This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer File: X4KumjBKwILBiiiRZm9kzugdXKg.cer (raw, json) Hash identifier: /paJDqYOxN7t8BLv2+km7Rd+zF+ngrkSLPDjQqo0gOA= Subject key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A376C6A8899720905D2FAA99DC2077 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41730 IP: 193.201.240.0/22 IP: 195.214.248.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:76:c6:a8:89:97:20:90:5d:2f:aa:99:dc:20:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:a0:e7:e1:a9:77:f3:e6:b2:0c:8f:42:22: 75:04:23:bd:8d:c7:fb:f5:5e:b8:47:53:2f:ff:95: c2:7a:c2:c9:ed:1a:6c:b0:d0:e3:20:fc:2f:b3:f8: f9:4a:0b:3a:4d:23:d4:36:32:57:57:23:a7:b2:00: 7b:6f:e4:69:7a:8c:dd:1c:43:e2:63:42:6e:2c:6e: 82:7c:fb:5b:a6:03:26:c8:c0:66:e6:78:50:c1:c3: 4d:b9:00:c3:9a:fb:38:89:d0:f8:73:da:5a:c2:0e: 86:ff:8f:52:42:2e:3c:90:79:22:15:14:bb:39:93: 00:e2:6f:cf:c5:fd:08:69:6f:65:57:ee:08:db:a3: ac:53:7f:d4:46:e6:9a:6c:2c:13:f8:81:db:29:1f: a6:62:3e:00:b8:5b:42:05:d6:eb:b9:25:0a:50:51: b0:0a:1e:b9:0d:2d:68:3c:14:0f:94:a5:c0:f3:8b: 90:3e:8e:7e:ee:60:d8:f9:60:d3:9d:20:5c:55:00: d2:bb:17:12:70:ba:6b:4d:bb:1a:46:3b:a7:ad:01: da:c8:bb:b6:9a:bc:de:bf:be:7d:dd:fb:89:00:59: 19:e6:3e:63:89:fa:ca:cc:94:0a:d6:5a:01:ff:fd: 32:34:4c:ee:4b:f7:e0:b5:1b:ca:03:bc:fd:25:7a: 43:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.240.0/22 195.214.248.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41730 Signature Algorithm: sha256WithRSAEncryption 79:a0:cd:ac:d8:7d:52:23:87:ec:67:11:44:f8:ec:b5:e6:ed: 8a:5d:3c:6e:1b:79:85:da:ea:d5:e4:a7:c1:72:55:bf:1f:20: f4:bd:7c:c9:3d:5c:e6:9a:b8:ec:a8:9b:45:17:c8:41:8c:9b: 8b:3e:4f:37:08:f5:26:0f:2f:f8:9f:5f:f5:c0:24:6b:38:61: 49:15:ff:ef:b9:7a:d6:19:28:ea:17:a5:47:8b:1b:29:b7:9e: 9e:83:e0:3e:52:ab:22:8e:52:4a:2b:71:2e:50:d5:05:95:25: b8:04:61:d0:dd:0e:40:30:fd:fe:66:cf:2b:60:27:08:76:f6: b4:3f:39:60:e2:a3:22:d0:ba:7a:23:c9:4a:2a:8b:ed:ae:65: 4e:a7:32:fa:e7:bb:c1:27:9b:5b:38:b9:41:58:5b:53:53:58: 52:3b:5b:9a:c6:5f:46:d9:ee:5f:56:8c:d8:b8:65:f0:b0:c2: b2:13:b0:43:00:bc:5a:88:99:5c:d7:9c:b4:a9:9a:52:97:e9: b9:06:e6:4a:22:43:2a:f3:d3:b9:8b:26:dc:c2:a3:8f:a4:bf: ff:cd:61:a0:90:6b:91:6c:dd:aa:4d:8e:a7:54:5f:b7:98:fe: d1:25:00:c4:a2:62:6d:9b:52:fe:39:53:44:b5:1d:88:f6:7c: 9a:05:d4:ce -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4o3bGqImXIJBdL6qZ3CB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjgyYWU5YTMwNGFjMDgyYzE4YTI4OTE2NjZmNjRjZWU4MWQ1Y2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgag5+Gpd/PmsgyPQiJ1BCO9jcf7 9V64R1Mv/5XCesLJ7RpssNDjIPwvs/j5Sgs6TSPUNjJXVyOnsgB7b+RpeozdHEPi Y0JuLG6CfPtbpgMmyMBm5nhQwcNNuQDDmvs4idD4c9pawg6G/49SQi48kHkiFRS7 OZMA4m/Pxf0IaW9lV+4I26OsU3/URuaabCwT+IHbKR+mYj4AuFtCBdbruSUKUFGw Ch65DS1oPBQPlKXA84uQPo5+7mDY+WDTnSBcVQDSuxcScLprTbsaRjunrQHayLu2 mrzev7593fuJAFkZ5j5jifrKzJQK1loB//0yNEzuS/fgtRvKA7z9JXpDMQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFF+CrpowSsCCwYookWZvZM7oHVyoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2Q2ZGJk OC02NDY2LTQ4ZDAtYTU5Ny0zZWM0NDczMTBkZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDZkYmQ4 LTY0NjYtNDhkMC1hNTk3LTNlYzQ0NzMxMGRmYi8xL1g0S3VtakJLd0lMQmlpaVJa bTlrenVnZFhLZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCwcnwAwQDw9b4MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCjAjANBgkqhkiG9w0BAQsFAAOCAQEAeaDNrNh9UiOH7GcRRPjstebt il08bht5hdrq1eSnwXJVvx8g9L18yT1c5pq47KibRRfIQYybiz5PNwj1Jg8v+J9f 9cAkazhhSRX/77l61hko6helR4sbKbeenoPgPlKrIo5SSitxLlDVBZUluARh0N0O QDD9/mbPK2AnCHb2tD85YOKjItC6eiPJSiqL7a5lTqcy+ue7wSebWzi5QVhbU1NY UjtbmsZfRtnuX1aM2Lhl8LDCshOwQwC8WoiZXNectKmaUpfpuQbmSiJDKvPTuYsm 3MKjj6S//81hoJBrkWzdqk2Op1Rft5j+0SUAxKJibZtS/jlTRLUdiPZ8mgXUzg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:14 2026 by rpki-client