This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer (raw, json) Hash identifier: oRc04iSYcqu+lqhnME5jnPzOFo2HaEYfwcvB7zVcFHM= Subject key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77594B781D96332C8BA80ED806A39660 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.221.138.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4b:78:1d:96:33:2c:8b:a8:0e:d8:06:a3:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31c010e95015c2123641d33120a7e9c9008002d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:a1:e2:fc:c9:ab:de:08:0c:c2:f6:94:b8: 36:6b:cb:7a:56:ab:85:e8:38:a8:3e:07:8c:8e:da: 88:b6:8d:d6:2b:a5:58:18:36:c7:1f:9d:e3:1e:25: db:15:22:8a:eb:30:44:d4:9f:10:80:35:51:23:b6: e6:0c:43:45:a1:5c:bf:2e:de:33:c1:01:bd:9b:f9: 6e:d1:80:e3:11:2a:05:d1:04:45:f2:2e:05:8a:ef: 0e:9d:58:2c:b7:44:da:7e:8c:80:d2:dd:cc:dc:de: 1c:06:fb:ec:17:be:5b:09:6b:d2:00:fe:da:57:ba: 65:61:0c:a0:ac:11:c8:4c:73:60:22:6f:56:70:93: 19:1a:0e:c7:6a:80:50:8c:60:7f:82:7c:d0:bd:cb: f5:8d:31:22:5b:d1:dc:c4:cb:e4:8e:8f:5c:e9:96: c3:34:e3:a1:5f:82:9f:48:7d:25:7d:c3:88:55:fc: a1:c6:23:1e:25:27:92:7f:e8:2d:7b:e2:ab:a5:49: 34:8d:88:44:4b:e7:f5:7a:3d:17:6b:f2:7f:63:d8: 44:79:2c:68:2f:d8:4f:8b:ec:03:5f:54:65:e2:b2: 76:6c:56:10:39:e0:f2:35:e7:2f:da:e0:16:65:95: ec:fa:99:e6:63:5a:d2:73:45:da:c3:24:4d:ba:1d: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.138.0/23 Signature Algorithm: sha256WithRSAEncryption 88:8e:be:3a:2b:fd:93:1e:f2:f9:e5:2e:72:ce:e6:20:d9:f6: 4b:e5:42:a5:ca:39:db:bd:13:87:0f:40:aa:65:76:cd:82:81: 7d:5e:dd:f5:15:f5:ce:a5:65:3a:99:8b:06:f0:65:57:e3:f2: 6c:05:a3:f1:31:91:2a:ed:e6:4e:5c:0f:87:b7:9b:e3:ae:1f: a8:26:05:48:9c:b5:00:da:ce:86:2a:b2:2a:2a:1d:55:16:3f: 40:13:08:b1:64:b1:1f:a5:a4:f1:d2:1f:43:53:74:96:2c:82: 49:c8:c1:cd:9f:f3:1e:da:4a:5a:2a:e9:ae:9c:be:17:7f:11: f4:10:97:7f:39:07:cb:8f:aa:df:20:d0:ee:9c:5c:e1:62:77: 89:e6:3e:23:f2:aa:bb:d4:32:41:eb:b4:ca:72:96:ce:95:11: a8:27:e3:35:3f:61:c2:b6:e6:09:74:be:66:aa:2a:ab:59:2a: b3:16:98:4f:28:1a:a8:d6:c0:3b:49:b1:78:cd:89:61:a7:7d: 08:3c:05:49:9a:dd:d5:af:34:37:b3:1f:c1:eb:34:72:e1:d1: c2:c1:32:95:ab:1d:09:c7:e2:cf:b1:dd:37:0e:13:a4:a9:7f: b7:f5:5e:3e:c9:b6:9c:3b:f7:1d:0a:43:f5:df:50:6a:69:bb: d7:a4:70:68 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WUt4HZYzLIuoDtgGo5ZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzFjMDEwZTk1MDE1YzIxMjM2NDFkMzMxMjBhN2U5YzkwMDgwMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lih4vzJq94IDML2lLg2a8t6VquF 6DioPgeMjtqIto3WK6VYGDbHH53jHiXbFSKK6zBE1J8QgDVRI7bmDENFoVy/Lt4z wQG9m/lu0YDjESoF0QRF8i4Fiu8OnVgst0TafoyA0t3M3N4cBvvsF75bCWvSAP7a V7plYQygrBHITHNgIm9WcJMZGg7HaoBQjGB/gnzQvcv1jTEiW9HcxMvkjo9c6ZbD NOOhX4KfSH0lfcOIVfyhxiMeJSeSf+gte+KrpUk0jYhES+f1ej0Xa/J/Y9hEeSxo L9hPi+wDX1Rl4rJ2bFYQOeDyNecv2uAWZZXs+pnmY1rSc0XawyRNuh2J8QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOMcAQ6VAVwhI2QdMxIKfpyQCAAtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzQ4Mzgw Ni0wNDVkLTQ4NTYtYjUyOS1iNDdlNzRlZDRlN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvNDgzODA2 LTA0NWQtNDg1Ni1iNTI5LWI0N2U3NGVkNGU3ZS8xLzR4d0JEcFVCWENFalpCMHpF Z3AtbkpBSUFDMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW92KMA0GCSqGSIb3DQEBCwUAA4IBAQCIjr46 K/2THvL55S5yzuYg2fZL5UKlyjnbvROHD0CqZXbNgoF9Xt31FfXOpWU6mYsG8GVX 4/JsBaPxMZEq7eZOXA+Ht5vjrh+oJgVInLUA2s6GKrIqKh1VFj9AEwixZLEfpaTx 0h9DU3SWLIJJyMHNn/Me2kpaKumunL4XfxH0EJd/OQfLj6rfINDunFzhYneJ5j4j 8qq71DJB67TKcpbOlRGoJ+M1P2HCtuYJdL5mqiqrWSqzFphPKBqo1sA7SbF4zYlh p30IPAVJmt3VrzQ3sx/B6zRy4dHCwTKVqx0Jx+LPsd03DhOkqX+39V4+ybacO/cd CkP131BqabvXpHBo -----END CERTIFICATE-----Generated at Mon Jan 26 19:37:29 2026 by rpki-client