This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer (raw, json) Hash identifier: PeNQhQ9ev9g6nmIuPxj4dy2iD/PrdLnsptFl1FA1E6Y= Subject key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C132D17ACEDC1386F0E0C484A6A8CEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62201 IP: 185.149.200.0/22 IP: 2a07:6a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2d:17:ac:ed:c1:38:6f:0e:0c:48:4a:6a:8c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:39:62:a7:de:07:2f:5f:c1:97:b6:78:f7: 7e:c0:38:3c:00:ba:29:6b:aa:90:eb:11:e8:f6:14: 1f:da:09:ed:59:77:3a:fb:09:54:4e:3e:4f:37:ff: 3e:2e:b7:8c:8e:c7:75:74:0e:2e:93:21:c1:20:b1: 61:f2:b8:ba:58:dc:6b:47:b1:7c:dc:62:14:2a:6c: 3f:fc:41:a1:2d:4f:c2:e4:ed:6b:0b:a8:d4:6d:de: a4:04:2a:da:e1:ac:15:c3:08:8c:76:7f:c1:51:e1: 46:fe:43:a9:e0:c7:fc:fb:94:4d:37:13:4a:ad:94: 40:38:99:9e:37:54:0b:19:2d:c5:64:fc:85:ab:2b: 7f:50:f5:ce:7e:d7:10:16:11:fc:97:21:d5:5b:26: 79:42:8e:6b:77:39:4c:04:d7:c1:3c:c6:7a:4f:ee: 72:15:53:72:b0:e0:f2:17:e8:6c:7f:48:a8:2a:2f: 62:70:69:7c:c5:d6:75:3a:63:eb:77:42:f8:69:b8: e7:74:c0:ac:1f:70:b6:f4:cc:f8:ff:1f:26:b1:16: 1f:3c:bc:64:29:7c:8c:e0:37:a2:be:ee:b2:e9:ef: 4f:b4:ca:e1:0a:1d:e1:e7:f7:07:de:5d:fd:ae:45: 7f:a3:50:9a:ac:a6:b5:83:6f:6c:c4:6c:48:dc:aa: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.200.0/22 IPv6: 2a07:6a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62201 Signature Algorithm: sha256WithRSAEncryption 80:7f:41:03:bf:ab:ad:d8:56:74:08:04:50:94:06:b7:cf:fd: 52:8a:4d:e4:3c:16:72:32:31:c8:6e:c2:a7:26:2b:1b:7e:88: 77:13:85:cf:bb:66:40:cb:e5:0f:54:4d:ea:6f:68:f0:55:81: a7:a7:22:81:b0:29:f9:5f:04:79:fd:5b:23:90:66:8c:0c:47: 5e:c7:8d:0f:d0:ba:12:af:69:2c:d9:48:91:1b:98:73:b6:cb: 89:42:5a:f3:fb:f9:0c:ae:1a:16:4a:9b:44:4d:b6:f3:44:d0: f9:43:b1:b4:51:49:8e:96:56:88:72:74:6b:b4:63:60:eb:3e: 87:ca:8e:47:9b:16:12:f7:cc:0f:84:cf:55:96:b2:4b:20:d0: 15:bc:95:4c:c3:88:5f:c8:1e:37:42:0d:7d:7e:a2:d5:c2:b5: 96:91:49:a7:65:58:3d:67:26:cd:33:61:f2:79:db:40:c0:d1: 0b:f2:97:3b:d8:2f:7f:40:4b:bd:0a:a0:a6:34:ef:4e:db:a6: cb:20:b1:ce:da:2b:9d:a5:20:58:db:8b:49:0c:6d:42:e4:2c: 16:a6:1c:99:38:51:1e:ef:79:c8:ff:dd:6c:fe:11:65:9d:26: 53:06:32:8b:82:2e:93:4b:40:ad:1f:4b:f1:55:1d:f7:30:1f: 6d:22:ea:e2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8Ey0XrO3BOG8ODEhKaozuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjkwZTljYzNiN2UzNjNkNzI2YmQ3MDI3NTBiNTNmMjliMDUwYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncI5YqfeBy9fwZe2ePd+wDg8ALop a6qQ6xHo9hQf2gntWXc6+wlUTj5PN/8+LreMjsd1dA4ukyHBILFh8ri6WNxrR7F8 3GIUKmw//EGhLU/C5O1rC6jUbd6kBCra4awVwwiMdn/BUeFG/kOp4Mf8+5RNNxNK rZRAOJmeN1QLGS3FZPyFqyt/UPXOftcQFhH8lyHVWyZ5Qo5rdzlMBNfBPMZ6T+5y FVNysODyF+hsf0ioKi9icGl8xdZ1OmPrd0L4abjndMCsH3C29Mz4/x8msRYfPLxk KXyM4Deivu6y6e9PtMrhCh3h5/cH3l39rkV/o1CarKa1g29sxGxI3KrOywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOKQ6cw7fjY9cmvXAnULU/KbBQp9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzU1MzU0 ZS1iY2U3LTRhNWQtYjU2MS05MTEzZmQ3YWZkNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNTUzNTRl LWJjZTctNGE1ZC1iNTYxLTkxMTNmZDdhZmQ2Yy8xLzRwRHB6RHQtTmoxeWE5Y0Nk UXRUOHBzRkNuMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZXIMA0EAgACMAcDBQMqB2oAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDy+TANBgkqhkiG9w0BAQsFAAOCAQEAgH9BA7+rrdhW dAgEUJQGt8/9UopN5DwWcjIxyG7CpyYrG36IdxOFz7tmQMvlD1RN6m9o8FWBp6ci gbAp+V8Eef1bI5BmjAxHXseND9C6Eq9pLNlIkRuYc7bLiUJa8/v5DK4aFkqbRE22 80TQ+UOxtFFJjpZWiHJ0a7RjYOs+h8qOR5sWEvfMD4TPVZaySyDQFbyVTMOIX8ge N0INfX6i1cK1lpFJp2VYPWcmzTNh8nnbQMDRC/KXO9gvf0BLvQqgpjTvTtumyyCx ztornaUgWNuLSQxtQuQsFqYcmThRHu95yP/dbP4RZZ0mUwYyi4Iuk0tArR9L8VUd 9zAfbSLq4g== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:47 2026 by rpki-client