:81:ee:98:1f:a9:5c: 05:24:df:4c -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7Nm+l077b5BQrg2fb1ZrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTRlMmNmMDAyZDQ1ZmY5YWRlMmFiODY0M2FkYmZlMDgzY2ExMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzD6W+ZNRb9ugRQjjrLCMypx8l18 7wYB30BJZ3XIaoUkJRVT7zS2KZA5am3JV7GUg4RuRZyTL5mXB+EPbxgtFfsX1R3G Z6Z1ul5T+cfUm+H6O26Q3OYQnZ2g3YZpq2H2tupHhJLky5+kL+p9kY/yZZCH/W9v E2dJNoFbE7b/zVl5h+Cgu68TqT9OBy6QniVFYbVfJwjf+UNi99AkI283hPCZqV+B Bj90lL5oCkldT+CYZ0awmX1D/WTH6M4yuj/q0IR/G4oRF9zkpqjgm7MxkCaMVyQC CKaWYufmCnLphGv/LJh/zAhQfnRjkc62GiM5wkGZBbLmIQHr5mhxzbJivwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFEpOLPAC1F/5reKrhkOtv+CDyhLQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzMwODc5 Yy05NzY2LTRhMDUtYWRiZi05YWM4MWVmNDU5MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMzA4Nzlj LTk3NjYtNGEwNS1hZGJmLTlhYzgxZWY0NTkyYy8xL1NrNHM4QUxVWF9tdDRxdUdR NjJfNElQS0V0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwnHwMA8EAgACMAkDBwAgAQZ8CXwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAxbeMA0GCSqGSIb3DQEBCwUAA4IBAQCKNSVT6o+5 s/uveC2lmLNIUWMYanlO92VlBBm47LWig1srEx5LrlP5mko9mDFir52FpuiHE1Y1 fy/Wd8Fx8vsXRtLc6LqA2t3AVbSuIwKd+1xs9H1oubo2SYKvogti509droyBSJwZ yuEYw/XF0hAC69cmsbYvHywTahZu+AfyqHi7i7iZc2CrCj+8sn+DOFpewfhUErxr 6bFG/DcNvN5JR7UyxEp+8upZvAflPlz/DNeuXYNxL9JxaM4ylRA8/JeeM9Y6lKJI 6HTbY+rcjfxKPef/IDlInxDnZXdOFsxbhQIKjXfyl22f1WzFclnJqALH7c+O8tGB 7pgfqVwFJN9M -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:41 2026 by rpki-client