This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer File: c4DHWfVY-ca-iN0iakOdmcnqzww.cer (raw, json) Hash identifier: ncFZfSbLNorGOMjpEgdb68NnybaZ96HB1RLLbNc7qd0= Subject key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38036CD790AA1C60164C6B99383785 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15870 IP: 91.216.46.0/24 IP: 2001:67c:1b28::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:03:6c:d7:90:aa:1c:60:16:4c:6b:99:38:37:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:0b:50:f9:b8:24:eb:5d:12:64:0b:47:79: 72:ec:4b:5c:8e:a5:a1:1a:fa:e1:b5:2b:c7:1d:cf: 5d:54:8a:dd:7a:12:99:bd:58:94:51:93:94:2c:76: 72:cd:1c:ba:70:64:4d:26:60:85:90:7a:2e:48:32: c1:cd:a9:31:45:69:93:af:13:a7:e8:08:30:4e:dc: 28:11:f7:1a:dd:54:36:60:16:14:6d:69:74:ce:b1: 1b:fb:1c:7a:74:5d:d0:da:7c:b2:20:d2:80:d3:9d: 97:30:94:c3:c4:d4:61:fa:3e:35:5a:c1:bf:22:82: 3b:5e:fe:ea:e0:4f:dc:39:ff:28:01:ef:f0:ad:68: 12:12:be:79:62:95:03:63:47:6a:41:05:55:7b:33: d9:2c:e0:85:89:e0:a4:eb:93:32:19:8f:47:36:67: 19:f0:ea:c7:7f:95:f3:48:b6:df:db:c1:52:ce:eb: 63:e4:a4:73:28:a8:5f:a3:03:c4:87:6a:75:5d:8d: 99:a7:03:d2:a5:ac:5c:f7:33:03:dd:51:0c:5e:79: a5:f3:d4:e0:72:27:f9:8c:58:83:37:47:19:11:99: ad:81:90:0f:ea:61:58:a9:ba:2e:36:a7:f6:47:cc: 65:df:50:88:7f:0a:f6:ee:a9:84:51:d5:48:a2:48: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.46.0/24 IPv6: 2001:67c:1b28::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15870 Signature Algorithm: sha256WithRSAEncryption 5f:7a:a9:32:31:42:13:90:e7:94:1d:42:01:ba:dd:d2:94:ae: 24:83:4c:3a:80:ce:f8:83:76:be:c9:bb:0d:0b:6f:c7:98:d7: ff:88:e1:39:e7:8b:b7:4c:bc:00:a3:17:2a:1b:a3:0a:6a:ae: 58:e7:92:ee:67:1b:da:b8:cb:b1:f8:a2:d6:ba:8e:09:62:2a: 82:cb:30:43:93:da:94:55:e1:7e:0f:a5:10:83:b5:db:8f:9f: 2a:14:17:21:19:4a:78:8b:ec:17:f9:29:1a:f6:de:40:1e:39: 1a:77:18:4e:cc:d3:79:e7:fb:60:6b:7e:79:cb:24:d6:46:d0: 4b:79:d0:56:a1:f2:81:8d:a7:6b:41:66:b3:40:40:17:b0:91: 20:bf:9c:d2:b5:e4:f9:3c:19:d8:40:a5:cf:08:e0:be:d7:93: 35:d5:0e:d6:48:b4:b6:46:ba:e5:c8:81:7d:02:ea:2d:01:ee: 74:51:d4:cb:ea:2e:46:01:24:f0:cc:01:3b:09:26:2c:7f:3a: a6:f2:86:c8:e4:0f:dc:75:d5:a4:aa:1b:b1:0c:72:e8:69:00: 66:4c:96:8e:7d:ba:ac:56:f1:11:57:b9:dd:ef:03:29:8c:47: a8:ad:45:29:e4:c3:1b:72:bb:83:84:aa:66:9f:12:d9:a2:71: 8b:0c:21:4f -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt+OANs15CqHGAWTGuZODeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzgwYzc1OWY1NThmOWM2YmU4OGRkMjI2YTQzOWQ5OWM5ZWFjZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQULUPm4JOtdEmQLR3ly7EtcjqWh GvrhtSvHHc9dVIrdehKZvViUUZOULHZyzRy6cGRNJmCFkHouSDLBzakxRWmTrxOn 6AgwTtwoEfca3VQ2YBYUbWl0zrEb+xx6dF3Q2nyyINKA052XMJTDxNRh+j41WsG/ IoI7Xv7q4E/cOf8oAe/wrWgSEr55YpUDY0dqQQVVezPZLOCFieCk65MyGY9HNmcZ 8OrHf5XzSLbf28FSzutj5KRzKKhfowPEh2p1XY2ZpwPSpaxc9zMD3VEMXnml89Tg cif5jFiDN0cZEZmtgZAP6mFYqbouNqf2R8xl31CIfwr27qmEUdVIokg+BwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFHOAx1n1WPnGvojdImpDnZnJ6s8MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2I4MDAw MC0wNjA5LTQ4OGYtYTM0YS0yY2E2MjZjZmVkNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvYjgwMDAw LTA2MDktNDg4Zi1hMzRhLTJjYTYyNmNmZWQ0NS8xL2M0REhXZlZZLWNhLWlOMGlh a09kbWNucXp3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9guMA8EAgACMAkDBwAgAQZ8GygwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICPf4wDQYJKoZIhvcNAQELBQADggEBAF96qTIxQhOQ 55QdQgG63dKUriSDTDqAzviDdr7Juw0Lb8eY1/+I4Tnni7dMvACjFyobowpqrljn ku5nG9q4y7H4ota6jgliKoLLMEOT2pRV4X4PpRCDtduPnyoUFyEZSniL7Bf5KRr2 3kAeORp3GE7M03nn+2BrfnnLJNZG0Et50Fah8oGNp2tBZrNAQBewkSC/nNK15Pk8 GdhApc8I4L7XkzXVDtZItLZGuuXIgX0C6i0B7nRR1MvqLkYBJPDMATsJJix/Oqby hsjkD9x11aSqG7EMcuhpAGZMlo59uqxW8RFXud3vAymMR6itRSnkwxtyu4OEqmaf EtmicYsMIU8= -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:48 2026 by rpki-client