This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer File: r4j95vrbtrLB22_kH4KdHyAVvgs.cer (raw, json) Hash identifier: yKJ6GbL2w3Cvo+4NBVKGTAlha3ggvP629fNPq2En5W0= Subject key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11272F5222A40AA068EF30A5722017 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205282 AS: 214744 IP: 2.58.60.0/22 IP: 5.181.161.0/24 IP: 194.48.203.0/24 IP: 213.130.74.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:27:2f:52:22:a4:0a:a0:68:ef:30:a5:72:20:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8c:d6:f0:59:59:af:ac:03:4a:0f:94:fe:d1: f4:88:50:91:19:93:a2:93:eb:3a:32:70:49:80:d3: f3:3a:49:70:d2:96:1a:23:a8:e8:cd:69:be:eb:29: 24:a1:95:7b:b6:48:5e:b2:96:06:a2:be:6d:4e:7a: 00:6b:da:33:0d:10:12:65:60:32:70:68:0a:b6:cd: 43:32:27:41:e7:93:22:99:df:ae:ea:05:8b:fd:19: d7:e5:19:0b:be:98:6b:40:d9:8a:64:d6:8e:3e:d9: 10:2a:6a:f7:68:c9:56:7e:fa:a9:9f:cb:39:19:96: df:36:81:fa:e8:56:17:3e:37:47:cf:83:83:f4:ce: 60:ed:2d:e2:15:a6:89:27:ca:4b:51:00:24:25:ae: 89:31:78:d3:90:24:74:58:b2:a1:02:28:12:72:7d: a2:10:d1:36:02:5a:c6:11:63:0b:83:29:f5:ef:8f: a0:49:e3:10:9a:62:b9:ec:6f:95:68:10:98:90:f2: 33:19:6a:8f:47:7d:a6:ce:86:97:92:2f:80:d5:8a: 5a:34:7c:bc:fc:01:71:df:a3:70:b9:6f:61:5f:0b: 4a:5b:c4:95:e3:ba:e4:da:d8:9f:7e:21:8c:98:a6: 9e:c8:09:d5:dc:05:6f:00:f8:70:b2:1d:92:3d:a6: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.60.0/22 5.181.161.0/24 194.48.203.0/24 213.130.74.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205282 214744 Signature Algorithm: sha256WithRSAEncryption 62:e3:a7:b0:6b:87:57:2a:85:5e:79:ba:a7:6b:f0:c6:2d:1a: 12:51:a7:4a:8c:b5:68:8c:c3:58:0b:4d:9d:56:6d:f4:03:30: c7:6f:e6:35:6b:40:76:4f:7f:19:65:6c:20:94:21:d3:d4:00: fc:eb:49:b5:62:91:fd:2c:92:4b:22:a6:17:09:d2:67:20:a4: 82:60:e8:c7:43:df:05:ee:a3:f4:a1:a3:6b:16:09:e7:72:ac: 4b:35:0a:19:bb:d0:68:6b:48:e5:79:6b:07:ba:d7:f8:77:16: 06:bd:ff:47:d3:53:7c:9f:93:3e:57:95:34:90:2e:e3:63:9c: a2:4d:c3:d0:a5:e9:22:27:1f:25:86:ff:93:1e:ce:0d:55:d7: 9b:04:f9:3e:6b:7a:79:21:01:dd:e2:e2:00:c1:06:c3:e3:73: 90:ad:1c:07:38:7e:2a:3f:78:c6:b6:d3:3c:f4:42:ff:37:31: b6:d6:24:24:bf:3e:21:dc:22:f8:a6:fc:4e:33:3e:bf:b5:26: 84:c6:3a:64:f3:38:e7:19:d4:bc:7a:a6:50:26:0a:65:d9:77: 15:a6:1f:c6:0e:b6:8c:0f:1d:d3:69:47:72:d4:7b:76:ff:5b: 66:a5:58:0d:9a:8e:b6:7e:6a:6d:d7:72:bd:13:0b:52:6f:a0: 5b:d5:91:02 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt8EScvUiKkCqBo7zClciAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjg4ZmRlNmZhZGJiNmIyYzFkYjZmZTQxZjgyOWQxZjIwMTViZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYzW8FlZr6wDSg+U/tH0iFCRGZOi k+s6MnBJgNPzOklw0pYaI6jozWm+6ykkoZV7tkhespYGor5tTnoAa9ozDRASZWAy cGgKts1DMidB55Mimd+u6gWL/RnX5RkLvphrQNmKZNaOPtkQKmr3aMlWfvqpn8s5 GZbfNoH66FYXPjdHz4OD9M5g7S3iFaaJJ8pLUQAkJa6JMXjTkCR0WLKhAigScn2i ENE2AlrGEWMLgyn174+gSeMQmmK57G+VaBCYkPIzGWqPR32mzoaXki+A1YpaNHy8 /AFx36NwuW9hXwtKW8SV47rk2tiffiGMmKaeyAnV3AVvAPhwsh2SPaZlEwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFK+I/eb627aywdtv5B+CnR8gFb4LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2ZkNTk2 YS0zZjU0LTRlMDYtODYyMC02ZTBkMjEzZjQ4NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZmQ1OTZh LTNmNTQtNGUwNi04NjIwLTZlMGQyMTNmNDg0YS8xL3I0ajk1dnJidHJMQjIyX2tI NEtkSHlBVnZncy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQCAjo8AwQABbWhAwQAwjDLAwQA1YJKMB8GCCsG AQUFBwEIAQH/BBAwDqAMMAoCAwMh4gIDA0bYMA0GCSqGSIb3DQEBCwUAA4IBAQBi 46ewa4dXKoVeebqna/DGLRoSUadKjLVojMNYC02dVm30AzDHb+Y1a0B2T38ZZWwg lCHT1AD860m1YpH9LJJLIqYXCdJnIKSCYOjHQ98F7qP0oaNrFgnncqxLNQoZu9Bo a0jleWsHutf4dxYGvf9H01N8n5M+V5U0kC7jY5yiTcPQpekiJx8lhv+THs4NVdeb BPk+a3p5IQHd4uIAwQbD43OQrRwHOH4qP3jGttM89EL/NzG21iQkvz4h3CL4pvxO Mz6/tSaExjpk8zjnGdS8eqZQJgpl2XcVph/GDraMDx3TaUdy1Ht2/1tmpVgNmo62 fmpt13K9EwtSb6Bb1ZEC -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:48 2026 by rpki-client