This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer File: t4zdv8dr2iagKeqAyJh3mHRfHwI.cer (raw, json) Hash identifier: eBQLk0hKkhsXHfXjzLb/qYcZYpOZ1berrMy1qCXq5t4= Subject key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911403256F5A776BA9A213E6E9B5C70 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.215.115.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:40:32:56:f5:a7:76:ba:9a:21:3e:6e:9b:5c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b78cddbfc76bda26a029ea80c8987798745f1f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:ed:de:4b:bf:8a:17:6b:63:54:0c:d5:dc: 50:88:66:1e:d5:c2:68:03:92:ac:ff:69:31:da:86: 2b:05:aa:7a:03:57:91:e1:f5:e5:37:c8:e7:74:e9: 2e:38:2c:8f:55:c4:b3:17:07:7f:48:f1:17:e5:50: f7:1c:c7:54:a1:f2:94:4e:d9:c4:9e:9f:26:75:86: 48:4a:32:53:ab:84:f2:1d:2e:64:7d:ee:36:0e:b4: eb:ae:8f:59:dd:15:3a:11:a1:bd:5a:f9:eb:07:91: cd:fa:9e:c3:d0:b9:28:72:2f:05:a6:16:17:2f:59: ac:42:76:cd:d1:3f:fa:e2:9c:28:2c:a1:a0:04:9c: 96:b1:21:37:5e:59:39:bd:d5:40:4d:0d:55:b1:cc: 61:a7:ea:66:b5:5d:7f:1c:65:64:be:8b:f0:62:25: 8b:b5:51:71:3a:e9:f3:4b:27:4e:a6:e2:2c:53:b7: 3b:61:88:78:40:ee:16:a3:f5:c1:a5:01:6e:57:c5: f3:93:b4:06:7d:e4:4c:ae:61:bb:bd:76:82:c3:09: 31:e9:22:8c:fe:92:65:10:d6:21:97:3d:c1:db:ef: 8f:77:b1:69:5b:10:4c:69:e6:52:c0:84:41:34:5e: e5:01:00:75:64:5b:c6:77:9f:fb:a8:e5:c6:44:03: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.115.0/24 Signature Algorithm: sha256WithRSAEncryption 47:98:29:cf:c0:4f:5f:58:fe:2c:47:1d:86:f2:2d:70:ac:2e: 39:7a:6c:e8:e9:65:4f:e4:a3:5d:2d:4b:a7:83:d5:85:65:50: 78:0d:98:7e:27:2d:b4:5b:23:5d:6f:8c:69:0b:28:dc:ce:fb: 80:62:89:ea:29:77:98:0d:b0:d8:5b:f8:31:f8:40:27:b0:d9: 2b:e0:ae:c9:2e:33:71:15:d8:89:fc:2c:f8:fa:58:67:5c:5a: 56:c0:14:a7:a6:14:f6:e2:6f:19:09:29:50:25:c9:cf:33:fd: fc:e3:e5:b8:e5:b5:b8:5e:7e:8a:60:1a:ee:db:24:1f:c8:5d: f1:58:e3:05:10:eb:fd:f0:3a:cd:ed:df:c9:9f:ac:89:e0:06: be:32:c4:4f:da:8a:9f:27:a9:8d:ea:a8:c0:f0:34:14:af:10: 2c:58:7c:a5:21:13:61:12:33:98:01:37:04:75:fb:18:7f:30: 5c:89:dc:be:25:1e:aa:f4:00:c9:cd:9a:97:e8:cb:23:79:56: 8b:0d:a4:d5:33:44:bd:e0:6d:b0:32:7b:d8:5b:45:d6:33:03: 70:a8:84:fd:45:e6:17:88:93:cb:06:62:16:ef:7b:d8:cf:8a: e4:8e:61:fa:73:b1:51:d0:bd:d5:84:eb:7b:ce:51:4a:c0:f9: dd:e7:fd:af -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EUAyVvWndrqaIT5um1xwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzhjZGRiZmM3NmJkYTI2YTAyOWVhODBjODk4Nzc5ODc0NWYxZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQPt3ku/ihdrY1QM1dxQiGYe1cJo A5Ks/2kx2oYrBap6A1eR4fXlN8jndOkuOCyPVcSzFwd/SPEX5VD3HMdUofKUTtnE np8mdYZISjJTq4TyHS5kfe42DrTrro9Z3RU6EaG9WvnrB5HN+p7D0Lkoci8FphYX L1msQnbN0T/64pwoLKGgBJyWsSE3Xlk5vdVATQ1Vscxhp+pmtV1/HGVkvovwYiWL tVFxOunzSydOpuIsU7c7YYh4QO4Wo/XBpQFuV8Xzk7QGfeRMrmG7vXaCwwkx6SKM /pJlENYhlz3B2++Pd7FpWxBMaeZSwIRBNF7lAQB1ZFvGd5/7qOXGRAOVbQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLeM3b/Ha9omoCnqgMiYd5h0Xx8CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzMwYjhl OS1lN2Q0LTQwY2MtYWQ1Zi0zYzc0MTIyMGVhMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvMzBiOGU5 LWU3ZDQtNDBjYy1hZDVmLTNjNzQxMjIwZWEwMC8xL3Q0emR2OGRyMmlhZ0tlcUF5 SmgzbUhSZkh3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuddzMA0GCSqGSIb3DQEBCwUAA4IBAQBHmCnP wE9fWP4sRx2G8i1wrC45emzo6WVP5KNdLUung9WFZVB4DZh+Jy20WyNdb4xpCyjc zvuAYonqKXeYDbDYW/gx+EAnsNkr4K7JLjNxFdiJ/Cz4+lhnXFpWwBSnphT24m8Z CSlQJcnPM/384+W45bW4Xn6KYBru2yQfyF3xWOMFEOv98DrN7d/Jn6yJ4Aa+MsRP 2oqfJ6mN6qjA8DQUrxAsWHylIRNhEjOYATcEdfsYfzBcidy+JR6q9ADJzZqX6Msj eVaLDaTVM0S94G2wMnvYW0XWMwNwqIT9ReYXiJPLBmIW73vYz4rkjmH6c7FR0L3V hOt7zlFKwPnd5/2v -----END CERTIFICATE-----Generated at Sat Jan 10 16:27:06 2026 by rpki-client