This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.cer (raw, json) Hash identifier: cwi6xmIJnTYbbxLDXtmZMopEPqdMPfznHGiyULwKSUg= Subject key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910947211FE28147EDFFC5334E6C306 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:ed8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:94:72:11:fe:28:14:7e:df:fc:53:34:e6:c3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:d1:20:75:f4:38:a7:63:42:ae:da:e1:69: fe:49:4d:88:4e:6e:14:f7:e5:9c:ec:c3:59:44:ee: 54:fc:77:70:a1:c0:14:27:e7:b3:a1:7b:86:b8:5f: d5:04:94:16:dd:db:cc:52:89:2a:da:72:9f:96:d3: 3e:e3:e2:24:da:18:b9:71:f3:f6:c2:5f:32:41:38: 8e:8d:ec:aa:ca:40:d7:d3:90:39:e1:47:18:e8:98: 21:84:f9:66:e7:8c:dc:9f:e6:e6:4c:1c:06:4f:cc: 5e:e2:1d:a3:3d:bb:98:bd:50:44:d5:b7:97:94:a0: f7:fb:28:33:af:cb:89:13:d4:5c:4d:04:5a:c9:aa: bc:af:be:6e:63:a5:52:c2:e0:68:58:94:32:d7:6c: 7d:c1:45:96:d3:ec:64:dd:12:12:98:8b:02:7c:a4: 60:e4:6c:3c:55:8b:61:46:4b:d0:ce:70:a4:58:49: 2e:b8:1f:6f:10:da:9e:3c:3d:b2:3b:d0:aa:71:08: aa:b3:12:9b:14:d1:07:01:8c:7a:d8:10:b0:a8:e3: 53:45:9f:0f:5f:f1:ff:04:ed:d8:98:47:7a:70:71: 62:42:b3:4e:11:85:71:4e:a7:a6:e4:16:d1:b7:3f: d9:d3:5d:9d:8f:2e:11:69:0f:04:be:31:3f:df:66: 9f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ed8::/48 Signature Algorithm: sha256WithRSAEncryption 3b:7e:42:25:05:09:2d:7d:1d:27:ce:8d:91:6e:5c:5c:dc:cd: 94:ad:29:c4:87:5d:e8:7b:4b:7a:90:e6:2a:f3:20:c5:d6:65: f3:b9:37:b7:1b:92:e6:a7:e1:d4:c5:b1:e8:54:f1:e4:9a:df: 5b:48:74:d3:3c:51:5b:80:a6:46:f8:57:87:57:92:1b:3d:0c: e9:56:97:f4:57:1c:a6:f1:35:8d:cc:05:f1:45:de:fd:44:68: 72:bb:ac:f6:c9:59:0a:29:da:e4:60:4a:ab:3f:67:b8:03:a5: d2:51:dc:fc:14:c5:64:f4:7f:d7:82:8e:7e:a8:12:a5:e0:42: 31:a9:7c:69:ff:a9:8e:08:4d:08:25:80:ff:d0:16:13:0a:bd: 68:14:8b:bd:bd:fd:c2:d3:55:74:9f:77:50:bc:3d:28:37:64: d6:2c:e7:c6:0c:da:5b:10:d5:30:08:d5:56:70:80:68:14:eb: 31:6f:3c:16:80:13:36:01:ee:f3:42:0b:8d:e9:34:b6:2f:05: 90:10:f2:65:98:a4:80:67:e2:cc:ef:01:29:fd:b2:f2:b9:89: 59:ff:21:33:23:1a:d3:3d:7f:be:9b:08:09:47:8b:b7:34:88: 38:8a:db:fd:ee:5c:89:4e:7e:c9:2a:55:45:2a:1c:dc:de:7e: 64:52:e5:50 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt5EJRyEf4oFH7f/FM05sMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDExMDYwNmY1MjRkYmFhNTM4ZTY3ZTEyM2NhZmJjNmRmMzM4NmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxurRIHX0OKdjQq7a4Wn+SU2ITm4U 9+Wc7MNZRO5U/HdwocAUJ+ezoXuGuF/VBJQW3dvMUokq2nKfltM+4+Ik2hi5cfP2 wl8yQTiOjeyqykDX05A54UcY6JghhPlm54zcn+bmTBwGT8xe4h2jPbuYvVBE1beX lKD3+ygzr8uJE9RcTQRayaq8r75uY6VSwuBoWJQy12x9wUWW0+xk3RISmIsCfKRg 5Gw8VYthRkvQznCkWEkuuB9vENqePD2yO9CqcQiqsxKbFNEHAYx62BCwqONTRZ8P X/H/BO3YmEd6cHFiQrNOEYVxTqem5BbRtz/Z012djy4RaQ8EvjE/32af9wIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFOARBgb1JNuqU45n4SPK+8bfM4bAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzczZjc0 OS00NTYwLTRhYmUtOGQwYi1lMmMxYWJhZmFhNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvNzNmNzQ5 LTQ1NjAtNGFiZS04ZDBiLWUyYzFhYmFmYWE2Yy8xLzRCRUdCdlVrMjZwVGptZmhJ OHI3eHQ4emhzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA7YMA0GCSqGSIb3DQEBCwUAA4IBAQA7 fkIlBQktfR0nzo2Rblxc3M2UrSnEh13oe0t6kOYq8yDF1mXzuTe3G5Lmp+HUxbHo VPHkmt9bSHTTPFFbgKZG+FeHV5IbPQzpVpf0Vxym8TWNzAXxRd79RGhyu6z2yVkK KdrkYEqrP2e4A6XSUdz8FMVk9H/Xgo5+qBKl4EIxqXxp/6mOCE0IJYD/0BYTCr1o FIu9vf3C01V0n3dQvD0oN2TWLOfGDNpbENUwCNVWcIBoFOsxbzwWgBM2Ae7zQguN 6TS2LwWQEPJlmKSAZ+LM7wEp/bLyuYlZ/yEzIxrTPX++mwgJR4u3NIg4itv97lyJ Tn7JKlVFKhzc3n5kUuVQ -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:49 2026 by rpki-client