This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.cer (raw, json) Hash identifier: 5qjbQ4BNg2pBQy7Tnhq9NWrVyk/qTEdpDoDz+Ggw+iI= Subject key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9E9B827D40CB2CBBA0BAD6BF6FC9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213540 IP: 2a14:c900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e9:b8:27:d4:0c:b2:cb:ba:0b:ad:6b:f6:fc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e220bc4694539a15026ec55aad19a12bc214c15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:90:3e:4d:ab:7e:83:81:5f:c1:b3:b5:19: a9:b8:89:c3:27:3b:a3:cf:34:c9:24:24:06:97:af: 74:b0:80:b2:d8:e9:8f:0d:71:66:86:7f:cd:76:34: 63:a2:67:84:06:c1:4e:51:8d:fb:61:f1:8d:b8:fe: 45:8d:b9:04:08:9c:4b:8e:8f:96:2e:d7:62:e3:3c: 6d:e5:1e:24:8f:e5:3b:c5:c4:5d:60:d2:80:3a:b7: ea:b8:02:68:f2:ed:c5:b2:d3:e1:52:60:91:e4:45: e9:75:50:99:66:9e:b8:b8:41:74:98:8c:42:d1:dc: 01:fe:88:ca:61:63:91:f9:65:eb:aa:bf:a1:40:2f: 93:68:41:4e:0a:c5:62:84:ea:74:42:49:00:82:3a: 3b:aa:c2:bd:be:74:c0:9c:c8:17:96:23:ca:22:85: b3:1e:42:19:c3:61:1f:ea:44:ae:29:17:5f:4a:1c: 22:9e:90:b9:4f:ea:6f:d1:2f:7e:f1:92:d8:85:38: 53:3e:d5:44:b8:88:f3:b3:e9:0c:52:05:c9:30:eb: 7a:6f:9a:de:7c:1e:01:c9:48:d5:4c:36:b6:5c:b0: 5e:8a:49:86:ef:ca:79:2a:70:c3:a8:ee:c2:34:b0: 55:88:ac:31:e0:0b:a6:6d:88:96:aa:e2:2f:0c:5f: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213540 Signature Algorithm: sha256WithRSAEncryption 74:7c:66:03:5c:87:54:04:75:52:6b:5c:d4:67:c9:c4:48:64: a8:42:b8:3d:ae:46:9a:42:88:2d:95:5f:37:44:05:06:18:dd: a2:ef:91:06:f0:12:8b:f4:e5:8b:ec:d3:32:91:a7:81:52:65: 40:28:31:82:5b:51:6a:ce:d7:f4:15:8e:1a:11:b2:fc:89:14: 84:12:c8:3a:50:5c:d4:af:9a:ad:06:94:22:2e:f6:9c:65:71: f0:dc:f3:b6:fa:a8:e3:0f:4b:87:60:03:5b:02:74:8d:a7:9b: fb:71:fa:44:c6:de:bc:02:eb:e7:54:4b:86:78:59:fc:02:cb: 06:68:1f:97:00:ed:3d:13:4b:ef:61:09:01:0b:0b:ac:c1:20: b4:af:a5:3c:95:71:f7:58:cd:6f:e8:eb:4d:be:65:b9:c5:fb: 64:4b:73:c7:37:57:e1:19:86:13:11:56:a7:7a:09:9c:ec:53: cc:e8:c1:f1:79:72:52:f4:f1:a4:53:f8:dc:b9:6b:41:fb:8d: e2:c8:f5:93:53:bb:84:f4:69:91:c8:05:82:a0:3c:af:94:c7: 01:fa:f6:c8:97:65:7c:e3:9e:b1:23:68:92:85:43:44:2e:0d: 5f:a5:de:a0:c6:27:e0:d1:d2:55:23:f4:88:26:e9:1e:1e:e2: c2:7c:bd:f4 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9yem4J9QMssu6C61r9vydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjIwYmM0Njk0NTM5YTE1MDI2ZWM1NWFhZDE5YTEyYmMyMTRjMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5CQPk2rfoOBX8GztRmpuInDJzuj zzTJJCQGl690sICy2OmPDXFmhn/NdjRjomeEBsFOUY37YfGNuP5FjbkECJxLjo+W Ltdi4zxt5R4kj+U7xcRdYNKAOrfquAJo8u3FstPhUmCR5EXpdVCZZp64uEF0mIxC 0dwB/ojKYWOR+WXrqr+hQC+TaEFOCsVihOp0QkkAgjo7qsK9vnTAnMgXliPKIoWz HkIZw2Ef6kSuKRdfShwinpC5T+pv0S9+8ZLYhThTPtVEuIjzs+kMUgXJMOt6b5re fB4ByUjVTDa2XLBeikmG78p5KnDDqO7CNLBViKwx4AumbYiWquIvDF9zMQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFOIgvEaUU5oVAm7FWq0ZoSvCFMFfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2JkMzQz Yy1iODM5LTQwNDMtOTNlMy1lOGQ1MTVlNGNlNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvYmQzNDNj LWI4MzktNDA0My05M2UzLWU4ZDUxNWU0Y2U1Ni8xLzRpQzhScFJUbWhVQ2JzVmFy Um1oSzhJVXdWOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhTJADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQiQwDQYJKoZIhvcNAQELBQADggEBAHR8ZgNch1QEdVJrXNRnycRIZKhCuD2u RppCiC2VXzdEBQYY3aLvkQbwEov05Yvs0zKRp4FSZUAoMYJbUWrO1/QVjhoRsvyJ FIQSyDpQXNSvmq0GlCIu9pxlcfDc87b6qOMPS4dgA1sCdI2nm/tx+kTG3rwC6+dU S4Z4WfwCywZoH5cA7T0TS+9hCQELC6zBILSvpTyVcfdYzW/o602+ZbnF+2RLc8c3 V+EZhhMRVqd6CZzsU8zowfF5clL08aRT+Ny5a0H7jeLI9ZNTu4T0aZHIBYKgPK+U xwH69siXZXzjnrEjaJKFQ0QuDV+l3qDGJ+DR0lUj9Igm6R4e4sJ8vfQ= -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:03 2026 by rpki-client