This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer File: 4GyK0oU47eC0x-GnHpypianwPxA.cer (raw, json) Hash identifier: V/3bWS1puwzqEnTFFsb0qFFUN0d6B9pMqy17vYqcZCg= Subject key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB72A59344CAA270890F0C63FBD994 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.50.152.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:72:a5:93:44:ca:a2:70:89:0f:0c:63:fb:d9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2f:62:77:cf:30:43:88:9e:11:ca:64:24:2c: 6b:e3:a1:44:ed:5a:c4:01:7e:28:8e:c7:f2:3f:51: 34:99:bd:c4:ad:17:b7:5e:21:cd:21:79:52:fa:8d: 82:1b:0e:9f:4f:6a:43:10:38:80:23:d3:48:9a:0a: e9:0a:07:b2:86:d5:67:a5:5f:32:75:93:b3:2c:ed: 7c:88:c5:17:d0:21:4a:39:9a:f9:3e:cc:1e:a5:17: ab:7b:00:6d:35:ec:91:6e:44:9c:11:4e:7a:6f:f7: 9b:94:e2:3d:f0:af:4c:f5:1e:4e:bc:cc:cc:d9:e9: ce:82:c5:73:d1:91:53:6e:ce:6a:a0:18:a3:d5:cd: dd:38:69:37:8e:fb:91:50:40:c3:2d:e3:92:9c:e6: 66:7f:0a:27:44:0f:bc:f8:ba:37:7f:f2:95:72:97: 8a:7c:6d:db:2e:71:e1:f8:9e:f9:06:10:ce:d6:fd: c9:cc:4f:54:01:72:bc:e0:56:99:4e:9a:50:42:a7: bf:36:e9:3a:84:32:fc:50:bf:1b:e0:6c:1e:9a:ef: d3:a3:96:a8:5b:86:b2:ec:01:86:24:72:0e:5d:3c: 36:e5:84:8b:77:30:b5:a2:ad:b9:a1:c2:be:9d:3a: 84:1c:46:b0:3a:c4:08:f3:f9:ad:c7:70:b8:0f:51: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.152.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:10:a8:b6:7d:75:12:b9:da:bf:b5:8b:c5:00:11:6c:78:c0: 2d:75:24:09:c7:e6:7c:65:05:de:fd:3b:f3:0c:f5:3e:c1:00: 96:58:cf:6f:8f:03:5e:71:43:92:3b:4a:47:89:bb:33:4a:a8: 23:95:aa:03:aa:e2:3e:4f:47:a5:ed:82:0e:3c:f4:d0:02:f7: 68:37:ac:96:05:af:02:50:99:7d:f6:f8:12:a0:09:ab:82:d8: 9f:28:74:1d:d7:45:18:41:4a:b8:42:dc:4e:3e:d6:20:ec:25: c7:4a:d3:3b:ea:e4:f2:8f:84:ef:86:05:ca:4c:57:44:3c:70: aa:fa:d6:db:f5:b2:64:49:d2:1c:78:3d:1e:25:cf:c0:1a:07: 4e:8a:be:50:7a:e0:fe:b6:13:06:22:fd:4d:ae:e4:18:5e:63: 63:81:7d:30:8f:2a:00:82:7f:59:19:69:b1:e0:6e:b5:d2:43: 3b:eb:a3:28:52:74:7d:fb:fb:ae:3a:9b:a2:b9:51:40:4b:c0: af:68:21:41:02:df:8b:c0:8e:a8:e5:19:fa:81:31:0b:55:29: c9:3f:23:e5:97:66:5b:6a:0f:a6:6f:77:5c:87:cd:4d:b1:af: 95:4f:ac:28:df:9e:15:02:2c:ad:61:e6:d7:4f:6b:fb:53:6d: df:a2:95:ae -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt263Klk0TKonCJDwxj+9mUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDZjOGFkMjg1MzhlZGUwYjRjN2UxYTcxZTljYTk4OWE5ZjAzZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C9id88wQ4ieEcpkJCxr46FE7VrE AX4ojsfyP1E0mb3ErRe3XiHNIXlS+o2CGw6fT2pDEDiAI9NImgrpCgeyhtVnpV8y dZOzLO18iMUX0CFKOZr5PswepRerewBtNeyRbkScEU56b/eblOI98K9M9R5OvMzM 2enOgsVz0ZFTbs5qoBij1c3dOGk3jvuRUEDDLeOSnOZmfwonRA+8+Lo3f/KVcpeK fG3bLnHh+J75BhDO1v3JzE9UAXK84FaZTppQQqe/Nuk6hDL8UL8b4Gwemu/To5ao W4ay7AGGJHIOXTw25YSLdzC1oq25ocK+nTqEHEawOsQI8/mtx3C4D1G+FQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOBsitKFOO3gtMfhpx6cqYmp8D8QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2YwMDA2 Zi01NjcwLTQyYTYtODVhOS0zMWIyYzY2NmIyZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvZjAwMDZm LTU2NzAtNDJhNi04NWE5LTMxYjJjNjY2YjJkYy8xLzRHeUswb1U0N2VDMHgtR25I cHlwaWFud1B4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwjKYMA0GCSqGSIb3DQEBCwUAA4IBAQAdEKi2 fXUSudq/tYvFABFseMAtdSQJx+Z8ZQXe/TvzDPU+wQCWWM9vjwNecUOSO0pHibsz SqgjlaoDquI+T0el7YIOPPTQAvdoN6yWBa8CUJl99vgSoAmrgtifKHQd10UYQUq4 QtxOPtYg7CXHStM76uTyj4TvhgXKTFdEPHCq+tbb9bJkSdIceD0eJc/AGgdOir5Q euD+thMGIv1NruQYXmNjgX0wjyoAgn9ZGWmx4G610kM766MoUnR9+/uuOpuiuVFA S8CvaCFBAt+LwI6o5Rn6gTELVSnJPyPll2Zbag+mb3dch81Nsa+VT6wo354VAiyt YebXT2v7U23fopWu -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:46 2026 by rpki-client