This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer File: 4xYxgkfSEYQfliCpoRMAEN20hvI.cer (raw, json) Hash identifier: maDJUM3kt/ijJ1RGJ+KpE2ReguST5Q2YhOaewgQbI0E= Subject key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC6E281031A1CC32DDC481A8C87B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208937 IP: 91.231.156.0/24 IP: 91.232.103.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c6:e2:81:03:1a:1c:c3:2d:dc:48:1a:8c:87:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e316318247d211841f9620a9a1130010ddb486f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:6a:bf:21:30:5f:c2:f5:5a:80:14:88:e6: f9:4e:61:9f:9d:e2:11:f8:81:6f:b7:86:f1:ba:14: 7a:1e:51:40:e9:6f:a4:ec:27:44:86:d3:7d:34:7a: d7:73:78:10:4e:81:77:fc:31:e4:62:22:2e:35:9e: 83:28:08:4c:6a:ee:f9:7e:04:ee:09:cb:8d:c9:80: 1d:cb:4a:d4:e2:2a:84:a6:ef:f7:14:98:cd:a6:87: c3:85:9a:a1:38:b0:39:6f:5a:f3:59:90:4b:c7:d4: 7e:36:cb:dd:40:d1:a6:7d:9b:d8:65:33:0e:25:33: 91:28:e1:04:aa:53:84:20:4e:f4:d5:d6:af:ae:ee: de:0d:62:e1:78:3f:a0:44:74:fe:dc:52:e6:03:6e: 5b:98:66:0f:7b:90:11:bb:2e:3d:ae:b5:23:13:4d: 98:a5:a0:b1:0a:e3:65:52:ba:f6:7f:95:87:03:31: cf:32:69:a7:8f:ee:d7:50:3f:e9:68:ad:8a:0d:6a: 5d:1a:ff:e3:be:6c:0b:80:8c:df:8f:58:15:39:8f: 5f:83:7c:86:52:53:29:de:25:8f:07:e8:c7:46:da: 03:d7:81:78:20:16:13:8f:df:85:d5:8d:aa:e3:0b: 2f:db:1e:9c:1d:a5:54:1e:18:2b:8c:a7:5e:d7:2c: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.156.0/24 91.232.103.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208937 Signature Algorithm: sha256WithRSAEncryption 33:6d:33:ae:34:c9:9a:39:ef:03:de:07:c0:de:73:1f:41:17: 9c:c2:2f:ff:01:09:09:25:27:a4:12:98:13:18:c4:a3:a3:64: 24:44:1d:2f:c8:fc:09:c2:2e:42:6e:84:14:12:3a:2e:9c:c9: 6b:14:0d:e4:0c:e4:7b:9d:48:8e:63:71:d8:df:ac:1a:51:e6: 71:c3:d9:78:84:10:18:34:3d:9e:ea:0c:fc:ea:d7:09:0a:03: 7e:6a:06:30:cd:f7:29:28:49:07:22:77:88:89:46:99:89:2b: 91:63:ae:24:f6:14:ad:40:20:d0:32:d6:15:32:da:b9:e7:f9: ea:b7:64:1a:50:9f:9b:06:57:ed:75:bf:bd:cd:4a:e6:fd:e0: d0:7f:8e:9d:62:cb:bd:27:a7:df:bf:ab:1d:4e:9e:33:0c:00: 31:f3:c1:d1:dd:6c:15:45:b9:7c:bb:1f:df:fb:68:94:65:e0: 4e:82:d1:2b:87:e4:48:1c:e7:28:cc:3c:6d:10:4c:4b:0b:b5: 4f:7e:91:9a:a2:a7:89:b1:9f:51:82:ac:62:67:cc:49:ac:d9: 5f:8d:1f:67:56:be:55:c1:44:39:72:14:ef:63:73:94:f6:19: af:5c:c3:79:2c:ef:94:10:3f:aa:98:8f:b9:e6:4d:80:2c:8b: 24:65:0a:7e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6WsbigQMaHMMt3EgajIeyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE2MzE4MjQ3ZDIxMTg0MWY5NjIwYTlhMTEzMDAxMGRkYjQ4NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1RqvyEwX8L1WoAUiOb5TmGfneIR +IFvt4bxuhR6HlFA6W+k7CdEhtN9NHrXc3gQToF3/DHkYiIuNZ6DKAhMau75fgTu CcuNyYAdy0rU4iqEpu/3FJjNpofDhZqhOLA5b1rzWZBLx9R+NsvdQNGmfZvYZTMO JTORKOEEqlOEIE701davru7eDWLheD+gRHT+3FLmA25bmGYPe5ARuy49rrUjE02Y paCxCuNlUrr2f5WHAzHPMmmnj+7XUD/paK2KDWpdGv/jvmwLgIzfj1gVOY9fg3yG UlMp3iWPB+jHRtoD14F4IBYTj9+F1Y2q4wsv2x6cHaVUHhgrjKde1yxJmwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOMWMYJH0hGEH5YgqaETABDdtIbyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2VlNDJi Yi0xZTQ5LTRjMjEtYTRkNi1lYzI4N2UxZDM3ZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvZWU0MmJi LTFlNDktNGMyMS1hNGQ2LWVjMjg3ZTFkMzdlNS8xLzR4WXhna2ZTRVlRZmxpQ3Bv Uk1BRU4yMGh2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW+ecAwQAW+hnMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMwKTANBgkqhkiG9w0BAQsFAAOCAQEAM20zrjTJmjnvA94HwN5zH0EX nMIv/wEJCSUnpBKYExjEo6NkJEQdL8j8CcIuQm6EFBI6LpzJaxQN5Azke51IjmNx 2N+sGlHmccPZeIQQGDQ9nuoM/OrXCQoDfmoGMM33KShJByJ3iIlGmYkrkWOuJPYU rUAg0DLWFTLauef56rdkGlCfmwZX7XW/vc1K5v3g0H+OnWLLvSen37+rHU6eMwwA MfPB0d1sFUW5fLsf3/tolGXgToLRK4fkSBznKMw8bRBMSwu1T36RmqKnibGfUYKs YmfMSazZX40fZ1a+VcFEOXIU72NzlPYZr1zDeSzvlBA/qpiPueZNgCyLJGUKfg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:22 2026 by rpki-client