This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer File: l4axG6O9mY3t75gTwTPEJkI0lV4.cer (raw, json) Hash identifier: MJipYKsCa/i8YclDg2VsDecPUuFpjj42eGCwJqQmwWo= Subject key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3866955B5875EFA141A926206893E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210976 IP: 185.188.14.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:66:95:5b:58:75:ef:a1:41:a9:26:20:68:93:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9786b11ba3bd998dedef9813c133c4264234955e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2a:75:37:73:d8:fc:c8:68:05:b9:9c:9b:3f: 91:e1:67:b4:dc:2d:33:55:a3:9d:cd:17:a5:cb:f8: 86:df:75:cb:9f:82:32:de:66:4c:85:5b:2d:ff:a5: 5b:9b:3d:e6:45:30:15:43:9b:fc:da:b0:39:d5:0f: c6:35:dc:65:fa:1c:b7:e2:4b:a2:c2:b3:c9:db:21: cf:7f:fc:0a:05:36:74:28:50:3d:a6:58:32:51:e9: 83:ab:44:03:a7:f3:1f:07:c3:b6:a5:6d:bb:fa:ec: e2:21:51:6d:5e:4b:1e:be:76:99:d8:d6:6d:70:28: 40:9d:d6:1b:c7:3d:69:3c:e3:5a:32:3c:e2:c3:34: 0f:d0:6e:a9:0d:80:d7:08:3c:a6:93:ce:e6:8e:68: 18:ef:52:d9:d8:60:9d:b5:90:c1:f0:1c:87:a2:58: ea:0c:be:20:2a:5d:f1:f8:69:42:2f:ef:83:d5:46: 9c:86:46:d9:33:f6:be:71:6d:9c:23:0a:5f:67:07: a9:55:a1:01:35:d6:34:c2:92:55:3a:91:69:c0:f7: 95:18:4e:ba:7d:bd:74:23:46:81:e5:40:55:20:d0: e0:dc:3f:bf:0c:f7:56:42:ea:66:38:f8:bc:ba:28: 01:b8:44:96:ae:fe:34:2d:cf:35:5d:59:aa:d7:b9: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.14.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210976 Signature Algorithm: sha256WithRSAEncryption 4f:5f:e7:23:6f:af:6a:d4:a7:cd:9e:ba:74:29:b3:d4:14:a0: f8:aa:f5:e9:95:a7:7e:5d:d8:41:f6:39:49:01:c9:21:45:7d: 66:07:86:53:ab:09:66:e0:75:aa:b3:68:97:44:55:49:7b:a6: d3:d2:53:f4:52:b0:89:7d:f0:2d:47:0d:da:d0:78:5f:1a:d5: b4:a6:a5:13:a6:8a:22:6b:48:57:ec:4c:a9:fa:6a:d9:9b:3a: 7a:90:3b:e7:2a:fc:36:3f:d9:47:31:c9:54:77:4c:fd:bc:90: 23:ac:fb:e8:5a:8e:ef:24:fc:3d:6a:7d:77:ff:b0:22:05:14: 13:55:0a:77:dd:ae:4c:1a:33:ad:04:b8:ed:f0:f8:a7:7e:85: f4:ec:7e:98:30:76:94:6f:3a:e5:b0:a3:45:ed:3b:ea:6a:99: 99:b2:ef:fc:e3:c8:a5:e1:f1:2f:34:40:16:a8:27:09:a8:11: 00:45:8c:0c:f6:ae:17:f8:a2:2b:be:b4:ce:73:cd:af:ad:09: c4:ac:7c:4f:04:c4:00:e9:7a:08:23:ee:d4:97:ab:af:7f:65: f8:11:5d:22:9c:55:86:31:87:3c:1d:4e:af:2b:36:72:f8:30: c3:5c:06:c0:50:5e:cd:03:90:0c:a5:94:eb:19:66:9e:0b:4d: 44:52:cd:c4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OGaVW1h176FBqSYgaJPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzg2YjExYmEzYmQ5OThkZWRlZjk4MTNjMTMzYzQyNjQyMzQ5NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yp1N3PY/MhoBbmcmz+R4We03C0z VaOdzRely/iG33XLn4Iy3mZMhVst/6Vbmz3mRTAVQ5v82rA51Q/GNdxl+hy34kui wrPJ2yHPf/wKBTZ0KFA9plgyUemDq0QDp/MfB8O2pW27+uziIVFtXksevnaZ2NZt cChAndYbxz1pPONaMjziwzQP0G6pDYDXCDymk87mjmgY71LZ2GCdtZDB8ByHoljq DL4gKl3x+GlCL++D1UachkbZM/a+cW2cIwpfZwepVaEBNdY0wpJVOpFpwPeVGE66 fb10I0aB5UBVINDg3D+/DPdWQupmOPi8uigBuESWrv40Lc81XVmq17mwkQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJeGsRujvZmN7e+YE8EzxCZCNJVeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2Q3Mzdl OS1jZDRkLTQ4YTAtYjA3Yy05M2ZmZmZiY2E1NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDczN2U5 LWNkNGQtNDhhMC1iMDdjLTkzZmZmZmJjYTU1ZC8xL2w0YXhHNk85bVkzdDc1Z1R3 VFBFSmtJMGxWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAubwOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM4IDANBgkqhkiG9w0BAQsFAAOCAQEAT1/nI2+vatSnzZ66dCmz1BSg+Kr16ZWn fl3YQfY5SQHJIUV9ZgeGU6sJZuB1qrNol0RVSXum09JT9FKwiX3wLUcN2tB4XxrV tKalE6aKImtIV+xMqfpq2Zs6epA75yr8Nj/ZRzHJVHdM/byQI6z76FqO7yT8PWp9 d/+wIgUUE1UKd92uTBozrQS47fD4p36F9Ox+mDB2lG865bCjRe076mqZmbLv/OPI peHxLzRAFqgnCagRAEWMDPauF/iiK760znPNr60JxKx8TwTEAOl6CCPu1Jerr39l +BFdIpxVhjGHPB1Orys2cvgww1wGwFBezQOQDKWU6xlmngtNRFLNxA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:05 2026 by rpki-client