This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer (raw, json) Hash identifier: MXaiOp/6PlU0MtojfTG6G5LcTHGQC7JeIHTNq+vMQcw= Subject key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5EF677FB343B48F10048BE675AE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211920 IP: 91.220.97.0/24 IP: 2a10:dd80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5e:f6:77:fb:34:3b:48:f1:00:48:be:67:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:88:d0:b2:13:9e:60:d4:1f:d9:88:03:27: a0:a6:a6:41:57:d9:54:fa:89:c1:26:a8:03:46:95: 45:67:61:db:7a:a8:60:3c:f1:9c:9e:67:f3:02:10: 8f:21:6d:c9:47:c6:12:ac:11:27:d9:a5:83:92:f5: 1a:4c:cc:0e:25:7e:96:66:b8:a6:8c:51:09:de:3e: 5c:35:a6:17:07:d6:82:76:84:70:35:1d:ed:4c:eb: 5e:33:d5:d6:9b:b8:7e:7a:e9:d8:d2:5d:b0:0b:8a: c1:6b:d7:69:78:36:ad:0e:cc:d2:ff:9e:f1:35:c7: 19:cd:f1:47:85:9a:86:24:61:15:44:a2:c6:63:2a: 72:7e:da:ce:c2:4a:6e:83:c3:b1:7b:1e:93:f2:ee: 22:bf:ef:c3:21:3f:4c:eb:48:c4:3d:fd:06:f8:88: fb:4c:44:5f:cf:87:81:11:76:6d:1a:d3:e1:60:0e: 5f:91:78:61:a1:9a:1d:2f:46:46:2f:44:1f:f7:21: 61:43:e9:85:ca:74:53:64:08:3b:d2:e1:12:08:08: 44:f8:62:41:10:76:04:09:c9:1e:a3:74:91:e0:a9: 65:d6:76:ad:0a:44:36:83:49:4e:c7:61:c0:54:b2: 0e:96:61:2e:cf:3a:4d:9a:e1:26:d7:bc:9b:31:31: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.97.0/24 IPv6: 2a10:dd80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211920 Signature Algorithm: sha256WithRSAEncryption 08:0a:39:6d:08:4b:0b:30:bf:fc:e7:56:97:8e:2a:5f:72:03: 97:5f:cd:83:0d:60:58:4f:91:ee:c5:b8:1d:a6:1e:a0:8b:2b: 88:4d:68:ee:24:76:2d:e5:9d:0e:1d:14:e5:f3:c0:63:39:06: b6:9a:ed:4e:5a:d2:4d:18:a7:e3:0b:a9:f5:52:2d:0f:2e:14: 2a:5b:bb:d3:27:55:bb:3a:23:f1:d0:6f:0b:e4:29:36:cd:5c: 57:ae:e2:13:de:3f:bf:5b:a7:03:4e:d6:db:45:b6:ca:7a:e9: 90:c2:ac:7c:13:5d:0b:e9:41:9c:17:0c:a1:f9:9d:e3:38:81: 05:74:12:5e:cd:64:ea:6b:c9:56:ff:d1:9e:b7:cb:9e:de:9e: a5:8f:c8:93:9e:1f:6d:e3:99:b5:e8:35:6b:9a:2a:e7:2a:b4: 05:25:2c:21:05:c2:aa:eb:a7:29:9e:d0:c8:41:da:de:5f:0d: 2d:e4:cc:0a:e8:dd:fa:d3:ab:47:8a:c1:5d:da:f6:ac:79:62: b2:de:67:00:1e:3c:c0:d7:a1:7e:97:71:27:e5:44:cd:55:97: 94:79:ec:fd:06:dc:bf:fd:9b:d3:21:51:d4:d7:cc:47:cc:5f: 3a:b3:d2:af:78:74:c6:12:81:55:b5:ae:33:dc:ae:65:ae:93: 99:f0:fe:cb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26172d/s0O0jxAEi+Z1rgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjg0ZTNkMjNmZjYwYjgyOWUxNDZlYmRhYjRhMGFlNjFkZTBmNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RaI0LITnmDUH9mIAyegpqZBV9lU +onBJqgDRpVFZ2HbeqhgPPGcnmfzAhCPIW3JR8YSrBEn2aWDkvUaTMwOJX6WZrim jFEJ3j5cNaYXB9aCdoRwNR3tTOteM9XWm7h+eunY0l2wC4rBa9dpeDatDszS/57x NccZzfFHhZqGJGEVRKLGYypyftrOwkpug8Oxex6T8u4iv+/DIT9M60jEPf0G+Ij7 TERfz4eBEXZtGtPhYA5fkXhhoZodL0ZGL0Qf9yFhQ+mFynRTZAg70uESCAhE+GJB EHYECckeo3SR4Kll1natCkQ2g0lOx2HAVLIOlmEuzzpNmuEm17ybMTHGXQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK+E49I/9guCnhRuvatKCuYd4PT7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2JhMjM5 MS0wNWExLTRiY2ItYTYxZC1lNWQ4ZTM3NTAwMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvYmEyMzkx LTA1YTEtNGJjYi1hNjFkLWU1ZDhlMzc1MDAwOS8xL3I0VGowal8yQzRLZUZHNjlx MG9LNWgzZzlQcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9xhMA0EAgACMAcDBQMqEN2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM70DANBgkqhkiG9w0BAQsFAAOCAQEACAo5bQhLCzC/ /OdWl44qX3IDl1/Ngw1gWE+R7sW4HaYeoIsriE1o7iR2LeWdDh0U5fPAYzkGtprt TlrSTRin4wup9VItDy4UKlu70ydVuzoj8dBvC+QpNs1cV67iE94/v1unA07W20W2 ynrpkMKsfBNdC+lBnBcMofmd4ziBBXQSXs1k6mvJVv/RnrfLnt6epY/Ik54fbeOZ teg1a5oq5yq0BSUsIQXCquunKZ7QyEHa3l8NLeTMCujd+tOrR4rBXdr2rHlist5n AB48wNehfpdxJ+VEzVWXlHns/Qbcv/2b0yFR1NfMR8xfOrPSr3h0xhKBVbWuM9yu Za6TmfD+yw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:06 2026 by rpki-client