This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer (raw, json) Hash identifier: vlDcnr5AYXV+wmiXg0OGxYdOCR8+SiFwXkEsNJsNv20= Subject key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9BC447FD0E3819C5E9DDF8A8C050 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43350 AS: 64437 IP: 5.104.136.0/21 IP: 37.143.32.0/21 IP: 37.153.168.0/22 IP: 37.156.228.0/22 IP: 37.156.252.0/22 IP: 46.166.128.0/19 IP: 46.166.176.0/20 IP: 77.247.176.0/21 IP: 85.159.232.0/21 IP: 89.38.160.0/22 IP: 92.114.100.0/22 IP: 109.201.128.0/19 IP: 176.126.232.0/22 IP: 185.7.76.0/22 IP: 185.11.144.0/22 IP: 185.45.193.0/24 IP: 185.62.188.0/22 IP: 185.82.201.0/24 IP: 185.82.203.0/24 IP: 185.106.121.0/24 IP: 185.107.36.0/22 IP: 185.107.44.0/22 IP: 185.107.56.0/22 IP: 185.107.68.0/22 IP: 185.107.80.0/22 IP: 185.107.92.0/22 IP: 185.107.100.0/22 IP: 185.107.116.0/22 IP: 185.117.74.0/23 IP: 185.183.96.0/24 IP: 185.198.57.0/24 IP: 185.244.150.0/24 IP: 188.209.48.0/20 IP: 194.36.189.0/24 IP: 212.92.104.0 -- 212.92.125.255 IP: 2a00:1768::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9b:c4:47:fd:0e:38:19:c5:e9:dd:f8:a8:c0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:2a:d6:90:7e:c4:e7:21:ae:82:ca:0a:2e: 38:73:f7:d1:29:1a:18:27:33:4d:f0:03:c3:f2:a7: d4:2f:ad:e7:ac:54:88:89:5c:85:eb:17:51:36:1e: fa:ac:f7:73:b2:b6:71:64:7e:d5:ef:42:22:ce:45: e0:73:6c:cb:e5:56:50:35:4b:d2:ed:f3:e9:dc:cc: 65:24:f8:b3:70:10:42:40:3a:d4:41:41:c3:ef:65: 0b:4e:73:b6:91:2a:ca:72:47:6c:d7:d0:10:6e:4c: 17:70:35:16:9b:25:43:90:84:1c:14:59:f5:3c:18: 91:40:78:4c:c6:2a:88:1b:28:d2:0a:db:16:c5:fb: 76:8f:dd:b9:bb:0d:fb:28:9e:59:91:71:41:00:81: 96:f2:7e:4c:8c:6b:ee:33:15:6f:0a:88:07:e8:2c: a2:f0:48:4a:27:6e:26:9c:23:29:43:d8:12:8a:3a: 29:1d:3f:13:6d:09:71:a0:14:23:c5:7e:b9:bb:73: 9e:58:cb:2f:c8:23:5f:dd:7a:cf:29:57:05:f6:11: 4f:4d:89:45:7e:73:cc:09:65:ba:ba:02:8b:fc:7b: 3c:e4:6a:eb:87:69:45:91:2d:02:23:df:8e:78:20: 3c:86:c8:aa:d2:2f:85:88:1b:31:5f:39:61:aa:52: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.136.0/21 37.143.32.0/21 37.153.168.0/22 37.156.228.0/22 37.156.252.0/22 46.166.128.0/19 46.166.176.0/20 77.247.176.0/21 85.159.232.0/21 89.38.160.0/22 92.114.100.0/22 109.201.128.0/19 176.126.232.0/22 185.7.76.0/22 185.11.144.0/22 185.45.193.0/24 185.62.188.0/22 185.82.201.0/24 185.82.203.0/24 185.106.121.0/24 185.107.36.0/22 185.107.44.0/22 185.107.56.0/22 185.107.68.0/22 185.107.80.0/22 185.107.92.0/22 185.107.100.0/22 185.107.116.0/22 185.117.74.0/23 185.183.96.0/24 185.198.57.0/24 185.244.150.0/24 188.209.48.0/20 194.36.189.0/24 212.92.104.0-212.92.125.255 IPv6: 2a00:1768::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43350 64437 Signature Algorithm: sha256WithRSAEncryption 8f:03:df:39:5d:38:e5:a2:46:fa:41:46:76:10:72:1d:dd:21: 39:45:29:e5:56:6b:11:bb:9d:40:6d:61:60:c6:96:ed:cf:d6: 85:e2:53:eb:be:1d:1b:9b:43:20:6d:fc:84:94:a2:55:8e:a0: fb:0b:c8:2b:58:ff:da:67:2a:7f:96:6f:ba:09:e6:b7:53:91: 62:f8:75:85:5b:f9:e3:9f:6e:cc:ac:7b:69:b9:dc:ec:21:ae: 11:0b:7b:23:86:fa:2b:42:43:9d:e9:22:70:04:b1:70:01:d8: 38:b6:cb:e1:17:0c:f0:e2:ca:cd:7e:e0:d5:52:da:00:98:51: 18:06:7d:ac:30:99:5e:d0:81:fc:ca:45:b2:a3:9b:10:7f:8d: e6:36:f1:55:11:69:a7:68:ab:c0:9e:ff:8a:f2:26:39:9f:ff: dd:0b:0e:d1:0a:4c:b8:74:64:52:9d:f9:41:93:3d:40:02:2b: 35:21:24:fe:eb:fc:4e:f4:bc:98:90:bb:ca:96:ca:e6:7d:ed: 85:6b:eb:57:08:de:d5:02:ea:29:de:02:da:e2:3e:38:08:3d: 70:4e:9e:cf:39:71:26:63:45:46:bf:58:4c:fb:3a:f0:3e:ee: 75:95:86:58:ad:55:98:ad:56:28:53:33:d4:94:63:44:af:81: 31:b7:70:cf -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgISAZt265vER/0OOBnF6d34qMBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTM4ZWMyNDJhNDNlOWM5ZDRjZWIyNWRjOTBlNTQ1MzM3M2QzZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UAq1pB+xOchroLKCi44c/fRKRoY JzNN8APD8qfUL63nrFSIiVyF6xdRNh76rPdzsrZxZH7V70IizkXgc2zL5VZQNUvS 7fPp3MxlJPizcBBCQDrUQUHD72ULTnO2kSrKckds19AQbkwXcDUWmyVDkIQcFFn1 PBiRQHhMxiqIGyjSCtsWxft2j925uw37KJ5ZkXFBAIGW8n5MjGvuMxVvCogH6Cyi 8EhKJ24mnCMpQ9gSijopHT8TbQlxoBQjxX65u3OeWMsvyCNf3XrPKVcF9hFPTYlF fnPMCWW6ugKL/Hs85Grrh2lFkS0CI9+OeCA8hsiq0i+FiBsxXzlhqlLUBwIDAQAB o4IDjjCCA4owHQYDVR0OBBYEFOE47CQqQ+nJ1M6yXckOVFM3PT9GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzBiN2Zk My05MGYwLTQ1ZDEtOGE1OC02Nzg1Y2Q0NTY4NzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvMGI3ZmQz LTkwZjAtNDVkMS04YTU4LTY3ODVjZDQ1Njg3MS8xLzRUanNKQ3BENmNuVXpySmR5 UTVVVXpjOVAwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBBgYIKwYB BQUHAQcBAf8EgfYwgfMwgeEEAgABMIHaAwQDBWiIAwQDJY8gAwQCJZmoAwQCJZzk AwQCJZz8AwQFLqaAAwQELqawAwQDTfewAwQDVZ/oAwQCWSagAwQCXHJkAwQFbcmA AwQCsH7oAwQCuQdMAwQCuQuQAwQAuS3BAwQCuT68AwQAuVLJAwQAuVLLAwQAuWp5 AwQCuWskAwQCuWssAwQCuWs4AwQCuWtEAwQCuWtQAwQCuWtcAwQCuWtkAwQCuWt0 AwQBuXVKAwQAubdgAwQAucY5AwQAufSWAwQEvNEwAwQAwiS9MAwDBAPUXGgDBAHU XHwwDQQCAAIwBwMFAyoAF2gwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAKlWAgMA +7UwDQYJKoZIhvcNAQELBQADggEBAI8D3zldOOWiRvpBRnYQch3dITlFKeVWaxG7 nUBtYWDGlu3P1oXiU+u+HRubQyBt/ISUolWOoPsLyCtY/9pnKn+Wb7oJ5rdTkWL4 dYVb+eOfbsyse2m53OwhrhELeyOG+itCQ53pInAEsXAB2Di2y+EXDPDiys1+4NVS 2gCYURgGfawwmV7QgfzKRbKjmxB/jeY28VURaadoq8Ce/4ryJjmf/90LDtEKTLh0 ZFKd+UGTPUACKzUhJP7r/E70vJiQu8qWyuZ97YVr61cI3tUC6ineAtriPjgIPXBO ns85cSZjRUa/WEz7OvA+7nWVhlitVZitVihTM9SUY0SvgTG3cM8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:51:35 2026 by rpki-client