This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.cer (raw, json) Hash identifier: cseNlK3VaLUnCREEEP2wm1OPBMpoKjc7VMaJJtjDT0k= Subject key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCACB467B9EE010670CAC824159C553 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.19.250.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cb:46:7b:9e:e0:10:67:0c:ac:82:41:59:c5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2834429775e6555e5742492286254b1da9f1903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:bc:81:83:d4:a1:eb:4e:4f:bb:1d:03:89: 61:03:03:26:a1:de:18:ac:d9:fb:2f:22:da:fc:d2: 1c:14:81:89:5d:76:ab:86:6e:88:49:95:8f:ee:08: 50:ca:44:90:88:cc:f3:c0:99:b9:88:24:f1:a0:54: 53:2c:98:93:65:40:98:84:38:c5:55:55:b7:6d:a7: 85:2f:bc:64:0c:8e:9e:20:5e:a6:9a:6a:b2:26:a7: 98:76:70:55:06:fe:de:a4:77:1b:78:e1:1d:3e:ce: b6:41:b6:79:44:88:80:bf:3f:25:73:c6:42:f1:3e: 63:6e:9b:6b:5f:c8:e7:21:81:eb:54:d7:1e:42:35: bc:ca:aa:c1:75:58:c6:ae:fc:75:5f:7e:e5:fe:a7: a5:c2:c7:d7:68:76:d7:e9:f3:b4:c1:a5:2f:c0:71: cd:e0:bb:ff:c1:4a:ff:b1:4f:c6:85:99:11:fd:c8: 46:d0:d0:4a:0c:83:e2:cb:56:f7:88:e4:0b:f2:3c: 6d:40:84:6f:b9:34:88:0f:7e:bc:a1:7e:f1:b0:fb: be:f4:d7:35:10:43:0f:4c:c9:87:bb:b1:ca:4a:ec: 99:85:74:92:2a:1b:c3:fd:d6:9f:47:c5:95:69:37: d1:59:1b:e9:7d:61:22:d2:90:b2:ac:d5:3a:a0:4e: e4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.250.0/24 Signature Algorithm: sha256WithRSAEncryption a5:47:62:c7:cc:df:66:53:28:36:91:ff:ca:6b:c5:6d:58:1c: 50:20:fb:c3:ca:7b:91:ba:b6:63:5b:9d:90:f3:ac:06:99:b8: db:1a:99:a4:42:b6:3c:e2:0e:93:d9:6e:a1:47:0c:31:f9:cc: 09:af:7d:cd:d6:bb:b3:b7:3b:ad:c7:ca:bd:d3:d3:e9:bd:73: 65:33:89:3c:0f:fc:ba:eb:6f:db:09:a9:79:67:5b:47:54:ac: 45:ad:e2:80:0c:76:d4:5d:b1:75:3c:b8:0a:5a:12:a4:24:ca: 5a:b0:b1:be:7d:f9:07:18:7b:01:53:fa:4b:c5:b5:58:22:3c: 42:ef:2c:d9:b8:45:43:f5:f3:95:1a:2b:35:ef:94:78:0d:38: d1:8d:81:80:ff:68:c5:8c:61:3d:45:9c:5c:7f:83:02:c2:91: f0:d2:c2:64:fc:88:2a:09:7f:0a:d3:b3:62:c3:f9:fb:7f:76: a2:03:31:70:aa:13:e0:78:c5:4a:4b:2c:37:99:00:fe:68:91: 0a:cf:de:d7:aa:46:3b:86:b4:24:03:2a:93:26:f2:cc:dd:78: 42:fd:7a:d4:a6:57:80:12:7f:09:85:4a:30:2b:b1:8b:f9:dc: c1:2b:07:4e:24:be:04:85:84:d2:11:98:36:c1:4e:3f:e2:01: 27:a4:68:1c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9ystGe57gEGcMrIJBWcVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjgzNDQyOTc3NWU2NTU1ZTU3NDI0OTIyODYyNTRiMWRhOWYxOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo28gYPUoetOT7sdA4lhAwMmod4Y rNn7LyLa/NIcFIGJXXarhm6ISZWP7ghQykSQiMzzwJm5iCTxoFRTLJiTZUCYhDjF VVW3baeFL7xkDI6eIF6mmmqyJqeYdnBVBv7epHcbeOEdPs62QbZ5RIiAvz8lc8ZC 8T5jbptrX8jnIYHrVNceQjW8yqrBdVjGrvx1X37l/qelwsfXaHbX6fO0waUvwHHN 4Lv/wUr/sU/GhZkR/chG0NBKDIPiy1b3iOQL8jxtQIRvuTSID368oX7xsPu+9Nc1 EEMPTMmHu7HKSuyZhXSSKhvD/dafR8WVaTfRWRvpfWEi0pCyrNU6oE7koQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOKDRCl3XmVV5XQkkihiVLHanxkDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2I2NDY4 ZC0xMGVkLTRkNDgtODAzYy1lYTk3NjY1YzEzZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvYjY0Njhk LTEwZWQtNGQ0OC04MDNjLWVhOTc2NjVjMTNkZi8xLzRvTkVLWGRlWlZYbGRDU1NL R0pVc2RxZkdRTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAkhP6MA0GCSqGSIb3DQEBCwUAA4IBAQClR2LH zN9mUyg2kf/Ka8VtWBxQIPvDynuRurZjW52Q86wGmbjbGpmkQrY84g6T2W6hRwwx +cwJr33N1ruztzutx8q909PpvXNlM4k8D/y662/bCal5Z1tHVKxFreKADHbUXbF1 PLgKWhKkJMpasLG+ffkHGHsBU/pLxbVYIjxC7yzZuEVD9fOVGis175R4DTjRjYGA /2jFjGE9RZxcf4MCwpHw0sJk/IgqCX8K07Niw/n7f3aiAzFwqhPgeMVKSyw3mQD+ aJEKz97XqkY7hrQkAyqTJvLM3XhC/XrUpleAEn8JhUowK7GL+dzBKwdOJL4EhYTS EZg2wU4/4gEnpGgc -----END CERTIFICATE-----Generated at Mon Jan 26 07:21:11 2026 by rpki-client