This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer File: if4_e4M8MGAut5hY5-r67VVPTFs.cer (raw, json) Hash identifier: hCZoRR5eW7vgVmUoPdpdIk95zcnxKWqBngpHZ3mP45w= Subject key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC57366B9240AF937496D58E28318 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199706 IP: 185.49.72.0/22 IP: 2a04:b780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c5:73:66:b9:24:0a:f9:37:49:6d:58:e2:83:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:dd:6d:ad:ae:a5:60:3c:d7:0e:fe:cd:06: 78:8e:18:06:2a:f5:06:06:76:44:ca:b5:9e:e5:df: 93:4c:58:3b:a2:81:f5:98:b2:85:28:17:18:be:d5: bc:2f:a0:f0:34:02:e0:bc:36:ec:93:58:eb:32:de: f7:2d:06:8e:80:cb:36:3b:c7:5a:31:42:36:b0:57: 2e:fc:97:51:61:eb:a2:05:95:fa:05:fb:9e:92:a9: 18:b7:d7:f5:8a:b8:7c:70:92:0b:0b:7f:b8:2c:90: da:87:19:89:95:6f:08:c2:99:2b:02:3d:51:f6:0e: a8:03:a2:3f:7c:67:7f:8a:1d:fd:07:5c:de:d1:eb: 13:0c:54:f1:b4:4f:86:c9:96:c1:02:5b:26:33:20: 83:21:06:ad:24:c2:f4:4e:b0:f5:39:4e:18:e2:97: c5:6e:85:5e:ce:ac:7d:ae:1c:f1:18:7d:aa:85:02: 14:00:e2:6d:6a:4e:85:08:18:c8:0e:77:ba:ea:4a: aa:d0:eb:cc:9c:9a:fe:12:c4:7c:53:e5:f7:24:e8: 8e:e2:ce:a4:33:15:30:f6:8d:0a:f9:e1:66:0c:6f: e1:e0:1a:8c:1e:be:91:ed:a6:0c:5d:93:e8:d7:cb: d8:4c:d1:3e:1b:85:05:15:11:0b:67:08:39:fc:3c: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.72.0/22 IPv6: 2a04:b780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199706 Signature Algorithm: sha256WithRSAEncryption ad:bc:5c:4c:7b:e0:51:f3:e3:40:a3:dc:b8:b8:58:0f:a0:4d: d9:ac:b4:25:72:4c:c0:29:8d:8f:9e:c8:3a:b6:7f:d6:be:b6: 5d:10:0d:59:cd:6f:74:ac:ba:4c:70:67:8b:ca:25:37:b1:0a: dc:df:cc:f7:7d:db:16:21:98:9c:68:29:66:47:67:33:29:08: 68:dd:ba:53:d7:c2:cb:28:42:fd:91:2b:92:00:48:fe:f4:be: 02:c2:8d:c4:c6:16:24:0c:f8:33:53:2c:ad:2a:d0:1d:6b:99: df:71:fb:0b:92:21:12:59:7b:f0:68:96:44:a3:92:18:2e:4d: 33:d8:41:2c:c4:81:c3:2b:46:53:36:ab:ae:e5:df:ca:5f:bc: 5a:2a:59:e3:1b:3b:03:cb:fb:d8:fd:3c:e5:0d:9e:7b:fd:0c: 8f:86:42:b1:0f:26:04:53:c1:8a:3d:cf:d9:1b:50:2f:93:49: b1:4c:e2:d2:d7:6d:65:52:75:5f:82:b7:00:2d:5a:bd:b6:eb: 0c:84:a4:40:43:32:be:c3:8e:e7:7a:98:f9:38:96:9e:2d:1c: fc:4a:0d:72:39:f4:57:ae:42:3b:ae:2c:3d:4c:0d:83:6c:f8: 7a:59:2a:30:4f:0a:e0:7c:e7:77:8e:08:8c:5a:7d:ed:b3:75: 43:18:4e:a5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26sVzZrkkCvk3SW1Y4oMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWZlM2Y3YjgzM2MzMDYwMmViNzk4NThlN2VhZmFlZDU1NGY0YzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8rdba2upWA81w7+zQZ4jhgGKvUG BnZEyrWe5d+TTFg7ooH1mLKFKBcYvtW8L6DwNALgvDbsk1jrMt73LQaOgMs2O8da MUI2sFcu/JdRYeuiBZX6BfuekqkYt9f1irh8cJILC3+4LJDahxmJlW8IwpkrAj1R 9g6oA6I/fGd/ih39B1ze0esTDFTxtE+GyZbBAlsmMyCDIQatJML0TrD1OU4Y4pfF boVezqx9rhzxGH2qhQIUAOJtak6FCBjIDne66kqq0OvMnJr+EsR8U+X3JOiO4s6k MxUw9o0K+eFmDG/h4BqMHr6R7aYMXZPo18vYTNE+G4UFFRELZwg5/DwppQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIn+P3uDPDBgLreYWOfq+u1VT0xbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2I2ODlm ZC1iMTNlLTQzMzItOWViNy02NWNiNjNhZmNlNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvYjY4OWZk LWIxM2UtNDMzMi05ZWI3LTY1Y2I2M2FmY2U1ZS8xL2lmNF9lNE04TUdBdXQ1aFk1 LXI2N1ZWUFRGcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTFIMA0EAgACMAcDBQMqBLeAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMMGjANBgkqhkiG9w0BAQsFAAOCAQEArbxcTHvgUfPj QKPcuLhYD6BN2ay0JXJMwCmNj57IOrZ/1r62XRANWc1vdKy6THBni8olN7EK3N/M 933bFiGYnGgpZkdnMykIaN26U9fCyyhC/ZErkgBI/vS+AsKNxMYWJAz4M1MsrSrQ HWuZ33H7C5IhEll78GiWRKOSGC5NM9hBLMSBwytGUzarruXfyl+8WipZ4xs7A8v7 2P085Q2ee/0Mj4ZCsQ8mBFPBij3P2RtQL5NJsUzi0tdtZVJ1X4K3AC1avbbrDISk QEMyvsOO53qY+TiWni0c/EoNcjn0V65CO64sPUwNg2z4elkqME8K4Hznd44IjFp9 7bN1QxhOpQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:52 2026 by rpki-client