This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer File: 4qv2099Tm7fBaE-09GF50NoGsIM.cer (raw, json) Hash identifier: KPF+CP5GXbpekxP2uNyY3SyM8dWLgWZtwE/xvlkkV1c= Subject key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A21460A1DBD15063105B92D1937899 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.226.202.0/23 IP: 2001:67c:2220::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:14:60:a1:db:d1:50:63:10:5b:92:d1:93:78:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:a2:8c:08:ef:cf:dd:96:15:e2:63:62:b2: 3d:59:b8:8b:43:33:61:23:da:7e:9b:f1:d5:66:c4: ac:28:ef:39:7c:5f:7a:ac:80:e2:d1:92:27:b9:ae: 80:4c:3d:35:a4:8e:b4:3f:5d:bb:ab:54:86:c8:3c: 0a:91:5b:09:92:5a:b8:2e:d2:84:65:b9:ba:7a:db: b0:58:3b:5e:f8:88:f9:1f:73:ef:eb:71:f6:1e:48: 73:00:b1:9e:0c:ba:e7:bd:d8:9a:72:80:d2:55:00: 47:71:47:8b:80:fe:29:aa:09:24:a4:6b:91:fc:94: ae:9e:55:03:20:35:07:0c:e8:a6:86:17:c7:37:e5: 8f:03:e8:58:84:8f:d2:c9:aa:12:12:a2:13:53:3b: 51:3d:db:07:fa:b1:12:d7:1b:50:95:ff:ea:9b:10: c4:5c:31:2b:f4:65:c4:1f:ba:2c:eb:ac:cc:5d:75: 2e:4f:db:b4:90:12:18:d0:ed:e9:94:45:4e:90:b9: 24:fc:14:27:e3:19:93:40:4d:ec:3d:16:aa:8e:77: 0d:7c:b2:84:a4:1e:9c:14:f7:76:38:28:52:47:5b: 19:13:d1:3c:00:62:27:4a:84:04:4b:ab:e0:4f:c3: 47:b1:ac:4e:0f:7e:a3:ac:ab:dc:89:d9:a8:09:f3: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.202.0/23 IPv6: 2001:67c:2220::/48 Signature Algorithm: sha256WithRSAEncryption 25:fc:79:a3:39:f9:ea:a7:79:b0:95:68:03:25:e9:e3:73:66: 73:6c:00:03:58:04:79:f2:f1:1c:44:fa:a2:ee:1f:22:77:af: 4f:f8:4f:bc:d1:30:99:6d:ed:fa:7b:3a:6e:99:ce:12:ad:5b: 4e:42:c1:5f:30:26:3c:df:22:8f:be:6c:3a:37:f5:f3:56:9f: 66:11:2c:c3:98:3b:81:9a:49:dd:82:58:d9:77:6f:40:fb:88: 60:be:c2:a6:10:4c:c5:1f:e4:11:4a:aa:b2:d9:b1:23:c4:2a: 2e:da:7b:3f:57:11:5b:48:29:b8:6d:fb:53:20:53:8e:ba:0a: 4a:f9:5f:d0:86:0c:af:0a:32:c2:e1:71:53:54:51:52:6f:06: 1a:64:85:40:40:d3:f3:1c:d2:04:c7:4a:4f:7f:37:ac:3c:6d: 88:a5:13:98:88:81:17:15:65:68:93:5a:66:5e:1b:9b:ca:90: 57:8f:65:c1:b3:ac:6f:f8:f0:87:b8:ee:26:cb:4a:04:93:1a: f5:21:61:22:76:91:99:66:28:69:c4:48:e7:c4:21:b1:f6:f2: 3d:85:d7:72:35:35:44:e7:67:61:27:9a:b3:72:8c:44:e4:ce: f3:b9:ab:df:26:ae:96:65:e7:81:70:61:c6:ee:cf:7a:4c:76: a2:b5:10:65 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt4ohRgodvRUGMQW5LRk3iZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmFiZjZkM2RmNTM5YmI3YzE2ODRmYjRmNDYxNzlkMGRhMDZiMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3OijAjvz92WFeJjYrI9WbiLQzNh I9p+m/HVZsSsKO85fF96rIDi0ZInua6ATD01pI60P127q1SGyDwKkVsJklq4LtKE Zbm6etuwWDte+Ij5H3Pv63H2HkhzALGeDLrnvdiacoDSVQBHcUeLgP4pqgkkpGuR /JSunlUDIDUHDOimhhfHN+WPA+hYhI/SyaoSEqITUztRPdsH+rES1xtQlf/qmxDE XDEr9GXEH7os66zMXXUuT9u0kBIY0O3plEVOkLkk/BQn4xmTQE3sPRaqjncNfLKE pB6cFPd2OChSR1sZE9E8AGInSoQES6vgT8NHsaxOD36jrKvcidmoCfOWWQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFOKr9tPfU5u3wWhPtPRhedDaBrCDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2YzYTI4 Yi0zNzdlLTQzYzctYjlmZC1iN2ExYjRhZTE1MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZjNhMjhi LTM3N2UtNDNjNy1iOWZkLWI3YTFiNGFlMTUxMS8xLzRxdjIwOTlUbTdmQmFFLTA5 R0Y1ME5vR3NJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW+LKMA8EAgACMAkDBwAgAQZ8IiAwDQYJKoZI hvcNAQELBQADggEBACX8eaM5+eqnebCVaAMl6eNzZnNsAANYBHny8RxE+qLuHyJ3 r0/4T7zRMJlt7fp7Om6ZzhKtW05CwV8wJjzfIo++bDo39fNWn2YRLMOYO4GaSd2C WNl3b0D7iGC+wqYQTMUf5BFKqrLZsSPEKi7aez9XEVtIKbht+1MgU466Ckr5X9CG DK8KMsLhcVNUUVJvBhpkhUBA0/Mc0gTHSk9/N6w8bYilE5iIgRcVZWiTWmZeG5vK kFePZcGzrG/48Ie47ibLSgSTGvUhYSJ2kZlmKGnESOfEIbH28j2F13I1NUTnZ2En mrNyjETkzvO5q98mrpZl54FwYcbuz3pMdqK1EGU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:31 2026 by rpki-client