This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer File: v4F9yFUt82EP_EVEGz-BRk5Incg.cer (raw, json) Hash identifier: Vtg0dE2ViAlY1hH2UL2/SEyoxvWvHIM4jCiaAtvAtdY= Subject key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37B3B6A56923176E8F28C2CC401CCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.88.54.0/23 IP: 2001:67c:21e0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b3:b6:a5:69:23:17:6e:8f:28:c2:cc:40:1c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf817dc8552df3610ffc45441b3f81464e489dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:70:08:cf:a6:ab:c3:f1:74:01:c0:1e:da: 69:bd:4a:57:27:60:b3:66:b1:53:26:09:c0:c9:50: 64:51:a5:dc:f7:63:07:20:0f:51:b7:39:ab:ac:22: 7a:9a:28:d2:e7:43:1a:ac:88:1e:b5:cc:c7:8a:fb: b5:39:68:ac:dd:a2:43:84:db:c2:83:41:04:96:2f: 7f:e5:52:47:dd:ff:23:31:29:ef:9d:3f:02:69:f3: 6f:35:82:48:a2:e1:81:5e:9f:d9:46:67:51:d3:53: cf:d2:1c:44:d3:f0:85:ae:02:b2:c5:39:56:20:a7: 3a:01:ad:36:83:dd:1c:cf:7f:d1:6f:ca:7a:48:18: 3f:4e:72:3c:44:ea:97:5d:25:4b:86:20:3e:cb:19: 96:28:54:d6:f1:c5:cb:17:5f:66:9d:0c:c7:0d:8a: c1:ca:13:45:d9:24:f0:be:24:8e:3d:e6:40:72:47: be:03:ac:1f:0a:73:69:d5:0c:65:14:31:af:7a:ff: e7:84:08:b4:60:a2:5e:51:8c:a9:75:c2:f5:4c:4f: a9:55:cf:55:bb:ac:e3:9b:e9:4e:71:47:e9:38:b5: ef:48:d3:c3:79:d0:2b:cb:39:a2:f3:c7:16:6b:ff: e3:f5:6e:49:7c:03:34:e6:88:89:83:46:b0:fc:e8: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.54.0/23 IPv6: 2001:67c:21e0::/48 Signature Algorithm: sha256WithRSAEncryption 9f:de:00:5d:3b:94:13:50:b0:65:a6:ec:4b:2f:86:0c:7b:65: fc:90:f5:56:6a:ba:ce:f1:d0:44:82:3f:b2:db:f4:d3:82:e1: 1b:9b:f5:eb:f9:62:1f:ac:49:21:ad:01:81:b3:9e:2c:3a:d3: e6:ab:cc:de:1a:10:47:fd:21:44:8c:29:89:a5:b2:ff:ff:91: a4:0c:8e:35:25:7f:74:fd:9a:fd:13:6f:83:1c:f3:1a:f3:2e: 9f:cc:53:e8:a9:05:80:12:b3:70:20:ee:06:d3:39:98:50:e7: bd:30:98:4a:6a:23:3a:bb:32:8b:c5:c0:b4:0a:8d:81:00:e3: f4:27:33:c2:ad:48:c0:f0:8e:0c:44:ef:02:dc:e9:fe:67:b2: ff:c9:08:f8:a9:44:a2:15:f1:4c:cd:d4:4f:67:0c:24:86:31: 67:76:12:d0:a1:11:52:47:8a:eb:06:fb:35:d2:9a:1b:93:4c: 5b:79:4d:fe:45:bd:89:27:84:18:5a:36:69:f8:ea:e3:fc:0c: 5c:dc:4b:08:f2:93:f7:88:38:0d:a1:4c:31:11:44:80:24:f0: cc:c7:81:a5:fc:1b:92:b9:10:3b:e0:b7:23:d9:99:b1:f0:05: 2a:ef:2c:85:01:e3:b5:d6:1e:74:8a:d6:62:b6:14:87:cf:31: b5:5c:0f:5c -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt+N7O2pWkjF26PKMLMQBzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjgxN2RjODU1MmRmMzYxMGZmYzQ1NDQxYjNmODE0NjRlNDg5ZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbBwCM+mq8PxdAHAHtppvUpXJ2Cz ZrFTJgnAyVBkUaXc92MHIA9RtzmrrCJ6mijS50MarIgetczHivu1OWis3aJDhNvC g0EEli9/5VJH3f8jMSnvnT8CafNvNYJIouGBXp/ZRmdR01PP0hxE0/CFrgKyxTlW IKc6Aa02g90cz3/Rb8p6SBg/TnI8ROqXXSVLhiA+yxmWKFTW8cXLF19mnQzHDYrB yhNF2STwviSOPeZAcke+A6wfCnNp1QxlFDGvev/nhAi0YKJeUYypdcL1TE+pVc9V u6zjm+lOcUfpOLXvSNPDedAryzmi88cWa//j9W5JfAM05oiJg0aw/OhCjQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFL+BfchVLfNhD/xFRBs/gUZOSJ3IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2L2M0ZTdl OS1mNmJlLTQxYTMtYTQ1OS0xOTUzODkzMzBlZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvYzRlN2U5 LWY2YmUtNDFhMy1hNDU5LTE5NTM4OTMzMGVkZi8xL3Y0Rjl5RlV0ODJFUF9FVkVH ei1CUms1SW5jZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw1g2MA8EAgACMAkDBwAgAQZ8IeAwDQYJKoZI hvcNAQELBQADggEBAJ/eAF07lBNQsGWm7Esvhgx7ZfyQ9VZqus7x0ESCP7Lb9NOC 4Rub9ev5Yh+sSSGtAYGzniw60+arzN4aEEf9IUSMKYmlsv//kaQMjjUlf3T9mv0T b4Mc8xrzLp/MU+ipBYASs3Ag7gbTOZhQ570wmEpqIzq7MovFwLQKjYEA4/QnM8Kt SMDwjgxE7wLc6f5nsv/JCPipRKIV8UzN1E9nDCSGMWd2EtChEVJHiusG+zXSmhuT TFt5Tf5FvYknhBhaNmn46uP8DFzcSwjyk/eIOA2hTDERRIAk8MzHgaX8G5K5EDvg tyPZmbHwBSrvLIUB47XWHnSK1mK2FIfPMbVcD1w= -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:29 2026 by rpki-client