This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.cer (raw, json) Hash identifier: JhuO58MrjTFigYRU1Lamly5CdfmTN93+6kTXdonTyWQ= Subject key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCABA9F5FA1DA401909E322D69342C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21500 AS: 24618 IP: 62.106.68.0/24 IP: 81.17.128.0/20 IP: 85.90.200.0/22 IP: 92.118.136.0/22 IP: 92.118.224.0/22 IP: 185.112.12.0/22 IP: 195.69.184.0/22 IP: 195.234.220.0/22 IP: 2a06:6200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ba:9f:5f:a1:da:40:19:09:e3:22:d6:93:42:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:03:7a:67:73:c4:44:84:c3:95:4a:6d:a2:3e: 8b:45:a6:8b:ec:a5:93:aa:9e:68:aa:62:bb:74:b9: 60:26:6f:d0:39:7b:72:a5:5e:d8:ed:bc:b5:1e:29: bc:cf:fc:55:26:9d:57:26:eb:4c:75:19:ce:f8:a5: fe:e0:5f:d8:35:3f:6a:74:c8:50:ff:09:3f:7c:90: 1c:bd:c2:a6:7d:e4:98:78:54:06:34:da:e7:d2:59: af:36:34:4a:66:ed:af:69:ca:68:ae:60:1c:dd:3a: bc:2a:ae:55:f5:f3:45:08:71:47:42:c0:da:29:fc: 07:64:0b:80:ef:7e:62:58:20:71:ad:81:a4:82:cf: e5:50:7f:bc:47:d7:8c:af:ac:7e:78:c5:77:06:a0: 6e:05:a9:e1:0c:de:86:40:d3:ab:af:68:c5:35:b9: 5d:ad:41:35:59:de:3b:9a:84:29:7f:bb:31:a6:9f: 14:eb:7d:5d:1c:cd:2f:ed:e9:11:8a:53:92:08:ce: 6c:8e:15:c0:8c:69:7c:bc:f7:2e:a9:ab:bc:bc:01: 1d:72:8e:88:48:87:c2:88:1c:90:27:33:3d:79:84: 61:c9:5c:37:45:db:52:01:2c:ce:a0:10:84:83:27: 91:85:7f:22:b6:b9:33:b9:35:d3:73:c3:de:3e:6b: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.68.0/24 81.17.128.0/20 85.90.200.0/22 92.118.136.0/22 92.118.224.0/22 185.112.12.0/22 195.69.184.0/22 195.234.220.0/22 IPv6: 2a06:6200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21500 24618 Signature Algorithm: sha256WithRSAEncryption 3a:ca:28:a5:a0:1b:28:8b:a2:11:93:ba:47:2f:c3:5e:77:ba: 5d:6c:8e:c7:68:f1:4e:a4:cc:1e:08:8f:e2:f2:e4:01:bb:6d: d9:da:91:99:92:08:80:4c:3b:c3:36:4a:d9:69:81:00:cc:ab: 49:de:25:48:41:58:bd:0c:fb:6c:90:83:e2:fe:72:1b:00:0a: 78:2d:5d:64:d2:d6:56:05:f2:f9:07:b2:d3:cf:a8:e1:79:81: 4b:9e:b5:98:59:a4:53:39:63:09:82:8b:91:d9:2d:9f:d3:50: 12:73:6c:dc:06:c3:38:54:14:ae:29:c3:9f:e8:00:a6:e7:d7: 32:35:6b:36:3b:6b:f0:a4:2f:b4:61:34:a4:81:98:4a:c4:b9: 12:88:8c:08:15:f7:3e:33:cf:c4:55:7c:24:5c:07:5a:25:b2: cc:e1:bb:a9:d3:a0:25:a3:23:b6:9c:a9:f8:2b:9a:7f:1e:45: 3d:ea:16:1f:a9:72:44:bc:49:2c:77:09:d3:0b:20:c5:37:b5: 31:4f:df:91:3b:e3:a8:71:ae:7c:5d:35:d3:67:ba:cf:92:95: fa:77:95:c7:68:53:1c:45:f1:b1:cd:60:ae:c2:67:c0:6c:27: e8:c6:b5:87:6c:9e:8f:b7:5b:4c:e5:c3:68:64:14:02:ed:cb: f8:84:6d:84 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt9yrqfX6HaQBkJ4yLWk0LEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDU3NGMyODc4ZDZiNTM2MTM5Yjg5NWYwOGM5YzZkYjE4ZTEyYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQN6Z3PERITDlUptoj6LRaaL7KWT qp5oqmK7dLlgJm/QOXtypV7Y7by1Him8z/xVJp1XJutMdRnO+KX+4F/YNT9qdMhQ /wk/fJAcvcKmfeSYeFQGNNrn0lmvNjRKZu2vacpormAc3Tq8Kq5V9fNFCHFHQsDa KfwHZAuA735iWCBxrYGkgs/lUH+8R9eMr6x+eMV3BqBuBanhDN6GQNOrr2jFNbld rUE1Wd47moQpf7sxpp8U631dHM0v7ekRilOSCM5sjhXAjGl8vPcuqau8vAEdco6I SIfCiByQJzM9eYRhyVw3RdtSASzOoBCEgyeRhX8itrkzuTXTc8PePmvIMQIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFOBXTCh41rU2E5uJXwjJxtsY4SqbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzI4ZDYw MC1hODY5LTRhYjEtOWIyZS00NDYwMTk5NjZhMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvMjhkNjAw LWE4NjktNGFiMS05YjJlLTQ0NjAxOTk2NmExOS8xLzRGZE1LSGpXdFRZVG00bGZD TW5HMnhqaEtwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQAPmpEAwQEURGAAwQCVVrIAwQCXHaIAwQCXHbg AwQCuXAMAwQCw0W4AwQCw+rcMA0EAgACMAcDBQMqBmIAMB0GCCsGAQUFBwEIAQH/ BA4wDKAKMAgCAlP8AgJgKjANBgkqhkiG9w0BAQsFAAOCAQEAOsoopaAbKIuiEZO6 Ry/DXne6XWyOx2jxTqTMHgiP4vLkAbtt2dqRmZIIgEw7wzZK2WmBAMyrSd4lSEFY vQz7bJCD4v5yGwAKeC1dZNLWVgXy+Qey08+o4XmBS561mFmkUzljCYKLkdktn9NQ EnNs3AbDOFQUrinDn+gApufXMjVrNjtr8KQvtGE0pIGYSsS5EoiMCBX3PjPPxFV8 JFwHWiWyzOG7qdOgJaMjtpyp+Cuafx5FPeoWH6lyRLxJLHcJ0wsgxTe1MU/fkTvj qHGufF0102e6z5KV+neVx2hTHEXxsc1grsJnwGwn6Ma1h2yej7dbTOXDaGQUAu3L +IRthA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:34 2026 by rpki-client