This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer (raw, json) Hash identifier: tIBjPAu2llEIl8KDHNZRAoUohUPXVcAJ9zV8SXxUUtM= Subject key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78354F24BCF93805D98B34883CFD8761 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201725 IP: 81.163.8.0/21 IP: 91.231.244.0/22 IP: 176.97.248.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4f:24:bc:f9:38:05:d9:8b:34:88:3c:fd:87:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b785ec73dc181f9935659f58aed208532a2c2a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:7a:11:d2:cc:a8:e1:00:64:d3:a7:3f:f0: 39:3d:5c:82:05:ed:11:a5:28:03:26:c5:9d:da:03: 83:b0:9e:bc:9e:b8:7f:19:41:ec:9a:12:9b:c3:97: 4c:bd:16:cd:05:2d:de:ee:9f:5a:9f:4e:dc:f1:7a: f7:04:95:4b:c6:9f:1b:71:05:c3:84:4f:fd:a2:49: 1a:a2:76:25:c5:72:42:96:33:2b:67:ef:b4:c9:cc: 90:08:59:3c:f2:55:8d:20:4a:70:f5:8d:94:c3:d1: 56:15:42:ba:03:0d:e6:7c:0b:e5:5e:79:5a:fc:12: 3d:1c:0a:87:46:bc:ee:4b:25:ad:46:4d:b1:64:79: cc:ac:5a:f9:2c:b5:d8:fd:ae:83:10:b8:c1:a9:bb: 17:f3:fc:68:44:55:57:e2:e7:54:73:35:d3:3a:e4: 61:90:76:91:bf:a4:7b:14:45:b0:f5:52:60:d4:98: 39:0b:2a:51:d5:0d:d9:67:c9:19:5d:6f:14:cb:bc: d1:ca:82:5c:0a:da:0f:79:5a:2e:bd:b3:49:ef:bf: cf:f2:cd:b1:8a:95:94:a1:21:5e:e0:bb:56:e4:ef: aa:80:0d:bb:3d:c5:08:d0:d2:41:48:d8:14:ba:73: 1c:fc:67:d7:64:7e:5e:86:94:ab:95:de:24:c9:e0: ca:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.8.0/21 91.231.244.0/22 176.97.248.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201725 Signature Algorithm: sha256WithRSAEncryption ac:06:41:36:2b:c8:12:7f:40:04:b5:ff:e7:0e:ba:07:4e:d0: be:88:35:4e:cc:4a:16:a4:42:4c:a9:8b:cf:1a:b1:3d:9a:8f: 6a:51:bd:90:f9:dc:8f:04:7f:58:c3:b2:1e:6c:8d:79:8d:e2: 0b:a7:c8:f3:b3:0a:81:9a:65:a9:3e:e0:e9:41:e8:e8:bf:0d: f7:d4:de:ee:ae:a9:2c:23:51:7e:38:d9:9d:24:59:17:65:ad: 31:67:f4:ad:0e:9e:79:99:04:02:4a:fc:15:07:15:60:7e:c4: e3:8d:80:5a:dd:74:3b:4f:54:b8:71:2d:b0:1b:2d:91:e8:0f: 3e:66:70:30:bc:3b:b5:bd:c7:e4:a6:c4:ee:23:4c:3d:fd:f6: 38:ef:95:0f:4d:11:c2:99:36:9c:b8:3b:4a:e7:d6:ba:a8:e0: 57:d3:64:ed:e7:03:3c:24:bd:4c:64:a4:f2:7a:e9:6c:88:67: 9a:7c:e6:9e:9a:ab:f4:64:59:0d:56:84:69:4d:42:e4:fe:01: 49:0f:0e:73:b8:73:9c:4d:10:05:84:b3:c7:ca:f8:95:85:0d: bb:6d:e1:60:5f:34:df:a3:4b:d0:8b:10:10:9c:87:0c:fd:4b: 4a:36:e3:5f:73:ab:d8:15:68:9b:4f:82:82:1b:5f:81:70:91: 96:c4:46:77 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt4NU8kvPk4BdmLNIg8/YdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzg1ZWM3M2RjMTgxZjk5MzU2NTlmNThhZWQyMDg1MzJhMmMyYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRJ6EdLMqOEAZNOnP/A5PVyCBe0R pSgDJsWd2gODsJ68nrh/GUHsmhKbw5dMvRbNBS3e7p9an07c8Xr3BJVLxp8bcQXD hE/9okkaonYlxXJCljMrZ++0ycyQCFk88lWNIEpw9Y2Uw9FWFUK6Aw3mfAvlXnla /BI9HAqHRrzuSyWtRk2xZHnMrFr5LLXY/a6DELjBqbsX8/xoRFVX4udUczXTOuRh kHaRv6R7FEWw9VJg1Jg5CypR1Q3ZZ8kZXW8Uy7zRyoJcCtoPeVouvbNJ77/P8s2x ipWUoSFe4LtW5O+qgA27PcUI0NJBSNgUunMc/GfXZH5ehpSrld4kyeDKDQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFLeF7HPcGB+ZNWWfWK7SCFMqLCpqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2U4NTQx OC02NGIzLTQ0NGItOTEzYS02M2MyYmE0Yzk5NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvZTg1NDE4 LTY0YjMtNDQ0Yi05MTNhLTYzYzJiYTRjOTk2Yy8xL3Q0WHNjOXdZSDVrMVpaOVly dElJVXlvc0ttby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDUaMIAwQCW+f0AwQDsGH4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMT/TANBgkqhkiG9w0BAQsFAAOCAQEArAZBNivIEn9ABLX/ 5w66B07Qvog1TsxKFqRCTKmLzxqxPZqPalG9kPncjwR/WMOyHmyNeY3iC6fI87MK gZplqT7g6UHo6L8N99Te7q6pLCNRfjjZnSRZF2WtMWf0rQ6eeZkEAkr8FQcVYH7E 442AWt10O09UuHEtsBstkegPPmZwMLw7tb3H5KbE7iNMPf32OO+VD00Rwpk2nLg7 SufWuqjgV9Nk7ecDPCS9TGSk8nrpbIhnmnzmnpqr9GRZDVaEaU1C5P4BSQ8Oc7hz nE0QBYSzx8r4lYUNu23hYF8036NL0IsQEJyHDP1LSjbjX3Or2BVom0+CghtfgXCR lsRGdw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:05 2026 by rpki-client