This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.cer (raw, json) Hash identifier: eAFC0XuUibJrIQVr2PK2dHs8pQJ2rt272THn64SUvFU= Subject key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37FA33746EFBC0F0EDEC76EF651428 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:d70::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fa:33:74:6e:fb:c0:f0:ed:ec:76:ef:65:14:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:17:6d:48:69:af:37:3c:3b:e3:58:0c:17: 9a:ca:2a:ef:5e:15:94:e8:24:08:27:ff:5c:3d:8e: 47:00:10:5a:91:a4:ab:6c:48:2e:4e:67:97:9f:6f: 64:5e:5f:4f:0d:55:25:a1:88:ee:0e:ec:44:ee:6b: f2:b6:6c:17:b7:de:86:dc:c4:68:34:13:e3:89:c0: d6:12:2f:42:e7:29:30:2a:75:44:b9:10:10:4a:12: 76:ab:0d:2a:84:9e:d5:f2:92:ac:70:8d:95:92:96: c5:2c:4a:e6:19:c6:06:f3:27:7b:52:73:f9:cd:42: 40:14:04:35:3a:3c:3d:56:27:a6:f6:89:f3:f2:f6: 3d:85:4e:0d:0c:2c:b1:2b:81:8a:46:aa:28:25:13: 31:24:a6:96:cd:93:02:c7:8a:cd:f3:dd:3b:45:80: 66:26:c7:42:a2:77:ab:d6:b7:66:5c:56:db:cf:b7: 55:8e:cd:3b:79:69:11:84:71:3b:69:27:1c:14:14: d5:b2:5b:d1:fd:7b:d3:55:1a:84:61:4f:08:12:0f: 51:9f:ac:cb:e6:1f:7a:d7:aa:db:7d:34:7a:02:0a: d5:0d:2c:f2:29:38:b6:80:84:c1:c6:eb:db:21:f6: 8c:7e:3e:0b:8d:dc:51:a9:45:96:d8:76:88:e5:5e: 33:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d70::/48 Signature Algorithm: sha256WithRSAEncryption 8d:08:ca:18:6e:ba:c6:e5:70:8d:99:9c:8a:41:db:6d:b1:d3: f7:b1:7e:4b:98:4a:61:4b:c8:3d:48:47:44:9f:a5:1c:f2:a7: 11:9b:ac:1c:ed:38:4b:79:c3:93:9d:b1:27:47:aa:64:ed:29: 84:48:9e:70:47:4d:f6:b2:fc:47:b4:f7:dc:d1:7b:19:af:93: 8e:03:c9:85:3a:f3:84:74:b0:74:77:03:2e:13:95:20:f0:9a: ed:20:07:bd:35:87:9c:1b:1c:c4:77:a1:70:52:08:f9:22:d4: 90:94:a2:b1:d1:3f:04:45:91:40:e6:0b:fc:bb:07:62:b1:29: 73:25:be:2b:8e:27:fd:25:34:71:09:5a:88:06:08:0f:d2:54: bb:9c:a4:01:f7:25:0f:12:15:77:b7:9a:48:9e:66:0d:a9:44: 44:52:87:7c:62:db:79:3f:d3:54:d3:4a:6d:6a:d8:8b:c1:d5: f4:a2:3d:03:c7:af:15:8e:82:74:06:71:8f:6b:d1:bf:a0:b2: fd:59:a0:ee:d2:2f:13:37:b3:c5:5d:20:af:19:19:d7:ca:cd: b4:00:06:68:23:06:99:23:33:17:df:94:83:74:c1:88:c1:00: b6:61:d9:cf:0a:05:56:16:1a:c3:a7:36:ae:42:1f:d7:cd:26: 0e:7a:5d:ca -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt+N/ozdG77wPDt7HbvZRQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGQ1ZDU2MWU3NmVmMjU5YzRhMDJkZjMwZjM1MDY0ZGVkZWRmMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lgXbUhprzc8O+NYDBeayirvXhWU 6CQIJ/9cPY5HABBakaSrbEguTmeXn29kXl9PDVUloYjuDuxE7mvytmwXt96G3MRo NBPjicDWEi9C5ykwKnVEuRAQShJ2qw0qhJ7V8pKscI2VkpbFLErmGcYG8yd7UnP5 zUJAFAQ1Ojw9Viem9onz8vY9hU4NDCyxK4GKRqooJRMxJKaWzZMCx4rN8907RYBm JsdConer1rdmXFbbz7dVjs07eWkRhHE7aSccFBTVslvR/XvTVRqEYU8IEg9Rn6zL 5h9616rbfTR6AgrVDSzyKTi2gITBxuvbIfaMfj4LjdxRqUWW2HaI5V4zawIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFODV1WHnbvJZxKAt8w81Bk3t7fLXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2Q0NTQ2 OS0wYzdiLTQ0MTAtYmI1ZS03ZGM1MjhhYTVkNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZDQ1NDY5 LTBjN2ItNDQxMC1iYjVlLTdkYzUyOGFhNWQ0ZS8xLzROWFZZZWR1OGxuRW9DM3pE elVHVGUzdDh0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA1wMA0GCSqGSIb3DQEBCwUAA4IBAQCN CMoYbrrG5XCNmZyKQdttsdP3sX5LmEphS8g9SEdEn6Uc8qcRm6wc7ThLecOTnbEn R6pk7SmESJ5wR032svxHtPfc0XsZr5OOA8mFOvOEdLB0dwMuE5Ug8JrtIAe9NYec GxzEd6FwUgj5ItSQlKKx0T8ERZFA5gv8uwdisSlzJb4rjif9JTRxCVqIBggP0lS7 nKQB9yUPEhV3t5pInmYNqUREUod8Ytt5P9NU00ptatiLwdX0oj0Dx68VjoJ0BnGP a9G/oLL9WaDu0i8TN7PFXSCvGRnXys20AAZoIwaZIzMX35SDdMGIwQC2YdnPCgVW FhrDpzauQh/XzSYOel3K -----END CERTIFICATE-----Generated at Mon Jan 26 03:48:13 2026 by rpki-client