This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer File: 4ei3yrUh6I6AIqNkJFRBhVOKezM.cer (raw, json) Hash identifier: vG+UiRF4sCKJLuZ7IuA8730GKaoXUaSsA8aAoXqt0ho= Subject key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF1AF73FFEB326C54F13D1433813F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52209 IP: 185.154.190.0/24 IP: 2a13:1640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f1:af:73:ff:eb:32:6c:54:f1:3d:14:33:81:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:b1:52:c9:22:34:04:1e:c9:82:99:1e:13: 46:07:87:5e:76:ad:7c:92:c0:15:dd:96:09:1f:d9: ac:08:72:d3:fd:f2:de:fe:8e:b2:6c:c3:9b:54:7b: f3:ba:d2:89:86:a3:d2:1f:e1:7b:bc:81:87:a4:08: 4d:9f:ef:89:19:29:ac:d7:4c:e3:63:f1:d8:9a:35: 9e:ae:ec:f5:e0:05:20:8f:68:bf:a3:4c:41:ea:4c: 73:af:b8:ad:97:57:ab:c3:13:07:ba:96:3e:d4:39: c0:3c:f6:bd:dc:e2:f2:1d:fe:da:45:b2:c5:87:e1: 2d:89:c1:53:e6:d6:ca:fa:70:2f:8a:a1:ca:e5:bd: 27:d7:af:52:47:87:fc:81:14:e6:c4:a6:93:06:02: d2:bc:11:14:0e:d4:5a:a5:86:0e:ed:aa:00:49:03: d7:14:e4:3b:59:91:62:77:34:6e:0e:c2:a7:cc:c9: a7:88:aa:04:ae:74:0b:1a:fe:f3:5a:0b:9c:80:87: d9:6a:e7:38:87:1d:64:2d:61:18:c4:a0:73:84:a8: bb:09:87:6a:23:f9:31:f5:2e:56:e4:7c:ca:2a:c1: 08:d8:d8:2d:83:da:19:99:ee:e6:19:22:28:14:a1: e5:c6:d4:c7:32:cb:f4:15:2b:b0:90:29:7b:67:fe: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.190.0/24 IPv6: 2a13:1640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52209 Signature Algorithm: sha256WithRSAEncryption 6f:37:18:2e:02:f1:60:eb:a3:2d:48:84:e8:89:71:1f:26:be: 60:a4:61:63:2d:60:09:69:79:01:d5:dd:32:71:99:fc:b8:14: 66:f0:76:bc:b9:16:24:59:49:a9:f5:7f:3f:07:65:d3:cc:e4: ed:0d:90:ea:4b:dd:18:32:3f:7b:e0:f8:64:bc:ef:3d:72:76: a0:72:b4:68:4a:d8:62:92:0a:7b:28:41:e1:91:14:b7:fa:bf: 72:08:66:8b:df:2b:f8:f1:93:88:84:31:51:03:b5:7c:b8:ec: 1f:19:c3:4e:bb:52:91:ee:8e:de:1b:d3:c3:66:36:3d:56:d6: 95:65:b4:13:bf:47:60:a8:cf:c6:57:ef:51:41:54:e0:2b:47: aa:30:ac:79:32:ea:26:fa:6b:a5:b5:b1:1e:d8:47:60:72:3b: 0b:c8:ff:37:f3:ae:de:d8:bd:1e:df:65:1f:22:0b:f1:90:20: cc:bc:a5:f7:8e:eb:6c:87:0f:87:73:c4:19:b5:c2:e6:99:1f: c7:37:41:79:b5:0d:0a:01:07:3c:31:51:4f:36:88:f2:55:f6: 70:df:2f:8c:52:76:0b:1d:eb:16:87:9b:a6:4a:91:46:46:99: f8:a8:f7:33:5c:35:65:df:64:30:b3:b1:5c:76:fc:93:d6:55: 0f:28:dd:52 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fvGvc//rMmxU8T0UM4E/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWU4YjdjYWI1MjFlODhlODAyMmEzNjQyNDU0NDE4NTUzOGE3YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs6xUskiNAQeyYKZHhNGB4dedq18 ksAV3ZYJH9msCHLT/fLe/o6ybMObVHvzutKJhqPSH+F7vIGHpAhNn++JGSms10zj Y/HYmjWeruz14AUgj2i/o0xB6kxzr7itl1erwxMHupY+1DnAPPa93OLyHf7aRbLF h+EticFT5tbK+nAviqHK5b0n169SR4f8gRTmxKaTBgLSvBEUDtRapYYO7aoASQPX FOQ7WZFidzRuDsKnzMmniKoErnQLGv7zWgucgIfZauc4hx1kLWEYxKBzhKi7CYdq I/kx9S5W5HzKKsEI2Ngtg9oZme7mGSIoFKHlxtTHMsv0FSuwkCl7Z/7PMwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOHot8q1IeiOgCKjZCRUQYVTinszMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzE0ZjJj NS00NmZlLTQ2NzAtOWRkNi0yMWM1ODQ3MGI4ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMTRmMmM1 LTQ2ZmUtNDY3MC05ZGQ2LTIxYzU4NDcwYjhkMi8xLzRlaTN5clVoNkk2QUlxTmtK RlJCaFZPS2V6TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuZq+MA0EAgACMAcDBQMqExZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDL8TANBgkqhkiG9w0BAQsFAAOCAQEAbzcYLgLxYOuj LUiE6IlxHya+YKRhYy1gCWl5AdXdMnGZ/LgUZvB2vLkWJFlJqfV/Pwdl08zk7Q2Q 6kvdGDI/e+D4ZLzvPXJ2oHK0aErYYpIKeyhB4ZEUt/q/cghmi98r+PGTiIQxUQO1 fLjsHxnDTrtSke6O3hvTw2Y2PVbWlWW0E79HYKjPxlfvUUFU4CtHqjCseTLqJvpr pbWxHthHYHI7C8j/N/Ou3ti9Ht9lHyIL8ZAgzLyl947rbIcPh3PEGbXC5pkfxzdB ebUNCgEHPDFRTzaI8lX2cN8vjFJ2Cx3rFoebpkqRRkaZ+Kj3M1w1Zd9kMLOxXHb8 k9ZVDyjdUg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:08 2026 by rpki-client