This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.cer (raw, json) Hash identifier: OPjf7b7bEZIuoItJASbPwwU6ZfqH1lILZv4CvyGJbVU= Subject key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791021165390A0F322B2AB0C77EB33F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51500 IP: 91.197.240.0/24 IP: 2a07:f3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:21:16:53:90:a0:f3:22:b2:ab:0c:77:eb:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:0f:3b:9b:8a:2f:b0:61:0b:7b:d6:f0:a3: 9e:c0:a0:99:2d:29:94:37:aa:a0:81:d5:04:ac:41: 01:a7:d6:52:b3:08:4d:21:12:64:9e:ca:55:d5:10: d6:f0:42:fd:34:a1:9e:4b:cc:5d:e9:5e:a7:a8:63: da:25:68:ca:75:b0:18:e0:6a:a8:ad:56:b6:58:53: c5:27:a8:28:c9:6e:e6:e6:05:4f:08:8c:59:f6:8f: e0:6e:15:a8:b8:c9:49:9c:eb:bb:cd:0d:86:f2:d5: 33:b2:9b:aa:e1:7c:63:f6:fd:f1:8e:a0:6d:70:f7: 23:e7:6a:64:fe:f3:84:82:d6:d1:fe:15:2a:d2:d2: a1:b4:8e:8d:e7:59:de:4d:8d:d6:78:97:39:ac:d3: b8:7d:63:ed:16:c9:a6:fe:19:d9:ab:49:9b:00:4d: 03:0a:ca:ea:e1:72:c4:59:ee:54:6b:ad:32:a4:b2: 5a:e6:19:74:e6:2f:48:ff:2b:f4:af:88:0e:39:99: ad:28:30:df:e4:60:53:d8:51:a5:a5:1b:73:87:1e: b8:09:bb:70:5c:6f:e5:4c:cb:28:08:c7:01:81:20: d7:7a:f2:9d:68:fc:15:fd:e6:7a:8c:a7:b1:bf:2a: 97:96:68:42:5b:48:75:22:67:b2:06:c3:b6:12:41: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.240.0/24 IPv6: 2a07:f3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51500 Signature Algorithm: sha256WithRSAEncryption 70:43:19:0c:88:22:c5:d6:db:27:4f:ff:7a:59:b6:67:4e:dc: 8d:77:90:d3:a5:9a:ed:13:81:77:35:5f:d0:13:9e:ae:9e:21: db:60:98:74:08:12:a3:9e:2d:51:52:e9:6d:80:8f:1b:0a:a4: d3:6c:01:2c:46:a6:be:22:80:ec:c9:a0:76:d9:95:17:6a:d2: dc:01:d3:37:cb:93:cc:d0:1c:7c:ce:ea:e5:8e:e3:dc:7f:98: 44:72:cc:2b:5e:d8:9e:dd:50:d2:ba:8d:8c:eb:f9:19:5e:39: 33:17:2c:c7:ea:90:4d:06:aa:a0:12:24:b7:9b:b1:2a:71:b1: b0:6c:bd:17:43:a6:68:ca:2d:21:d8:74:90:2a:fc:20:8c:6f: c9:bd:09:1c:00:c3:4e:7a:e4:13:ab:4a:8f:3c:da:d7:5d:3f: 71:fe:7a:30:4b:3c:e2:98:c3:1f:4c:ae:6b:68:83:c1:c5:2c: b9:66:6e:02:ca:c1:df:33:86:f8:0f:60:2c:52:f1:c5:16:4d: 86:31:a8:d4:48:c5:a7:f8:aa:26:cc:52:07:9e:a4:ee:3a:98: ef:54:54:ee:49:c1:4f:83:c3:38:1e:b5:d6:ae:75:06:79:1d: 28:02:22:b0:aa:ef:6f:12:60:5b:b6:90:ba:8e:a4:73:cf:02: 17:05:4f:f2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ECEWU5Cg8yKyqwx36zP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjM0OTRlMGNjMTJjNzVhZWQxZDAxZGViMTViZTRlMjY2MmI0ODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYYPO5uKL7BhC3vW8KOewKCZLSmU N6qggdUErEEBp9ZSswhNIRJknspV1RDW8EL9NKGeS8xd6V6nqGPaJWjKdbAY4Gqo rVa2WFPFJ6goyW7m5gVPCIxZ9o/gbhWouMlJnOu7zQ2G8tUzspuq4Xxj9v3xjqBt cPcj52pk/vOEgtbR/hUq0tKhtI6N51neTY3WeJc5rNO4fWPtFsmm/hnZq0mbAE0D Csrq4XLEWe5Ua60ypLJa5hl05i9I/yv0r4gOOZmtKDDf5GBT2FGlpRtzhx64Cbtw XG/lTMsoCMcBgSDXevKdaPwV/eZ6jKexvyqXlmhCW0h1ImeyBsO2EkHHqQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOI0lODMEsda7R0B3rFb5OJmK0haMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzBkYjVl Ni04NjdjLTRjM2MtYmI0ZS0yMjc0MGJmMmQ1ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMGRiNWU2 LTg2N2MtNGMzYy1iYjRlLTIyNzQwYmYyZDVlYS8xLzRqU1U0TXdTeDFydEhRSGVz VnZrNG1ZclNGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW8XwMA0EAgACMAcDBQMqB/PAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDJLDANBgkqhkiG9w0BAQsFAAOCAQEAcEMZDIgixdbb J0//elm2Z07cjXeQ06Wa7ROBdzVf0BOerp4h22CYdAgSo54tUVLpbYCPGwqk02wB LEamviKA7MmgdtmVF2rS3AHTN8uTzNAcfM7q5Y7j3H+YRHLMK17Ynt1Q0rqNjOv5 GV45Mxcsx+qQTQaqoBIkt5uxKnGxsGy9F0OmaMotIdh0kCr8IIxvyb0JHADDTnrk E6tKjzza110/cf56MEs84pjDH0yua2iDwcUsuWZuAsrB3zOG+A9gLFLxxRZNhjGo 1EjFp/iqJsxSB56k7jqY71RU7knBT4PDOB611q51BnkdKAIisKrvbxJgW7aQuo6k c88CFwVP8g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:06 2026 by rpki-client