This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer File: rN4jWPV0OcRPaxZi9VYVoKq2uss.cer (raw, json) Hash identifier: C/GWeOnTPUYMOIiHBezaLRXprgpTlzdufvhnyPNu02w= Subject key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B57E708158E54820B188D39CD58E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202204 IP: 2.58.24.0/22 IP: 78.26.0.0/18 IP: 139.28.124.0/22 IP: 141.195.16.0/20 IP: 152.228.64.0/19 IP: 171.22.152.0/22 IP: 185.100.204.0/22 IP: 185.161.136.0/22 IP: 2a00:ea0::/29 IP: 2a09:5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:57:e7:08:15:8e:54:82:0b:18:8d:39:cd:58:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acde2358f57439c44f6b1662f55615a0aab6bacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:00:20:a9:af:f6:d1:81:c2:1f:15:98:10: 16:9a:67:91:6d:9b:17:84:4f:4e:75:da:db:d4:b9: 19:13:1f:b6:29:ca:1a:f0:77:26:b9:c5:29:48:c9: 1d:26:a1:8f:a5:af:aa:cf:c4:6f:50:75:2f:9a:a7: 50:62:28:65:10:96:2c:b1:7f:33:61:f8:f9:d6:09: c0:03:8e:7f:df:cf:94:f0:2b:79:e4:26:8d:7b:c7: 4e:9a:36:b0:2e:5d:7f:2f:be:4c:2e:50:22:75:fb: 97:73:3c:21:5b:83:a5:2d:7c:1a:42:99:78:fa:fa: 5e:df:9f:36:02:47:e9:96:83:4b:cd:b9:5d:12:de: 7f:8a:b9:1b:c1:86:66:28:f3:91:fd:be:cd:f2:73: 20:fb:08:3e:70:86:55:dd:a7:88:f7:28:0d:a6:c2: 1a:eb:3b:f6:5b:61:9b:a7:4e:5f:29:b6:93:4b:a4: b6:25:a9:1a:ff:d6:31:2d:f7:47:f2:c9:3d:14:64: 03:52:12:64:16:9d:8d:dd:90:a9:78:f8:3c:2e:e9: ef:1f:33:dc:a1:41:ba:8f:9c:fd:e7:3e:cb:83:83: 72:64:6a:11:fb:fe:8a:09:da:52:30:f6:87:5d:22: 59:0d:ed:80:02:fe:cf:aa:0b:06:ae:03:8d:c8:e8: c1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.24.0/22 78.26.0.0/18 139.28.124.0/22 141.195.16.0/20 152.228.64.0/19 171.22.152.0/22 185.100.204.0/22 185.161.136.0/22 IPv6: 2a00:ea0::/29 2a09:5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202204 Signature Algorithm: sha256WithRSAEncryption a5:c9:2b:dc:75:02:ba:fd:cd:ab:64:74:47:fc:4d:20:06:e2: 10:2f:e4:e4:ba:cb:2a:9c:22:5f:3f:58:bc:b9:e5:ee:0f:eb: d5:98:7a:cd:f8:4d:d5:74:31:9e:6e:a5:10:37:4e:8a:42:af: a4:dd:49:7f:3b:24:cf:42:34:a1:4e:f2:ed:bd:07:5b:8c:2e: af:c3:95:40:b5:31:fa:2e:38:63:ea:47:35:d7:d2:46:23:d1: ec:28:14:3c:a5:19:fc:0e:ea:4e:ae:93:3d:09:3b:db:f5:a9: 73:d3:e0:df:a1:e9:c3:92:7a:2f:a6:71:f6:e1:1b:0e:30:67: 3f:ec:d5:b2:1b:98:0d:0f:75:c2:de:cc:a3:fc:82:e1:7b:a8: 50:3a:f0:c4:4a:df:e0:76:60:3f:4f:aa:51:75:98:f1:b4:10: e4:20:c9:85:3b:1f:de:38:8f:78:41:16:44:f5:69:71:c5:62: 38:e5:d1:84:d1:3e:ca:10:24:62:84:8c:61:f1:e9:f1:b8:22: b3:f5:f7:c0:c1:d4:f1:29:6b:ac:2c:69:68:4b:87:77:89:c7: f8:36:05:c1:af:00:83:99:4b:f0:5a:1c:85:d6:a4:30:96:ad: dc:fa:16:96:9e:aa:09:58:65:45:af:cb:10:f8:94:19:8b:cb: b8:df:72:b2 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt6W1fnCBWOVIILGI05zVjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2RlMjM1OGY1NzQzOWM0NGY2YjE2NjJmNTU2MTVhMGFhYjZiYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsEAIKmv9tGBwh8VmBAWmmeRbZsX hE9Oddrb1LkZEx+2Kcoa8HcmucUpSMkdJqGPpa+qz8RvUHUvmqdQYihlEJYssX8z Yfj51gnAA45/38+U8Ct55CaNe8dOmjawLl1/L75MLlAidfuXczwhW4OlLXwaQpl4 +vpe3582AkfploNLzbldEt5/irkbwYZmKPOR/b7N8nMg+wg+cIZV3aeI9ygNpsIa 6zv2W2Gbp05fKbaTS6S2Jaka/9YxLfdH8sk9FGQDUhJkFp2N3ZCpePg8LunvHzPc oUG6j5z95z7Lg4NyZGoR+/6KCdpSMPaHXSJZDe2AAv7PqgsGrgONyOjBSwIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFKzeI1j1dDnET2sWYvVWFaCqtrrLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2L2I2NWUz My1mOTQ3LTQ5NjgtYTI3Yy1kZDk5ZDM5N2U0ZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvYjY1ZTMz LWY5NDctNDk2OC1hMjdjLWRkOTlkMzk3ZTRkNi8xL3JONGpXUFYwT2NSUGF4Wmk5 VllWb0txMnVzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQCAjoYAwQGThoAAwQCixx8AwQEjcMQAwQFmORA AwQCqxaYAwQCuWTMAwQCuaGIMBQEAgACMA4DBQMqAA6gAwUDKgkFwDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDFdwwDQYJKoZIhvcNAQELBQADggEBAKXJK9x1Arr9 zatkdEf8TSAG4hAv5OS6yyqcIl8/WLy55e4P69WYes34TdV0MZ5upRA3TopCr6Td SX87JM9CNKFO8u29B1uMLq/DlUC1MfouOGPqRzXX0kYj0ewoFDylGfwO6k6ukz0J O9v1qXPT4N+h6cOSei+mcfbhGw4wZz/s1bIbmA0PdcLezKP8guF7qFA68MRK3+B2 YD9PqlF1mPG0EOQgyYU7H944j3hBFkT1aXHFYjjl0YTRPsoQJGKEjGHx6fG4IrP1 98DB1PEpa6wsaWhLh3eJx/g2BcGvAIOZS/BaHIXWpDCWrdz6FpaeqglYZUWvyxD4 lBmLy7jfcrI= -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:58 2026 by rpki-client