This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer (raw, json) Hash identifier: Ua8q/Jy0GX/BSo/qmVqeq0Sb+rtcGSLWS4rO9f+YPMA= Subject key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B2F1B408E06DC3F66D80BD2116E16 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.205.16.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2f:1b:40:8e:06:dc:3f:66:d8:0b:d2:11:6e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:8e:60:e8:4e:4f:67:59:25:f8:13:3e:fb: 84:bd:2b:9a:b9:db:ff:a1:22:03:ea:7e:b3:6f:17: 91:80:ad:0c:44:36:21:a2:94:70:8d:ea:1e:93:ca: c3:d4:39:b8:3a:55:07:a5:71:78:f8:5c:c6:d4:b8: 21:2b:25:cb:0e:7d:37:49:cf:7c:aa:0e:7d:36:d5: 78:1d:41:72:1a:c0:86:2e:e8:40:65:ff:99:0d:2a: 6b:46:0f:75:b6:04:e8:6c:36:fd:62:ab:43:38:5c: 90:6f:a2:7a:0b:b2:15:f0:d6:a2:a6:72:05:d1:24: dd:b1:7f:2b:9c:43:3e:9f:c0:b6:c9:07:3d:8f:11: c1:51:d1:e1:6a:24:03:0d:7a:29:87:5c:75:85:eb: dd:cd:e9:33:83:d3:54:e4:49:e6:cf:6c:0b:ec:45: b9:bf:ec:60:dd:76:f2:e1:8e:cf:8f:83:42:c3:81: e2:e7:54:43:bf:b0:36:53:08:1f:0e:64:27:35:cc: c9:8f:b1:58:66:ce:6b:c9:d3:d8:cb:0b:37:50:06: 60:ec:6d:57:b7:e0:31:ed:dd:ed:78:49:bf:a8:23: 31:9c:5a:79:07:a9:72:92:86:a9:93:0e:15:71:4d: d3:5c:2b:82:41:ee:9e:11:fe:f4:20:2e:ac:a2:68: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.16.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:18:a0:17:b0:1b:71:da:ea:69:23:e1:b2:44:2d:da:b5:33: 4a:20:eb:3f:3d:76:ae:a7:04:31:b4:b7:65:66:49:90:6a:41: c1:6a:96:ce:56:d0:7d:0e:69:dc:19:2c:48:7c:01:43:46:7b: 2d:ba:ed:a1:32:ea:ba:5c:b9:0f:51:dd:1c:ab:f6:c6:ea:a5: 9d:09:d5:b2:3f:ce:99:ab:77:7e:03:91:5a:88:52:c1:ec:e3: ff:f9:24:68:40:9c:dc:67:be:64:50:b9:d7:d8:4c:04:38:27: 7a:e7:c0:f7:96:e2:95:fb:b6:56:7f:81:7a:6b:f7:de:d2:a5: 40:0f:cf:84:77:35:a7:ca:6e:12:80:05:72:11:f7:20:d9:74: e9:7a:9d:6e:a5:d4:b0:c3:e0:e5:59:33:53:1c:fd:43:26:83: 71:2d:44:61:96:47:45:76:87:5f:d4:1c:f1:10:1e:89:c8:e2: b9:e4:21:a7:43:ee:9b:2b:02:56:0b:ca:fd:4e:34:ea:83:3f: f3:40:51:6f:ec:34:ac:f1:c4:68:d8:b3:83:5a:7b:a6:2d:10: c8:16:a2:04:9e:e6:b0:cc:ab:e8:29:40:0d:04:69:9e:fa:81: d8:b8:4f:ea:17:a9:a4:29:02:fa:05:81:a8:1c:ed:0e:6a:13: 32:e6:f4:af -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6Wy8bQI4G3D9m2AvSEW4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzhiNTJkZGZkMGJlNTYxZDQxMGNhODg0NmZjNzk3ZTIyOThiM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojKOYOhOT2dZJfgTPvuEvSuaudv/ oSID6n6zbxeRgK0MRDYhopRwjeoek8rD1Dm4OlUHpXF4+FzG1LghKyXLDn03Sc98 qg59NtV4HUFyGsCGLuhAZf+ZDSprRg91tgTobDb9YqtDOFyQb6J6C7IV8NaipnIF 0STdsX8rnEM+n8C2yQc9jxHBUdHhaiQDDXoph1x1hevdzekzg9NU5Enmz2wL7EW5 v+xg3Xby4Y7Pj4NCw4Hi51RDv7A2UwgfDmQnNczJj7FYZs5rydPYyws3UAZg7G1X t+Ax7d3teEm/qCMxnFp5B6lykoapkw4VcU3TXCuCQe6eEf70IC6somhVswIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMeLUt39C+Vh1BDKiEb8eX4imLPMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzUyNTcw Ny0xYTEyLTQxMzgtYWU0Ni05ZjdlOGE2MTIyYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNTI1NzA3 LTFhMTItNDEzOC1hZTQ2LTlmN2U4YTYxMjJhMy8xL3g0dFMzZjBMNVdIVUVNcUlS dng1ZmlLWXM4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW80QMA0GCSqGSIb3DQEBCwUAA4IBAQALGKAX sBtx2uppI+GyRC3atTNKIOs/PXaupwQxtLdlZkmQakHBapbOVtB9DmncGSxIfAFD Rnstuu2hMuq6XLkPUd0cq/bG6qWdCdWyP86Zq3d+A5FaiFLB7OP/+SRoQJzcZ75k ULnX2EwEOCd658D3luKV+7ZWf4F6a/fe0qVAD8+EdzWnym4SgAVyEfcg2XTpep1u pdSww+DlWTNTHP1DJoNxLURhlkdFdodf1BzxEB6JyOK55CGnQ+6bKwJWC8r9TjTq gz/zQFFv7DSs8cRo2LODWnumLRDIFqIEnuawzKvoKUANBGme+oHYuE/qF6mkKQL6 BYGoHO0OahMy5vSv -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:34 2026 by rpki-client