This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer File: s4-3-dr7t_J8ZSqEbTf7nimODho.cer (raw, json) Hash identifier: sSGzGaf5ncMlDmRJKgv+Js+NCkMnV8JH2gal5/X/T3Q= Subject key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF249CC302C4FB5050927078D56FA0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42986 IP: 194.116.182.0/23 IP: 194.149.88.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:49:cc:30:2c:4f:b5:05:09:27:07:8d:56:fa:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:52:2a:cf:69:85:71:70:40:37:d1:1c:6a: 07:cf:c3:9e:dc:90:a5:24:dd:6a:e5:16:16:bd:94: fc:df:6a:da:6d:3a:c9:5b:70:97:b8:11:59:9d:25: 19:6c:ab:28:28:39:8f:a1:a5:00:fd:aa:44:a8:5b: 32:63:94:24:db:74:3d:2f:46:f7:67:a7:a5:4a:3a: c6:90:0f:1b:84:2a:66:40:f7:b8:62:87:13:8c:ef: 07:9f:43:0a:33:05:e5:12:21:27:ac:f7:0e:a8:15: 1b:2f:82:bb:5f:4f:8f:d7:66:03:51:23:bc:f2:8a: 20:a0:9a:95:f0:98:50:c8:d6:d9:30:79:0c:d3:e0: e1:c5:1a:7f:6e:4b:ec:bd:73:4a:5c:14:0a:d6:b9: ea:a5:ed:45:15:6a:ea:a5:99:ab:df:b9:70:45:fa: b2:67:98:5e:b7:05:ba:29:96:58:78:4a:73:4b:bf: e7:2a:a6:ca:9e:2a:76:90:a9:f8:cd:0d:04:f7:f4: 0e:e4:26:aa:c6:f2:3e:af:0c:1a:79:8e:18:c6:31: 15:94:11:02:ff:22:69:18:63:d8:42:8c:34:42:8f: 24:b9:68:81:ed:11:a9:3d:bc:f3:3d:15:a8:ce:7e: 4b:3e:d8:b1:0b:2b:d2:72:e2:1b:ee:2f:ad:ae:cf: c2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.182.0/23 194.149.88.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42986 Signature Algorithm: sha256WithRSAEncryption 6c:62:54:02:6a:ad:ab:94:23:79:70:f0:07:05:e6:40:08:59: 16:25:81:05:92:2c:2d:ad:06:44:53:65:cf:20:55:6e:ac:c5: 36:31:31:c9:53:89:40:a3:b6:0c:df:c1:0c:14:e4:54:5f:e2: d6:df:7e:8a:0f:25:94:97:16:ba:78:cb:24:a3:23:83:c4:8e: e1:05:29:14:25:57:77:3f:da:7c:ba:1b:28:af:ae:20:04:0b: a6:41:27:07:75:59:08:59:08:63:78:48:71:04:47:7b:c1:b2: 77:35:0d:f7:bb:90:65:9b:2e:1c:8c:42:22:15:f9:37:7b:13: 10:ee:f1:98:3c:8a:d2:4a:e3:d3:ba:6b:0e:9e:0c:a3:bf:35: ac:54:58:31:8b:85:10:73:c7:5c:39:5e:af:3c:8e:ee:dd:54: 55:02:a6:f3:a5:cc:4c:e7:7b:62:69:4f:80:eb:52:3e:e4:49: a3:97:f8:2d:e2:35:fe:8c:be:ab:d8:66:51:a2:9c:a0:0a:82: 2f:d5:7a:69:22:88:6d:df:d7:dc:83:e9:eb:ff:bf:af:bc:ae: ee:09:c5:26:67:59:e2:f7:3e:69:11:4f:1c:6a:44:a6:b8:cd: 1e:21:32:8e:6b:41:46:6b:35:b6:37:0d:06:6c:bc:f1:70:0b: 47:ef:06:94 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/8knMMCxPtQUJJweNVvoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzhmYjdmOWRhZmJiN2YyN2M2NTJhODQ2ZDM3ZmI5ZTI5OGUwZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAullSKs9phXFwQDfRHGoHz8Oe3JCl JN1q5RYWvZT832rabTrJW3CXuBFZnSUZbKsoKDmPoaUA/apEqFsyY5Qk23Q9L0b3 Z6elSjrGkA8bhCpmQPe4YocTjO8Hn0MKMwXlEiEnrPcOqBUbL4K7X0+P12YDUSO8 8oogoJqV8JhQyNbZMHkM0+DhxRp/bkvsvXNKXBQK1rnqpe1FFWrqpZmr37lwRfqy Z5hetwW6KZZYeEpzS7/nKqbKnip2kKn4zQ0E9/QO5CaqxvI+rwwaeY4YxjEVlBEC /yJpGGPYQow0Qo8kuWiB7RGpPbzzPRWozn5LPtixCyvScuIb7i+trs/CtQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFLOPt/na+7fyfGUqhG03+54pjg4aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwL2E2YzZl ZS00MjYwLTRmMTEtYjIxOC1kYzFhZmIwZjdmMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYTZjNmVl LTQyNjAtNGYxMS1iMjE4LWRjMWFmYjBmN2YxOS8xL3M0LTMtZHI3dF9KOFpTcUVi VGY3bmltT0Roby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwnS2AwQAwpVYMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCn6jANBgkqhkiG9w0BAQsFAAOCAQEAbGJUAmqtq5QjeXDwBwXmQAhZ FiWBBZIsLa0GRFNlzyBVbqzFNjExyVOJQKO2DN/BDBTkVF/i1t9+ig8llJcWunjL JKMjg8SO4QUpFCVXdz/afLobKK+uIAQLpkEnB3VZCFkIY3hIcQRHe8GydzUN97uQ ZZsuHIxCIhX5N3sTEO7xmDyK0krj07prDp4Mo781rFRYMYuFEHPHXDlerzyO7t1U VQKm86XMTOd7YmlPgOtSPuRJo5f4LeI1/oy+q9hmUaKcoAqCL9V6aSKIbd/X3IPp 6/+/r7yu7gnFJmdZ4vc+aRFPHGpEprjNHiEyjmtBRms1tjcNBmy88XALR+8GlA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:57 2026 by rpki-client