This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer File: X4rRNUEr-QQb5f0I50okEg2z7sc.cer (raw, json) Hash identifier: lINy6X4LoHbhIHNkDqfjTqvSXY89m0uL7yaMzjPK/2o= Subject key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7ECF500A55A8AA77E9224D3B2FC18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198367 IP: 91.234.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ec:f5:00:a5:5a:8a:a7:7e:92:24:d3:b2:fc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:18:cf:a1:48:e3:78:1d:12:90:36:2e:e2: ef:b1:62:cb:6e:51:16:5e:6b:2e:15:b9:78:e1:15: f3:7a:d1:5f:d1:e5:5e:c1:56:4a:ec:77:cf:f0:e7: 35:c4:4a:0a:58:5d:0d:cb:6c:db:81:e1:70:a4:60: a9:8f:9f:81:f7:bc:c9:6d:85:1f:49:23:56:15:06: f0:27:c8:d6:95:ca:16:ee:54:7c:66:cd:f8:7a:6f: a0:3c:a0:b4:d1:ec:fb:a3:b4:1f:6f:27:bb:61:3f: 83:68:6c:33:ac:9c:4f:b1:f8:49:d7:73:43:32:8a: 27:cf:19:c9:af:3b:08:30:24:0a:4a:5f:36:e3:3b: 7e:0b:b4:33:ae:ab:27:23:75:79:56:15:0b:29:f9: a8:cc:a5:aa:69:ad:af:69:9d:4f:b5:30:a8:01:f8: a6:c5:f1:bf:1a:0a:f1:42:3f:c0:f8:aa:d3:d0:5b: fc:28:9e:2e:86:c2:a4:39:81:9f:10:b2:23:d4:2f: 2e:46:aa:2f:49:da:80:61:d4:a8:cf:d6:7b:07:c3: ee:d8:7f:ed:f2:41:9e:8c:31:a9:41:ab:cd:be:41: be:26:4d:ef:67:61:94:32:f7:0a:db:93:d4:5f:c8: a9:1d:50:fa:e7:25:6b:29:ec:e3:39:0d:0e:d3:8f: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.60.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198367 Signature Algorithm: sha256WithRSAEncryption 0e:8f:ce:7c:79:e5:6d:d0:e4:dc:d1:42:2f:f8:30:09:ed:af: 6a:7e:21:c2:5f:b5:70:ce:c0:07:15:70:c0:5a:03:11:89:a0: 27:8f:6c:db:9f:5b:1e:26:55:89:24:f0:17:6d:10:51:f1:6c: ec:42:30:31:88:9d:f1:30:71:c0:d6:aa:79:1b:db:d9:c1:87: 2a:9d:c1:da:45:a2:e8:1d:22:f3:5e:1d:fc:79:a7:78:4c:d7: 97:01:96:38:3c:10:57:d4:65:66:1f:78:a4:56:df:2f:4e:22: c4:60:0b:b9:2a:d1:2a:9d:e7:84:f3:b5:40:e7:90:21:77:32: 9f:53:48:6c:7b:44:9e:6a:e4:d0:48:39:1d:25:93:d0:12:ee: 50:98:1a:61:47:3e:58:82:96:88:56:bf:4d:a2:b2:51:8f:e9: cf:22:4a:fb:53:e8:2a:b9:59:8f:90:67:7d:16:cc:4c:d2:1d: 29:15:cd:d8:b2:0a:3f:1c:6d:a8:19:5d:02:93:5f:d2:39:da: 4f:07:1f:28:98:9e:22:51:c6:2d:d7:f1:60:dc:d9:c7:1e:a3: d0:be:f7:4b:2b:41:4e:72:47:7b:66:58:a0:40:a0:ce:2d:9f: a5:3d:d9:37:39:fe:4e:0f:d5:7a:9f:05:35:78:72:6d:36:2f: 9c:d6:2c:f8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x+z1AKVaiqd+kiTTsvwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjhhZDEzNTQxMmJmOTA0MWJlNWZkMDhlNzRhMjQxMjBkYjNlZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7QYz6FI43gdEpA2LuLvsWLLblEW XmsuFbl44RXzetFf0eVewVZK7HfP8Oc1xEoKWF0Ny2zbgeFwpGCpj5+B97zJbYUf SSNWFQbwJ8jWlcoW7lR8Zs34em+gPKC00ez7o7Qfbye7YT+DaGwzrJxPsfhJ13ND MoonzxnJrzsIMCQKSl824zt+C7QzrqsnI3V5VhULKfmozKWqaa2vaZ1PtTCoAfim xfG/GgrxQj/A+KrT0Fv8KJ4uhsKkOYGfELIj1C8uRqovSdqAYdSoz9Z7B8Pu2H/t 8kGejDGpQavNvkG+Jk3vZ2GUMvcK25PUX8ipHVD65yVrKezjOQ0O04+lFwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF+K0TVBK/kEG+X9COdKJBINs+7HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2UzZWZj OC01ZjFkLTRlYjgtOTcyMC0zNzk3MzNhYjM4Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZTNlZmM4 LTVmMWQtNGViOC05NzIwLTM3OTczM2FiMzhjZC8xL1g0clJOVUVyLVFRYjVmMEk1 MG9rRWcyejdzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW+o8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMG3zANBgkqhkiG9w0BAQsFAAOCAQEADo/OfHnlbdDk3NFCL/gwCe2van4hwl+1 cM7ABxVwwFoDEYmgJ49s259bHiZViSTwF20QUfFs7EIwMYid8TBxwNaqeRvb2cGH Kp3B2kWi6B0i814d/HmneEzXlwGWODwQV9RlZh94pFbfL04ixGALuSrRKp3nhPO1 QOeQIXcyn1NIbHtEnmrk0Eg5HSWT0BLuUJgaYUc+WIKWiFa/TaKyUY/pzyJK+1Po KrlZj5BnfRbMTNIdKRXN2LIKPxxtqBldApNf0jnaTwcfKJieIlHGLdfxYNzZxx6j 0L73SytBTnJHe2ZYoECgzi2fpT3ZNzn+Tg/Vep8FNXhybTYvnNYs+A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:58 2026 by rpki-client