This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer (raw, json) Hash identifier: 2rwjsBE5JKa0iRL1AqaWy0S9pgGHZeusBbrTjyJjgRI= Subject key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759164A75D68423145AD2794DBB4246 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39762 IP: 195.60.70.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:16:4a:75:d6:84:23:14:5a:d2:79:4d:bb:42:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:50:08:cb:ff:01:7c:2c:3b:46:f9:3a:29:81: ab:e9:23:db:d4:16:ed:67:75:f3:d7:48:f6:7b:2e: 94:3e:64:f6:7c:1c:5a:60:39:75:48:03:44:ce:5a: e1:ba:7c:ed:d6:fa:f7:ce:04:7f:a4:da:f2:cc:67: ad:16:a6:22:74:1a:9d:2a:da:2c:ac:f2:e3:a0:ee: f6:a2:be:8a:c5:18:52:a8:81:1a:aa:e2:bc:49:c2: 5b:76:b6:70:3b:41:d9:99:0d:9e:4a:50:66:14:b3: 08:d0:bd:e7:b1:98:0a:f6:10:0e:bd:2b:c1:80:a8: 20:c1:39:2e:08:e3:d1:8a:98:e6:bd:56:2d:c9:2f: a8:22:4d:b6:a6:77:21:b9:30:db:55:62:03:8e:ce: a2:ae:21:33:b7:42:c3:d4:1c:1f:2c:b2:c8:aa:53: 3e:e6:d7:8f:7a:2a:df:49:49:2d:e5:90:3b:a2:d8: 20:d8:b1:3c:0b:8a:c4:5d:b5:42:7c:cf:2c:d8:7d: 5a:b6:a6:a0:03:8e:1d:2d:29:54:32:ce:0b:13:bc: af:43:5b:8d:0d:84:4e:66:cb:1a:ff:45:a9:74:e7: 1c:f7:21:ed:40:ac:2c:d0:4b:60:7b:ec:73:d0:bb: 9f:83:a8:20:de:f8:54:b1:17:da:d3:82:89:f8:da: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.70.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39762 Signature Algorithm: sha256WithRSAEncryption 0c:90:52:21:86:7d:d7:5b:4d:f3:24:57:44:6b:55:60:be:c0: fc:44:8e:8c:c7:a4:95:10:66:0c:4d:7a:c7:11:10:05:78:f7: 23:f8:5b:21:fd:9a:eb:0c:8f:b6:79:8f:6e:39:58:18:dc:8b: 71:49:e0:b4:f4:35:16:f4:58:5e:ff:1e:50:a1:ad:ee:9f:b1: 27:34:6b:19:18:0b:ed:fb:b4:75:61:18:05:b7:26:2b:4e:27: 83:3c:6b:74:c0:19:47:b2:57:82:54:b4:f8:4e:39:cc:42:37: b5:ea:61:be:18:20:a2:8c:56:ee:3a:9b:de:77:a9:00:a3:f5: 0d:5e:d5:af:1d:92:dc:1e:7d:c0:c4:c6:b4:b3:6c:af:db:3b: ea:5f:4f:c6:0e:ea:b2:f9:b8:54:76:a4:58:66:e6:8e:2b:47: 8b:1c:8e:45:65:ba:3e:30:4b:2e:5c:3a:2c:46:5a:97:c7:40: c5:a7:9e:c6:e9:69:14:54:33:68:a8:24:1d:f3:9c:69:ae:6d: a9:15:f3:23:25:41:88:3a:49:cd:0f:6c:21:8f:51:32:a0:e6: 0b:61:88:0e:a3:62:28:0c:b7:ab:fa:20:48:e4:6f:23:90:1b: be:11:de:4a:f3:60:35:9b:2f:7d:1f:41:36:99:29:62:3c:e8: 3b:04:c6:7c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WRZKddaEIxRa0nlNu0JGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjNjMGMzZTAxMDZjOTY1ZDQ2MGNkMGMzY2JjNWUyMzRmODJhNmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlAIy/8BfCw7Rvk6KYGr6SPb1Bbt Z3Xz10j2ey6UPmT2fBxaYDl1SANEzlrhunzt1vr3zgR/pNryzGetFqYidBqdKtos rPLjoO72or6KxRhSqIEaquK8ScJbdrZwO0HZmQ2eSlBmFLMI0L3nsZgK9hAOvSvB gKggwTkuCOPRipjmvVYtyS+oIk22pnchuTDbVWIDjs6iriEzt0LD1BwfLLLIqlM+ 5tePeirfSUkt5ZA7otgg2LE8C4rEXbVCfM8s2H1atqagA44dLSlUMs4LE7yvQ1uN DYROZssa/0WpdOcc9yHtQKws0Etge+xz0Lufg6gg3vhUsRfa04KJ+NpCMwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOI8DD4BBsll1GDNDDy8XiNPgqa0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzY0N2Yy OC01OWNmLTRkNjgtYTUwZi0xNzY0YjAzNjE4ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNjQ3ZjI4 LTU5Y2YtNGQ2OC1hNTBmLTE3NjRiMDM2MThmYy8xLzRqd01QZ0VHeVdYVVlNME1Q THhlSTAtQ3ByUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwzxGMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCbUjANBgkqhkiG9w0BAQsFAAOCAQEADJBSIYZ911tN8yRXRGtVYL7A/ESOjMek lRBmDE16xxEQBXj3I/hbIf2a6wyPtnmPbjlYGNyLcUngtPQ1FvRYXv8eUKGt7p+x JzRrGRgL7fu0dWEYBbcmK04ngzxrdMAZR7JXglS0+E45zEI3tephvhggooxW7jqb 3nepAKP1DV7Vrx2S3B59wMTGtLNsr9s76l9Pxg7qsvm4VHakWGbmjitHixyORWW6 PjBLLlw6LEZal8dAxaeexulpFFQzaKgkHfOcaa5tqRXzIyVBiDpJzQ9sIY9RMqDm C2GIDqNiKAy3q/ogSORvI5AbvhHeSvNgNZsvfR9BNpkpYjzoOwTGfA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:37:45 2026 by rpki-client