This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer File: 4fNRL1HcQruesSq8C7UpZosu3uQ.cer (raw, json) Hash identifier: 9aHW7OzOeGa504ADJKN1dDzBiLz1MpZlSDmJyD5XUSA= Subject key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A03C854038A0318C41E297E1E703F50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:43:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207215 IP: 45.149.152.0 -- 45.149.154.255 IP: 89.150.49.0/24 IP: 91.231.126.0/24 IP: 91.232.99.0/24 IP: 185.33.26.0/24 IP: 185.123.156.0/22 IP: 185.162.176.0/22 IP: 185.234.100.0/24 IP: 188.94.191.0/24 IP: 193.17.95.0/24 IP: 194.99.156.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:03:c8:54:03:8a:03:18:c4:1e:29:7e:1e:70:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:43:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:bc:b9:d1:a0:23:28:d4:7a:90:a7:6e:37: 2e:42:fc:ec:7e:3f:33:2f:5e:4d:6b:06:de:9c:3e: ea:a5:b7:06:3e:80:e0:76:15:7b:94:a3:2d:ef:0a: 2f:34:36:07:8c:37:cb:40:36:9e:60:18:e0:0e:84: 7d:5a:cb:10:81:cd:70:a5:33:19:d0:34:65:56:30: 68:0e:1d:37:ee:28:48:70:d3:4f:b3:38:76:f4:ba: 82:b0:76:c4:2d:ce:e2:c5:1d:be:1c:cf:60:96:3b: 23:ac:73:17:93:a7:87:af:68:5e:de:d2:29:7c:5c: b1:ee:e2:d0:cf:23:60:b4:61:43:d6:83:c3:22:e1: 45:03:e3:01:43:5f:d5:6a:09:50:21:ed:19:6e:9d: 7b:a6:58:fe:e2:8b:f1:2f:b3:29:1a:b0:25:0c:66: d5:04:b3:4c:b5:2a:d3:c2:f5:13:c9:c4:bf:73:d5: d0:09:84:c4:dd:b5:4e:6d:cc:93:ea:81:9f:53:c4: ec:9e:8f:af:7a:bb:b6:70:e0:f4:b0:01:cd:7d:e0: aa:fa:91:72:fe:70:89:4d:2d:2d:11:2f:a8:44:43: 5d:a9:7c:7f:7b:62:05:b3:fe:81:c1:83:7f:e4:bb: a4:84:64:b6:a3:0a:a4:29:93:de:f8:14:29:95:25: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.152.0-45.149.154.255 89.150.49.0/24 91.231.126.0/24 91.232.99.0/24 185.33.26.0/24 185.123.156.0/22 185.162.176.0/22 185.234.100.0/24 188.94.191.0/24 193.17.95.0/24 194.99.156.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207215 Signature Algorithm: sha256WithRSAEncryption 09:40:23:35:55:fe:11:d0:84:ca:06:b2:90:8a:6e:91:29:86: 69:0f:ae:3c:84:13:a7:8b:70:75:7c:a7:9a:6e:8d:10:a0:56: 42:d6:da:68:d4:1c:0f:1c:df:48:32:03:0c:e8:7e:c6:84:64: 7c:30:73:b7:51:f0:10:25:91:0f:c0:0b:f4:1a:7a:b3:4f:9c: a0:be:2b:11:b8:81:db:7c:ca:4c:f8:05:a6:f7:6b:d7:45:bc: a6:73:22:fc:41:5a:a9:1c:ff:81:23:92:38:e9:17:85:d3:0c: e0:ae:11:41:37:64:c0:40:06:33:ae:6d:90:ac:d8:f7:03:97: 99:54:9a:6c:b2:9f:e2:81:9e:4a:46:b0:a8:f3:ad:69:1b:71: 79:9e:ea:47:0d:f5:9f:40:e7:6b:ef:82:9b:56:e5:68:86:9d: 7f:18:46:6e:38:c4:e9:62:05:f8:03:04:7b:03:84:ba:f1:25: ce:a7:6b:b1:ba:79:d6:b4:2a:65:13:5c:d2:cd:f2:63:76:5b: 35:02:8f:5e:03:c8:0b:96:9b:aa:3d:01:04:7e:7d:6b:bd:64: 7d:75:31:8a:85:0a:50:b6:87:a0:21:17:3c:e9:ca:60:0b:f9: de:6c:7a:b6:2f:e9:3a:f2:99:2a:87:b7:5e:c0:72:01:83:e6: f0:e8:44:c6 -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgISAZt6A8hUA4oDGMQeKX4ecD9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQ0MzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWYzNTEyZjUxZGM0MmJiOWViMTJhYmMwYmI1Mjk2NjhiMmVkZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBC8udGgIyjUepCnbjcuQvzsfj8z L15NawbenD7qpbcGPoDgdhV7lKMt7wovNDYHjDfLQDaeYBjgDoR9WssQgc1wpTMZ 0DRlVjBoDh037ihIcNNPszh29LqCsHbELc7ixR2+HM9gljsjrHMXk6eHr2he3tIp fFyx7uLQzyNgtGFD1oPDIuFFA+MBQ1/VaglQIe0Zbp17plj+4ovxL7MpGrAlDGbV BLNMtSrTwvUTycS/c9XQCYTE3bVObcyT6oGfU8Tsno+veru2cOD0sAHNfeCq+pFy /nCJTS0tES+oRENdqXx/e2IFs/6BwYN/5LukhGS2owqkKZPe+BQplSUfLQIDAQAB o4IDADCCAvwwHQYDVR0OBBYEFOHzUS9R3EK7nrEqvAu1KWaLLt7kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UzY2Rj NjQ4LWQyMDMtNDYyYS1iZDBmLWVjMWI2MGQ4NzlhNy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNj ZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvRTFGMzUxMkY1MURD NDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBjBggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSjAM AwQDLZWYAwQALZWaAwQAWZYxAwQAW+d+AwQAW+hjAwQAuSEaAwQCuXucAwQCuaKw AwQAuepkAwQAvF6/AwQAwRFfAwQAwmOcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMpbzANBgkqhkiG9w0BAQsFAAOCAQEACUAjNVX+EdCEygaykIpukSmGaQ+uPIQT p4twdXynmm6NEKBWQtbaaNQcDxzfSDIDDOh+xoRkfDBzt1HwECWRD8AL9Bp6s0+c oL4rEbiB23zKTPgFpvdr10W8pnMi/EFaqRz/gSOSOOkXhdMM4K4RQTdkwEAGM65t kKzY9wOXmVSabLKf4oGeSkawqPOtaRtxeZ7qRw31n0Dna++Cm1blaIadfxhGbjjE 6WIF+AMEewOEuvElzqdrsbp51rQqZRNc0s3yY3ZbNQKPXgPIC5abqj0BBH59a71k fXUxioUKULaHoCEXPOnKYAv53mx6ti/pOvKZKoe3XsByAYPm8OhExg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:27 2026 by rpki-client