This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer File: 4kCgJeDmGkTZPkqAHjiIsm570kE.cer (raw, json) Hash identifier: FnxwwbfNamgr+aH91JMaU1AVspcDlquOmbJh8Ymzl6M= Subject key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA733663E5735B9BBC0CCD3183DF4F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.110.16.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:33:66:3e:57:35:b9:bb:c0:cc:d3:18:3d:f4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:9d:e8:a2:16:62:6e:e7:ab:1a:4e:1d:e2: 7a:46:34:d2:f0:da:32:8c:ca:c6:f0:92:65:ae:8e: 17:a8:b6:1f:2f:e7:bf:fa:42:1c:66:de:89:53:f3: b8:2f:05:77:62:fa:4b:ec:14:48:7d:d9:8c:85:6c: b4:e8:a3:8c:ec:51:6e:0a:de:7a:3b:ce:4e:72:bf: aa:34:d1:c9:71:e6:e7:92:09:34:41:36:68:a6:88: a2:14:c3:ea:e4:31:cd:d8:de:7d:3e:d0:b2:c5:7e: cd:01:fe:61:5d:bd:ed:0f:49:28:e0:32:3f:5f:bc: 52:72:22:c3:05:dd:f6:70:43:25:37:fa:a4:40:c2: de:ef:3e:e6:ae:1f:b6:af:1f:27:83:6a:ce:e4:de: 2d:a9:a9:7d:41:d7:c7:f8:09:60:d0:16:1b:2d:56: f5:e1:e2:a5:29:0b:d7:e3:7e:89:e6:87:5d:f2:ee: c7:25:42:e6:b7:69:26:95:b8:dd:47:35:4d:18:fc: ef:39:6e:8f:5c:19:fa:5c:9b:2d:06:2a:e0:b2:66: 4f:6b:be:c3:ea:e4:46:58:c6:93:cb:31:65:3e:34: 5a:17:76:07:ea:53:dd:64:a4:53:43:65:5c:2d:ea: 9b:af:a7:bd:3d:90:01:10:8b:62:52:91:5e:d7:34: 3c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.110.16.0/23 Signature Algorithm: sha256WithRSAEncryption ab:ae:fa:19:89:f5:f5:d3:2b:30:2c:03:ec:39:f2:a8:c9:51: 6c:ae:b5:01:9b:37:98:e1:12:be:82:70:ac:10:71:69:34:cf: ea:6f:b7:5f:f6:b7:70:41:e0:44:6b:32:d7:9f:a0:61:1a:bc: a1:60:bb:54:75:2f:e1:ed:80:22:2a:83:a3:8e:62:00:12:3b: 04:6d:b3:a8:9d:6a:33:35:fb:8d:f4:7f:d3:a4:2b:de:fa:22: 7f:b2:a9:83:24:cf:d2:41:be:aa:cd:28:82:14:17:c7:ab:1d: 18:86:11:37:2c:a5:48:83:13:5b:28:ad:3c:ab:65:e9:09:6f: 3f:1b:6e:a2:4e:56:e5:22:30:15:95:b1:b6:c3:fa:13:a2:90: c7:53:e7:cf:0d:2d:9b:99:f2:39:99:3d:48:10:8a:65:0e:bb: 11:58:4b:68:cb:a5:3b:59:01:e5:6b:1a:d3:4f:cb:98:2a:8e: 8a:01:75:98:56:6b:05:02:2a:8d:60:ee:c9:ed:56:5f:b5:cc: c5:3b:83:d1:6b:58:2d:ad:9b:2b:23:1b:93:b9:82:45:e3:63: a2:3e:d7:17:c4:e9:e9:ca:2a:17:37:0e:b2:dd:45:2d:4d:1b: a2:67:b3:7a:0d:be:23:29:c9:0c:67:4c:d7:a0:9e:b8:12:38: 58:1b:77:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pzNmPlc1ubvAzNMYPfT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQwYTAyNWUwZTYxYTQ0ZDkzZTRhODAxZTM4ODhiMjZlN2JkMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaCd6KIWYm7nqxpOHeJ6RjTS8Noy jMrG8JJlro4XqLYfL+e/+kIcZt6JU/O4LwV3YvpL7BRIfdmMhWy06KOM7FFuCt56 O85Ocr+qNNHJcebnkgk0QTZopoiiFMPq5DHN2N59PtCyxX7NAf5hXb3tD0ko4DI/ X7xSciLDBd32cEMlN/qkQMLe7z7mrh+2rx8ng2rO5N4tqal9QdfH+Alg0BYbLVb1 4eKlKQvX436J5odd8u7HJULmt2kmlbjdRzVNGPzvOW6PXBn6XJstBirgsmZPa77D 6uRGWMaTyzFlPjRaF3YH6lPdZKRTQ2VcLeqbr6e9PZABEItiUpFe1zQ85wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOJAoCXg5hpE2T5KgB44iLJue9JBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzZlYzk0 My03MGUyLTQzMzUtODRmZS1jNzlkNGVlYjVhZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNmVjOTQz LTcwZTItNDMzNS04NGZlLWM3OWQ0ZWViNWFkNi8xLzRrQ2dKZURtR2tUWlBrcUFI amlJc201NzBrRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw24QMA0GCSqGSIb3DQEBCwUAA4IBAQCrrvoZ ifX10yswLAPsOfKoyVFsrrUBmzeY4RK+gnCsEHFpNM/qb7df9rdwQeBEazLXn6Bh GryhYLtUdS/h7YAiKoOjjmIAEjsEbbOonWozNfuN9H/TpCve+iJ/sqmDJM/SQb6q zSiCFBfHqx0YhhE3LKVIgxNbKK08q2XpCW8/G26iTlblIjAVlbG2w/oTopDHU+fP DS2bmfI5mT1IEIplDrsRWEtoy6U7WQHlaxrTT8uYKo6KAXWYVmsFAiqNYO7J7VZf tczFO4PRa1gtrZsrIxuTuYJF42OiPtcXxOnpyioXNw6y3UUtTRuiZ7N6Db4jKckM Z0zXoJ64EjhYG3fs -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:23 2026 by rpki-client