This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4gBVDgSBAR31HRCKUZshTfUUXE.cer File: i4gBVDgSBAR31HRCKUZshTfUUXE.cer (raw, json) Hash identifier: l7qiljVVekd4BUOYyEnCMDuVFCASMFhtqFDf2hLqkCQ= Subject key identifier: 8B:88:01:54:38:12:04:04:77:D4:74:42:29:46:6C:85:37:D4:51:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A28E8126DE6862877E1DDCF1687CDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21054 AS: 212885 IP: 193.163.122.0/23 IP: 193.178.116.0/24 IP: 2a04:5580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8e:81:26:de:68:62:87:7e:1d:dc:f1:68:7c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b8801543812040477d4744229466c8537d45171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:f2:09:bf:0d:62:2d:69:67:a1:6b:af:ae: 45:55:17:66:f2:c9:b2:c0:e4:88:14:f9:e5:2d:b4: 5c:e0:3a:ba:e5:b6:a0:6a:a1:0c:2f:af:72:2d:39: 83:3d:a5:68:9a:45:6d:f0:e3:5f:dc:7f:b2:c9:7e: 82:7f:7e:36:cb:84:3e:4f:ed:90:6c:e1:8c:d7:a1: c6:44:46:28:53:a8:9e:12:d1:de:91:9b:17:34:d2: 96:dd:60:8c:e4:58:d6:97:ea:34:8b:4d:78:86:b4: 18:00:69:c9:f9:c6:a9:5a:2d:84:bd:cb:ac:5c:bc: fb:47:e7:38:c0:db:b8:15:a7:01:ca:51:59:05:71: 94:7e:c3:eb:db:0d:72:ae:b8:e4:4d:a5:1e:3d:1e: 54:37:ff:2d:31:a7:62:0c:e9:18:5d:9c:be:7b:a4: 42:dc:6e:6d:47:c1:58:03:23:3d:41:49:8b:a7:85: 9a:ff:35:71:25:e5:34:24:22:c7:2f:f4:2c:52:ad: b5:3a:0f:40:8b:36:70:cf:4d:4e:e4:e3:d9:69:d9: 7b:8c:bb:e0:e1:2c:3a:83:22:c8:31:87:83:03:eb: 4a:28:17:da:8a:ae:fe:f8:a3:b6:df:ad:f4:3c:bd: c7:1a:76:96:f4:b7:6d:53:37:86:00:eb:82:b3:92: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:88:01:54:38:12:04:04:77:D4:74:42:29:46:6C:85:37:D4:51:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.122.0/23 193.178.116.0/24 IPv6: 2a04:5580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21054 212885 Signature Algorithm: sha256WithRSAEncryption 40:5a:29:c7:4b:26:07:20:71:bc:b1:c2:28:4c:27:31:56:d3: dd:71:b1:bf:ee:c6:93:1b:63:f0:f8:bb:1a:25:99:54:11:aa: 40:62:67:3c:75:d5:e7:ef:2f:e9:a5:54:f2:79:58:b8:10:48: 67:a9:04:33:57:b9:63:ca:95:da:04:4f:f5:35:15:b8:2c:db: 7b:e5:68:70:d2:18:b9:ed:e8:49:45:0f:6f:a1:60:28:2e:27: 9f:60:91:6e:34:62:34:b5:fd:a7:1f:53:59:9f:0b:ea:c1:40: 23:1a:da:6c:eb:67:9f:b5:ce:e4:0e:53:37:87:82:cf:c6:ba: 85:3d:0c:48:bb:35:9f:6d:95:4a:b4:bb:17:c0:81:c1:2a:67: 30:15:86:48:3c:bf:7b:0c:f7:48:76:d8:e8:ca:ea:a8:be:87: 9d:aa:59:66:6f:3e:01:42:b9:ae:cd:c2:b8:68:2d:0c:55:5d: 08:5a:ba:bd:7d:75:7d:69:03:80:f3:f1:ca:fc:c8:8d:e5:e0: af:6b:82:e0:1b:ac:c6:83:9d:a6:01:ae:2f:3f:ac:1d:27:54: bc:1f:a0:dd:b9:88:a8:26:0d:e1:e5:d9:2c:23:c4:8e:6d:cc: 0c:6e:fa:ab:be:4e:ac:bf:78:62:27:8e:27:3e:0a:40:3d:e5: ab:4c:0f:d6 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt4oo6BJt5oYod+HdzxaHzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjg4MDE1NDM4MTIwNDA0NzdkNDc0NDIyOTQ2NmM4NTM3ZDQ1MTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0zyCb8NYi1pZ6Frr65FVRdm8smy wOSIFPnlLbRc4Dq65bagaqEML69yLTmDPaVomkVt8ONf3H+yyX6Cf342y4Q+T+2Q bOGM16HGREYoU6ieEtHekZsXNNKW3WCM5FjWl+o0i014hrQYAGnJ+capWi2Evcus XLz7R+c4wNu4FacBylFZBXGUfsPr2w1yrrjkTaUePR5UN/8tMadiDOkYXZy+e6RC 3G5tR8FYAyM9QUmLp4Wa/zVxJeU0JCLHL/QsUq21Og9AizZwz01O5OPZadl7jLvg 4Sw6gyLIMYeDA+tKKBfaiq7++KO23630PL3HGnaW9LdtUzeGAOuCs5LAlQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFIuIAVQ4EgQEd9R0QilGbIU31FFxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5Lzg5YmI3 MS0zZmU5LTQyZDItYTczYi0xM2FlOThhYTdkMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvODliYjcx LTNmZTktNDJkMi1hNzNiLTEzYWU5OGFhN2QzMy8xL2k0Z0JWRGdTQkFSMzFIUkNL VVpzaFRmVVVYRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwaN6AwQAwbJ0MA0EAgACMAcDBQMqBFWAMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAlI+AgMDP5UwDQYJKoZIhvcNAQELBQADggEB AEBaKcdLJgcgcbyxwihMJzFW091xsb/uxpMbY/D4uxolmVQRqkBiZzx11efvL+ml VPJ5WLgQSGepBDNXuWPKldoET/U1Fbgs23vlaHDSGLnt6ElFD2+hYCguJ59gkW40 YjS1/acfU1mfC+rBQCMa2mzrZ5+1zuQOUzeHgs/GuoU9DEi7NZ9tlUq0uxfAgcEq ZzAVhkg8v3sM90h22OjK6qi+h52qWWZvPgFCua7NwrhoLQxVXQhaur19dX1pA4Dz 8cr8yI3l4K9rguAbrMaDnaYBri8/rB0nVLwfoN25iKgmDeHl2SwjxI5tzAxu+qu+ Tqy/eGInjic+CkA95atMD9Y= -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:43 2026 by rpki-client