This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer File: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer (raw, json) Hash identifier: tH2JABKB8/hwsEih29bQp6TuQPvU+CeLAhK5LVKBBEc= Subject key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E378FC9FF8B86A0D0AA035668368138 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 64480 AS: 200348 AS: 207092 IP: 5.154.188.0/23 IP: 89.40.171.0/24 IP: 93.113.129.0/24 IP: 185.84.67.0/24 IP: 185.162.228.0/22 IP: 185.179.89.0/24 IP: 185.193.12.0/22 IP: 195.210.50.0/23 IP: 2a0a:3440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8f:c9:ff:8b:86:a0:d0:aa:03:56:68:36:81:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:07:f0:17:30:e5:c2:11:22:5f:2e:3d:60: 15:75:59:17:a3:86:85:66:75:da:2b:e0:6e:ba:6a: c4:93:70:c4:2b:c9:f1:e4:8f:fa:b6:4b:f4:0a:14: 7f:b8:93:5f:4e:40:15:68:2e:7c:c8:5f:28:e0:35: 76:e5:4a:e1:82:dc:83:5e:6b:f5:8e:28:7d:b1:a7: 3e:dc:74:b0:b1:cf:ba:66:9d:78:9e:78:a9:9c:4f: 23:df:5d:44:34:dc:f6:93:8b:c3:69:04:60:24:8c: 96:59:1d:84:0f:83:c7:1d:48:59:58:76:75:af:fa: d3:a2:19:89:d6:8c:39:ad:fb:3b:50:61:cb:5d:2a: 72:81:20:f0:12:a9:69:e0:65:f7:f8:04:40:83:fb: bd:19:94:0d:da:6e:ee:d1:33:ea:7a:89:a7:06:ad: 15:d2:0c:2c:11:e9:a6:4a:6f:b3:96:66:75:fc:ef: e4:75:0d:38:53:79:2f:fd:98:d1:10:ca:3c:46:56: 3d:e2:e1:80:a4:19:a6:b3:af:f6:1f:a5:b6:87:ca: ea:37:0b:36:f6:54:21:41:82:39:f0:dc:d9:a3:78: 59:df:c7:7e:aa:60:c3:42:12:2a:a2:85:4a:33:57: 1b:c2:31:c4:b6:d5:a5:a6:a4:18:ee:d0:bb:87:65: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.188.0/23 89.40.171.0/24 93.113.129.0/24 185.84.67.0/24 185.162.228.0/22 185.179.89.0/24 185.193.12.0/22 195.210.50.0/23 IPv6: 2a0a:3440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64480 200348 207092 Signature Algorithm: sha256WithRSAEncryption 45:de:7e:e8:3d:d3:79:1a:d2:8b:9b:a6:5d:83:35:49:ad:ef: 56:3e:d3:a3:21:f2:6b:d0:f7:82:83:33:09:f7:b1:d8:84:d2: b9:83:51:a5:a7:d0:68:50:aa:98:6a:d4:75:b9:2a:0f:de:49: 4a:cf:05:da:15:a3:11:59:d1:1e:15:85:66:e9:52:ad:8c:48: a3:fe:ad:47:6a:a6:ed:91:af:e7:52:ab:f7:ae:48:7f:22:47: 79:a2:69:a3:2a:8b:88:37:54:07:a5:17:91:4a:14:f0:4a:b0: 36:c2:14:dc:e0:61:28:77:c4:fc:5a:64:b9:eb:ea:3c:0f:33: 64:19:43:f0:f1:1e:7e:f0:9a:3a:ae:70:f5:93:89:3f:0a:4b: e8:c5:5a:45:c7:77:49:cb:c0:02:9a:21:c9:84:14:e8:c8:76: c4:12:bc:a1:aa:c3:f5:29:1f:37:72:c0:4a:9a:1c:a9:97:ed: 7b:57:1a:80:c8:d0:ef:81:ce:dc:75:a9:28:0b:ee:bb:4d:eb: c5:c2:fc:c4:e4:53:ca:0c:7d:ca:ec:82:86:01:90:80:f5:2f: 7f:2b:2a:e5:82:82:d7:b1:15:bf:6d:61:0c:64:7e:a7:1e:bb: c5:78:23:19:fa:75:4b:3b:10:16:a4:89:39:ad:19:80:13:d6: 5b:00:17:cb -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt+N4/J/4uGoNCqA1ZoNoE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGUzOTc2ZDllY2I4MzA5YTgxODFmYmQwMjVjYTUyZmVmMTYxOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6oH8Bcw5cIRIl8uPWAVdVkXo4aF ZnXaK+BuumrEk3DEK8nx5I/6tkv0ChR/uJNfTkAVaC58yF8o4DV25UrhgtyDXmv1 jih9sac+3HSwsc+6Zp14nnipnE8j311ENNz2k4vDaQRgJIyWWR2ED4PHHUhZWHZ1 r/rTohmJ1ow5rfs7UGHLXSpygSDwEqlp4GX3+ARAg/u9GZQN2m7u0TPqeomnBq0V 0gwsEemmSm+zlmZ1/O/kdQ04U3kv/ZjREMo8RlY94uGApBmms6/2H6W2h8rqNws2 9lQhQYI58NzZo3hZ38d+qmDDQhIqooVKM1cbwjHEttWlpqQY7tC7h2WqHwIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFODjl22ey4MJqBgfvQJcpS/vFhmZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkL2Q2MTJh My00NjMxLTQ3ZGUtOTQwZC04YmUwZDk3NjgyYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvZDYxMmEz LTQ2MzEtNDdkZS05NDBkLThiZTBkOTc2ODJhYi8xLzRPT1hiWjdMZ3dtb0dCLTlB bHlsTC04V0daay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQBBZq8AwQAWSirAwQAXXGBAwQAuVRDAwQCuaLk AwQAubNZAwQCucEMAwQBw9IyMA0EAgACMAcDBQMqCjRAMCQGCCsGAQUFBwEIAQH/ BBUwE6ARMA8CAwD74AIDAw6cAgMDKPQwDQYJKoZIhvcNAQELBQADggEBAEXefug9 03ka0oubpl2DNUmt71Y+06Mh8mvQ94KDMwn3sdiE0rmDUaWn0GhQqphq1HW5Kg/e SUrPBdoVoxFZ0R4VhWbpUq2MSKP+rUdqpu2Rr+dSq/euSH8iR3miaaMqi4g3VAel F5FKFPBKsDbCFNzgYSh3xPxaZLnr6jwPM2QZQ/DxHn7wmjqucPWTiT8KS+jFWkXH d0nLwAKaIcmEFOjIdsQSvKGqw/UpHzdywEqaHKmX7XtXGoDI0O+Bztx1qSgL7rtN 68XC/MTkU8oMfcrsgoYBkID1L38rKuWCgtexFb9tYQxkfqceu8V4Ixn6dUs7EBak iTmtGYAT1lsAF8s= -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:06 2026 by rpki-client