This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer File: g4dr-7WujP4Ra7X18oZKEWITqk8.cer (raw, json) Hash identifier: wEuU1L+4a8aH22D5jrre2WhVUa22BOuqRsdNEd0bh64= Subject key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB4A2B745E21A57B136087E43FEF8D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207520 IP: 185.211.40.0/24 IP: 188.116.41.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4a:2b:74:5e:21:a5:7b:13:60:87:e4:3f:ef:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:b1:14:96:63:fd:2d:82:00:14:02:f9:dc: 95:76:5f:23:85:94:6f:b7:bb:c1:64:fd:73:67:ae: eb:5f:83:0e:20:dd:2c:75:fc:27:ae:62:cc:f4:97: 68:a9:27:67:78:8c:46:9c:2c:dd:c4:4d:34:d0:0b: 09:86:eb:af:3f:27:e0:13:3a:3f:62:b8:f6:c7:d2: ef:69:bf:34:e7:65:cb:17:e0:e9:03:28:95:26:b1: fa:25:42:b2:88:19:6e:e4:cd:09:8e:04:de:47:b6: 4e:6f:70:38:40:a6:eb:ad:7d:30:d3:fa:82:28:fb: 01:8d:41:bc:97:c4:84:3c:86:bf:a9:de:2d:6a:3b: a2:c0:b5:ba:19:af:98:ff:a5:a3:1f:af:d7:90:a3: 09:e4:43:20:98:cc:4a:36:7f:dc:a3:58:62:fe:ce: 85:00:03:10:94:53:0f:67:ec:17:63:e2:46:55:4e: 0d:1c:2a:e9:cf:8a:d8:df:d7:78:ff:45:87:9a:9a: 28:c0:12:33:d1:82:bd:e8:5a:71:a4:34:0f:15:23: 17:ae:12:1a:f3:0f:11:56:b3:24:8c:b9:61:4b:88: dd:15:48:ce:cb:49:35:c0:f6:8f:56:d6:4e:d7:75: 83:ca:b9:3a:f5:ab:52:da:16:fe:2c:ed:07:58:3b: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.40.0/24 188.116.41.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207520 Signature Algorithm: sha256WithRSAEncryption 44:9a:f6:8e:18:c7:ed:3c:f0:36:78:e7:8a:67:1e:a5:3e:f7: 4d:b2:07:e6:b3:a0:e3:be:19:6b:a9:67:7a:4b:30:49:ef:99: 9a:d5:b0:0e:82:6a:f5:dc:a9:e8:07:d7:bb:89:6c:e5:f0:06: 38:0f:9b:e8:82:49:c3:3e:d1:ef:14:96:8a:92:a9:59:4d:44: 08:ca:6f:4f:50:bd:a5:66:93:10:ad:d1:1e:c0:7b:cd:27:56: 2e:1b:4d:92:14:03:d6:5c:28:0b:69:49:48:ad:d6:b0:5b:60: 92:93:8c:37:b4:54:41:81:65:74:f5:9c:68:94:06:f8:25:2a: b3:42:d6:1f:76:96:9d:fc:11:e9:70:20:7e:eb:69:94:36:51: 26:e2:67:a1:59:70:10:aa:20:b9:2d:78:d3:d0:e1:c6:ff:32: aa:4c:d8:84:35:fd:7c:df:d9:fa:2b:44:20:b8:19:51:c5:63: 6d:8b:c7:2c:56:5d:87:3d:d1:94:ea:d1:bd:79:b2:be:1a:5f: 06:bb:16:98:6b:0e:98:c7:d0:27:fc:18:ef:cd:83:01:ee:e6: 0e:f4:6f:46:85:88:32:ee:76:34:f9:5d:f6:b8:a4:11:fa:cf: 50:a2:62:b2:8a:64:1d:18:f3:14:43:10:a6:39:c9:dc:04:52: 81:a9:ee:0e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt260ordF4hpXsTYIfkP++NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzg3NmJmYmI1YWU4Y2ZlMTE2YmI1ZjVmMjg2NGExMTYyMTNhYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/axFJZj/S2CABQC+dyVdl8jhZRv t7vBZP1zZ67rX4MOIN0sdfwnrmLM9JdoqSdneIxGnCzdxE000AsJhuuvPyfgEzo/ Yrj2x9Lvab8052XLF+DpAyiVJrH6JUKyiBlu5M0JjgTeR7ZOb3A4QKbrrX0w0/qC KPsBjUG8l8SEPIa/qd4tajuiwLW6Ga+Y/6WjH6/XkKMJ5EMgmMxKNn/co1hi/s6F AAMQlFMPZ+wXY+JGVU4NHCrpz4rY39d4/0WHmpoowBIz0YK96FpxpDQPFSMXrhIa 8w8RVrMkjLlhS4jdFUjOy0k1wPaPVtZO13WDyrk69atS2hb+LO0HWDt/WwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIOHa/u1roz+EWu19fKGShFiE6pPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzQyYmQ1 ZC00YzNlLTQzZjQtYTg1Ny03ZTcwOWFmMDU3ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNDJiZDVk LTRjM2UtNDNmNC1hODU3LTdlNzA5YWYwNTdkNS8xL2c0ZHItN1d1alA0UmE3WDE4 b1pLRVdJVHFrOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAudMoAwQAvHQpMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMqoDANBgkqhkiG9w0BAQsFAAOCAQEARJr2jhjH7TzwNnjnimcepT73 TbIH5rOg474Za6lnekswSe+ZmtWwDoJq9dyp6AfXu4ls5fAGOA+b6IJJwz7R7xSW ipKpWU1ECMpvT1C9pWaTEK3RHsB7zSdWLhtNkhQD1lwoC2lJSK3WsFtgkpOMN7RU QYFldPWcaJQG+CUqs0LWH3aWnfwR6XAgfutplDZRJuJnoVlwEKoguS1409Dhxv8y qkzYhDX9fN/Z+itEILgZUcVjbYvHLFZdhz3RlOrRvXmyvhpfBrsWmGsOmMfQJ/wY 782DAe7mDvRvRoWIMu52NPld9rikEfrPUKJisopkHRjzFEMQpjnJ3ARSganuDg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:09 2026 by rpki-client