This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer File: _4MmzOvF_DL70ONP7n85u6iPuaI.cer (raw, json) Hash identifier: 3/E5v49WG0FjBQI57iB3o8XStfH3xfioJCZf5tcMcbI= Subject key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C809F7CD2A7C1137F1DB402B4D4A68B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51811 IP: 91.205.180.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9f:7c:d2:a7:c1:13:7f:1d:b4:02:b4:d4:a6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:1e:b4:c5:08:52:1e:36:31:da:20:46:ca: 20:ab:41:7a:db:2c:f5:ee:c1:52:0b:d2:f1:83:0a: 13:85:98:72:3c:72:0f:94:cf:a9:f5:9a:eb:77:41: 5d:08:bf:96:89:b5:2c:27:5f:c3:28:c3:e0:b1:21: 52:f3:2b:47:3f:25:60:7a:64:a0:cd:1e:d0:17:e6: f6:65:08:eb:b1:47:5d:dc:04:04:d6:48:f2:2f:bd: 37:77:a0:46:21:48:13:17:c6:72:2f:89:5e:32:37: 5d:58:d2:96:9c:69:4a:47:bf:0d:14:16:3a:0d:0d: 56:e7:36:8b:fd:d6:e2:83:b8:23:d5:e7:db:68:de: c9:ee:29:b0:2e:37:1e:08:8f:e1:e3:cd:79:16:70: c0:fd:b6:db:27:67:f1:7f:22:3d:ec:de:06:52:ff: 5e:35:bb:1e:70:46:e0:99:bc:1e:02:1b:f0:90:a3: 8e:1f:24:af:0d:64:63:1e:c1:a1:e8:f3:44:65:ba: 23:c6:2a:bb:d1:a4:29:5a:81:fc:a7:19:d2:d7:38: 42:1a:53:9c:1a:40:10:23:ff:45:f2:87:f3:a7:44: a9:d8:b5:be:9e:fd:73:6b:92:2e:0e:9b:18:ca:50: 77:8e:a9:1b:7d:12:6b:24:43:41:ba:a1:cd:5d:e8: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51811 Signature Algorithm: sha256WithRSAEncryption 2c:bd:f6:33:2a:3c:14:ac:c5:e6:5d:20:6f:78:8d:8b:9c:44: 0b:73:cc:ba:fd:fb:5a:da:28:e7:b3:98:63:c3:e9:1f:8b:b6: d1:91:ee:4b:a8:ee:ba:e3:b3:56:39:33:b3:ff:ee:6b:60:68: eb:2a:74:bf:90:2e:21:48:0c:10:4d:2f:ea:80:15:79:f9:61: ca:b7:c6:0a:e8:49:4a:81:58:e5:fc:00:e2:4e:31:92:7b:06: bf:3d:d9:62:4b:5d:d7:8a:7c:39:f7:98:f5:e2:6a:0e:22:4d: c1:b5:43:29:5c:ee:44:96:77:c8:da:8d:97:5e:e1:ef:f7:cc: c7:02:06:a5:d0:96:47:1f:36:06:f0:72:e7:c2:ed:fa:f7:9a: ec:42:f7:95:6a:16:b8:0c:58:7e:5b:f6:c4:aa:d2:3e:34:c6: 20:6d:4c:7a:e6:1a:1f:03:a2:bf:ff:80:96:d3:69:03:f4:ae: ad:f6:d9:2f:b2:a0:88:87:d9:57:d1:4f:df:a8:5f:52:34:f4: e9:06:61:b6:22:ea:da:28:92:d2:7e:a8:4a:d5:3e:f1:7c:1f: 1d:3b:8e:13:be:5c:d9:58:cd:84:eb:1f:e1:49:32:c6:c8:7f: f5:fe:75:1c:7b:58:50:9c:30:43:dc:2c:d3:1e:ac:81:86:4f: 1e:73:19:b7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gJ980qfBE38dtAK01KaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjgzMjZjY2ViYzVmYzMyZmJkMGUzNGZlZTdmMzliYmE4OGZiOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27AetMUIUh42MdogRsogq0F62yz1 7sFSC9LxgwoThZhyPHIPlM+p9Zrrd0FdCL+WibUsJ1/DKMPgsSFS8ytHPyVgemSg zR7QF+b2ZQjrsUdd3AQE1kjyL703d6BGIUgTF8ZyL4leMjddWNKWnGlKR78NFBY6 DQ1W5zaL/dbig7gj1efbaN7J7imwLjceCI/h4815FnDA/bbbJ2fxfyI97N4GUv9e NbsecEbgmbweAhvwkKOOHySvDWRjHsGh6PNEZbojxiq70aQpWoH8pxnS1zhCGlOc GkAQI/9F8ofzp0Sp2LW+nv1za5IuDpsYylB3jqkbfRJrJENBuqHNXejNYQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFP+DJszrxfwy+9DjT+5/Obuoj7miMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzZmNWI2 YS1mNGJiLTRmZGUtOGE1MS04YjEzNDRiN2Q1YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNmY1YjZh LWY0YmItNGZkZS04YTUxLThiMTM0NGI3ZDVhNi8xL180TW16T3ZGX0RMNzBPTlA3 bjg1dTZpUHVhSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW820MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDKYzANBgkqhkiG9w0BAQsFAAOCAQEALL32Myo8FKzF5l0gb3iNi5xEC3PMuv37 Wtoo57OYY8PpH4u20ZHuS6juuuOzVjkzs//ua2Bo6yp0v5AuIUgMEE0v6oAVeflh yrfGCuhJSoFY5fwA4k4xknsGvz3ZYktd14p8OfeY9eJqDiJNwbVDKVzuRJZ3yNqN l17h7/fMxwIGpdCWRx82BvBy58Lt+vea7EL3lWoWuAxYflv2xKrSPjTGIG1MeuYa HwOiv/+AltNpA/SurfbZL7KgiIfZV9FP36hfUjT06QZhtiLq2iiS0n6oStU+8Xwf HTuOE75c2VjNhOsf4Ukyxsh/9f51HHtYUJwwQ9ws0x6sgYZPHnMZtw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:38 2026 by rpki-client