This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer File: 4jDeX9PCRVFzumlqmUQdliDYHTg.cer (raw, json) Hash identifier: 20HKB1StGdsIrkJZ5XMwMbaw7dFlmcqIAiJexknQKEA= Subject key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4D7A7E5DBA43EEB6300C3E2F80748 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49771 IP: 64.7.88.0/22 IP: 91.90.168.0/23 IP: 194.242.24.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d7:a7:e5:db:a4:3e:eb:63:00:c3:e2:f8:07:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e230de5fd3c2455173ba696a99441d9620d81d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:6b:04:9d:7f:07:ae:1d:8a:de:18:5a:7f: 38:58:ec:e0:7e:84:46:08:a8:e5:1b:bc:d1:76:d6: c7:59:d9:21:a2:b8:82:67:64:b0:ba:2d:ef:b7:b6: d3:88:8f:bc:2d:d8:d3:65:f5:58:7c:33:72:97:c9: 1a:f7:fd:67:10:ef:1a:d8:be:05:d9:d3:43:a1:6e: 49:e9:fb:75:97:b4:15:da:fa:35:be:17:3d:a7:f5: cd:44:ea:9f:9b:9c:70:b3:b0:cc:da:18:b9:c5:07: 51:84:37:5a:5c:67:26:3b:62:b8:a1:f9:ca:ea:d7: 71:74:e0:56:c3:55:4c:d8:82:ed:85:37:4b:af:68: 6f:8e:88:45:2e:90:59:94:b2:17:56:bc:d5:87:31: 7a:2d:95:a6:f4:15:04:bf:0e:61:cf:c3:e4:19:24: b0:92:09:9b:be:f6:50:9c:ca:98:ba:34:6c:53:3e: 46:fa:cc:3d:95:a0:9e:5e:58:6e:41:64:a4:9c:82: 27:fa:7a:f8:5d:45:a3:57:1f:2f:5b:c0:00:5a:89: 5b:ac:89:31:2e:c1:98:f8:f4:21:a1:69:ba:71:d2: be:4f:00:f1:99:50:9c:96:e2:8b:e6:67:2d:20:7f: 28:4e:d6:99:5b:ab:97:13:45:f7:d5:0c:36:8e:75: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.7.88.0/22 91.90.168.0/23 194.242.24.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49771 Signature Algorithm: sha256WithRSAEncryption 23:81:35:0f:d1:37:92:23:e1:87:c6:a2:ba:0d:22:4b:e8:c6: af:c0:18:d5:9f:37:82:8c:c5:a5:b6:af:07:3f:46:7e:08:86: 2f:29:80:53:fa:9d:f8:99:10:83:70:eb:be:35:ef:52:ad:70: 75:32:bd:7c:03:bd:37:c9:cb:b6:57:a3:b2:6d:cb:7b:63:7f: 26:03:a8:a7:d7:9f:11:61:b8:a2:f4:be:5d:36:0b:a9:89:82: 9b:c0:f2:a5:47:77:5f:f4:bb:82:22:75:6b:b1:3a:91:12:4e: bd:84:cc:c4:78:42:67:97:e3:ab:d8:ea:34:30:bb:52:af:bd: 98:d5:b4:b1:ad:3e:bf:ca:96:ac:7c:64:8f:b8:49:9c:9c:6e: 25:2c:28:8a:30:7b:7b:6c:da:c3:7f:94:1c:c5:92:bc:f9:93: 35:37:a4:09:ba:85:1e:49:32:eb:83:0c:4b:04:12:cd:8c:c6: 31:02:f7:9d:18:f5:dd:99:7c:bc:56:85:2f:59:22:38:1f:36: ff:fb:4c:6c:b6:63:04:9f:79:db:68:8b:a4:af:08:67:25:32: a6:19:30:1e:a5:a8:66:28:29:29:26:7e:e1:e8:39:da:02:6d: 7e:9f:e4:99:7a:36:84:eb:66:3b:c6:3a:5b:ca:f5:ee:88:da: b8:77:62:5f -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt+pNen5dukPutjAMPi+AdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjMwZGU1ZmQzYzI0NTUxNzNiYTY5NmE5OTQ0MWQ5NjIwZDgxZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCBrBJ1/B64dit4YWn84WOzgfoRG CKjlG7zRdtbHWdkhoriCZ2Swui3vt7bTiI+8LdjTZfVYfDNyl8ka9/1nEO8a2L4F 2dNDoW5J6ft1l7QV2vo1vhc9p/XNROqfm5xws7DM2hi5xQdRhDdaXGcmO2K4ofnK 6tdxdOBWw1VM2ILthTdLr2hvjohFLpBZlLIXVrzVhzF6LZWm9BUEvw5hz8PkGSSw kgmbvvZQnMqYujRsUz5G+sw9laCeXlhuQWSknIIn+nr4XUWjVx8vW8AAWolbrIkx LsGY+PQhoWm6cdK+TwDxmVCcluKL5mctIH8oTtaZW6uXE0X31Qw2jnWWGQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFOIw3l/TwkVRc7ppaplEHZYg2B04MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2ZhYzdl ZC05MDE4LTQ1ZGItODk0Ny1mYjVjNTgyZTQwOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvZmFjN2Vk LTkwMTgtNDVkYi04OTQ3LWZiNWM1ODJlNDA5Ny8xLzRqRGVYOVBDUlZGenVtbHFt VVFkbGlEWUhUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCQAdYAwQBW1qoAwQBwvIYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDCazANBgkqhkiG9w0BAQsFAAOCAQEAI4E1D9E3kiPhh8ai ug0iS+jGr8AY1Z83gozFpbavBz9GfgiGLymAU/qd+JkQg3DrvjXvUq1wdTK9fAO9 N8nLtlejsm3Le2N/JgOop9efEWG4ovS+XTYLqYmCm8DypUd3X/S7giJ1a7E6kRJO vYTMxHhCZ5fjq9jqNDC7Uq+9mNW0sa0+v8qWrHxkj7hJnJxuJSwoijB7e2zaw3+U HMWSvPmTNTekCbqFHkky64MMSwQSzYzGMQL3nRj13Zl8vFaFL1kiOB82//tMbLZj BJ9522iLpK8IZyUyphkwHqWoZigpKSZ+4eg52gJtfp/kmXo2hOtmO8Y6W8r17oja uHdiXw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:00 2026 by rpki-client