This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer (raw, json) Hash identifier: dLDJnqOYudKy3kohe/oscVyjGzSdFKK0jdn1Wa2nS1A= Subject key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8DEE1DD3309781A830D3D54441E52 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47451 IP: 195.242.169.0/24 IP: 2001:678:408::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:de:e1:dd:33:09:78:1a:83:0d:3d:54:44:1e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6f:7e:16:4c:65:0b:87:34:4a:f5:43:ea:61: ec:fa:83:1f:2a:d0:33:aa:fa:c3:34:4f:f7:8d:b2: c8:2f:14:5b:be:79:65:d5:73:18:e1:66:f7:b8:6f: bd:2e:4c:48:75:6b:7e:d7:9c:d4:11:4c:1f:5f:a9: 17:5a:8f:56:65:fc:6b:e8:c1:9d:e0:48:a1:1c:97: 20:04:69:60:82:54:9c:9d:94:c8:a0:49:56:b0:24: af:be:02:1f:14:f6:52:2a:69:8b:e7:a4:14:06:de: 36:55:f4:2e:fa:97:cc:44:7d:3a:7a:f9:3b:4d:fa: 96:07:4c:4a:45:65:fb:83:fe:da:6f:4e:c4:b9:c2: de:72:79:70:6b:d6:1e:8d:49:1d:46:56:7a:a2:ca: 99:47:f3:f2:55:5f:6b:6d:4f:84:7b:a5:55:53:b9: e8:ce:5f:c3:a5:da:8d:7b:d5:e8:d0:60:e3:c9:2f: 02:8b:04:49:69:0f:ad:ac:90:74:c2:e6:14:bc:bd: 1a:03:9c:15:a4:e1:21:36:9c:dd:ac:d2:a8:fd:7e: d6:ae:b0:9a:02:f2:f4:cb:4a:56:b9:78:84:90:68: 30:f2:1f:58:03:36:c2:e5:20:0c:37:f7:2a:b1:13: d4:45:bf:2d:e6:ba:c8:15:7a:db:44:96:5b:32:5c: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.169.0/24 IPv6: 2001:678:408::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47451 Signature Algorithm: sha256WithRSAEncryption 39:63:7e:89:25:74:54:17:d7:ea:62:0b:ba:d3:27:c9:06:16: 9f:c6:88:2b:b3:cd:b4:c8:23:87:99:30:2f:83:e7:57:6a:5f: 70:18:10:3f:57:14:49:bf:a6:35:9a:04:9e:61:8d:54:14:6b: 21:39:46:a9:17:74:c6:c7:61:bc:83:e4:b8:72:6a:d9:e1:a1: d6:86:3b:37:60:40:b9:d1:a1:99:13:fe:be:d5:fe:da:fa:3b: 22:4c:bc:13:1f:f5:49:31:12:9a:04:ed:11:11:1f:be:78:62: cc:29:a3:09:a1:27:9a:4a:a5:be:50:bd:e5:15:c9:2f:35:ec: 03:1c:7f:21:e8:fe:20:3e:0e:f1:1a:b6:08:da:65:31:a8:45: 31:09:d8:c8:53:48:3a:e7:3f:51:c8:aa:ea:60:68:22:06:a2: 4b:e8:67:f7:29:c2:80:c1:0a:74:1f:d9:8c:b8:89:10:28:82: 8c:00:26:68:a8:94:4c:b1:00:24:af:bb:61:a5:1d:aa:fa:31: 96:6f:d3:c8:7b:71:74:b6:1d:fd:b7:a7:98:c2:b3:2e:f3:7c: 8b:72:68:7e:48:a0:0c:07:cb:df:9a:d2:a7:64:76:83:fb:1d: c9:34:b4:50:ac:3e:53:b9:54:80:e0:55:53:77:0e:f1:59:57: 9b:ed:db:0e -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt6yN7h3TMJeBqDDT1URB5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjgyYzhhZTc5NjcwYmZhZjNhYzhkYTg4NzQ4NTgxZTM5OTcyYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh29+FkxlC4c0SvVD6mHs+oMfKtAz qvrDNE/3jbLILxRbvnll1XMY4Wb3uG+9LkxIdWt+15zUEUwfX6kXWo9WZfxr6MGd 4EihHJcgBGlgglScnZTIoElWsCSvvgIfFPZSKmmL56QUBt42VfQu+pfMRH06evk7 TfqWB0xKRWX7g/7ab07EucLecnlwa9YejUkdRlZ6osqZR/PyVV9rbU+Ee6VVU7no zl/DpdqNe9Xo0GDjyS8CiwRJaQ+trJB0wuYUvL0aA5wVpOEhNpzdrNKo/X7WrrCa AvL0y0pWuXiEkGgw8h9YAzbC5SAMN/cqsRPURb8t5rrIFXrbRJZbMlzynwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFG+CyK55Zwv686yNqIdIWB45lyvrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjL2Q1NWFj ZC1lNWM3LTQzMDctYTA4Zi1hMzg2N2Q1MzkwMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvZDU1YWNk LWU1YzctNDMwNy1hMDhmLWEzODY3ZDUzOTAwYy8xL2I0TElybmxuQ19yenJJMm9o MGhZSGptWEstcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAw/KpMA8EAgACMAkDBwAgAQZ4BAgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDALlbMA0GCSqGSIb3DQEBCwUAA4IBAQA5Y36JJXRU F9fqYgu60yfJBhafxogrs820yCOHmTAvg+dXal9wGBA/VxRJv6Y1mgSeYY1UFGsh OUapF3TGx2G8g+S4cmrZ4aHWhjs3YEC50aGZE/6+1f7a+jsiTLwTH/VJMRKaBO0R ER++eGLMKaMJoSeaSqW+UL3lFckvNewDHH8h6P4gPg7xGrYI2mUxqEUxCdjIU0g6 5z9RyKrqYGgiBqJL6Gf3KcKAwQp0H9mMuIkQKIKMACZoqJRMsQAkr7thpR2q+jGW b9PIe3F0th39t6eYwrMu83yLcmh+SKAMB8vfmtKnZHaD+x3JNLRQrD5TuVSA4FVT dw7xWVeb7dsO -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:45 2026 by rpki-client