This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer File: 4tc__D83xP7EvTWtHFlc0Fa67P0.cer (raw, json) Hash identifier: 2oBp0UCxkwOEeXQU4b5MDSyPgAqE92kcp5rDlgvn6pY= Subject key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B55E8533A98C25BE045D76F89F54A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.93.89.0/24 IP: 2a13:9dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:55:e8:53:3a:98:c2:5b:e0:45:d7:6f:89:f5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:c3:1c:fa:03:30:63:4e:ba:47:78:09:82: 17:3f:d3:16:1a:42:9a:6c:eb:c2:c6:b3:39:c3:bd: 59:07:fa:f4:1f:e2:ca:4c:5f:74:63:6d:41:e2:d2: 8e:4c:df:7d:d8:09:90:b0:89:d3:a0:56:57:4c:c7: fa:3c:79:d5:ca:78:f9:c2:eb:2e:e8:d1:41:14:54: 55:1c:9e:d9:75:93:89:cf:e6:57:16:fb:0e:4f:c2: d1:3e:a5:31:4f:c7:6c:4d:21:d0:ff:65:3b:61:95: d4:a1:1f:f7:69:1d:c3:4b:d4:ac:a8:15:1f:cd:fb: 9a:f1:55:0f:a8:32:32:b4:33:a3:2e:2a:cd:69:d6: 26:2b:32:57:5d:ad:a6:ef:01:78:19:4b:85:cd:e0: 99:32:5b:ae:04:d9:fe:c1:83:74:06:98:a2:53:22: f3:e0:63:7f:83:be:ce:a3:af:98:26:d1:6d:30:82: a2:cc:75:54:0d:08:c5:c7:35:4b:fc:1c:f1:20:ae: db:10:f2:d2:82:87:f9:ac:0f:e7:ba:c4:6d:97:06: ee:65:9a:d0:a2:29:20:60:da:37:85:88:9d:2d:bb: f1:d7:84:4d:fc:3c:64:5e:1f:21:d0:08:ca:42:e6: e2:ff:03:22:15:c1:e3:ef:d5:7a:a2:af:77:c5:97: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.89.0/24 IPv6: 2a13:9dc0::/29 Signature Algorithm: sha256WithRSAEncryption a6:ea:f7:f7:85:61:9c:4a:4c:c9:3b:c4:e9:c0:6b:4a:3b:77: 7d:5b:37:de:7d:9c:6e:71:8d:45:fa:70:0c:0e:e3:6e:f0:eb: 2e:82:96:65:fe:e7:bd:42:13:5e:e5:20:ae:ed:26:6c:7c:b7: fd:09:44:f3:06:05:68:5d:70:90:23:6f:ba:64:62:10:fb:f3: 16:ba:26:06:4f:1b:4f:f4:6e:6d:8d:1d:71:5e:c3:ab:8b:d8: 4c:da:b9:f7:14:58:59:ee:1e:0d:2c:20:ff:c6:8a:57:37:d8: 05:06:c1:94:06:71:d9:c1:de:86:91:48:7f:3d:dc:9b:7b:4f: 39:0d:02:e3:d3:5c:54:78:fd:d6:e8:71:7a:de:ac:70:bc:fb: 5b:b3:dd:ad:76:51:03:ce:d5:9e:88:a0:07:3c:49:74:63:cc: 62:cf:4d:d6:86:c8:a4:d7:21:13:c5:33:28:06:06:87:23:fe: 8b:30:ea:be:61:18:58:f7:aa:b3:09:d0:92:cd:58:9c:1f:8d: ff:21:ef:e5:9b:2a:6c:b0:17:da:f9:e2:1c:a6:01:85:d3:ec: f7:fa:58:91:bd:ad:24:43:3a:3c:b2:72:ce:a8:de:98:64:1e: aa:0b:fb:38:51:d5:4c:70:8e:40:3b:cc:24:fc:b5:03:ea:93: fd:dd:96:70 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W1XoUzqYwlvgRddvifVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmQ3M2ZmYzNmMzdjNGZlYzRiZDM1YWQxYzU5NWNkMDU2YmFlY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5XDHPoDMGNOukd4CYIXP9MWGkKa bOvCxrM5w71ZB/r0H+LKTF90Y21B4tKOTN992AmQsInToFZXTMf6PHnVynj5wusu 6NFBFFRVHJ7ZdZOJz+ZXFvsOT8LRPqUxT8dsTSHQ/2U7YZXUoR/3aR3DS9SsqBUf zfua8VUPqDIytDOjLirNadYmKzJXXa2m7wF4GUuFzeCZMluuBNn+wYN0BpiiUyLz 4GN/g77Oo6+YJtFtMIKizHVUDQjFxzVL/BzxIK7bEPLSgof5rA/nusRtlwbuZZrQ oikgYNo3hYidLbvx14RN/DxkXh8h0AjKQubi/wMiFcHj79V6oq93xZfQfwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOLXP/w/N8T+xL01rRxZXNBWuuz9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2U1Y2Yw MC01NWI4LTQzNTktYWMxZS1hYTBjNGRjMDMyMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvZTVjZjAw LTU1YjgtNDM1OS1hYzFlLWFhMGM0ZGMwMzIyMi8xLzR0Y19fRDgzeFA3RXZUV3RI RmxjMEZhNjdQMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuV1ZMA0EAgACMAcDBQMqE53AMA0GCSqGSIb3 DQEBCwUAA4IBAQCm6vf3hWGcSkzJO8TpwGtKO3d9WzfefZxucY1F+nAMDuNu8Osu gpZl/ue9QhNe5SCu7SZsfLf9CUTzBgVoXXCQI2+6ZGIQ+/MWuiYGTxtP9G5tjR1x XsOri9hM2rn3FFhZ7h4NLCD/xopXN9gFBsGUBnHZwd6GkUh/Pdybe085DQLj01xU eP3W6HF63qxwvPtbs92tdlEDztWeiKAHPEl0Y8xiz03Whsik1yETxTMoBgaHI/6L MOq+YRhY96qzCdCSzVicH43/Ie/lmypssBfa+eIcpgGF0+z3+liRva0kQzo8snLO qN6YZB6qC/s4UdVMcI5AO8wk/LUD6pP93ZZw -----END CERTIFICATE-----Generated at Sun Jan 25 22:53:34 2026 by rpki-client