This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer File: 4z2f_axY52ErCVFE_sBrolhapqg.cer (raw, json) Hash identifier: D8jXgSTNmIx1JAvFfbbbXbfXEH7u6xkmJa3dfzAq6T0= Subject key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37320F51E4370B9BF5ABDC0E666D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212671 IP: 193.163.99.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:73:20:f5:1e:43:70:b9:bf:5a:bd:c0:e6:66:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:2a:af:3b:9a:20:d6:77:ad:84:1f:b6:82: c6:dd:30:8e:5e:81:ce:94:51:2e:0a:40:fc:7d:12: 5e:b9:41:2a:d5:9b:07:e5:4f:6e:67:aa:73:6d:03: 8b:76:f6:92:95:e0:16:96:91:e2:c0:30:87:dc:b4: bd:e3:37:18:5d:3f:1c:8b:5d:b3:5b:3a:a0:b5:4f: 06:f2:d8:12:68:76:40:d2:c5:86:26:d2:90:94:62: 49:51:d6:90:48:a8:c8:a9:89:af:0f:3c:3d:2f:80: 19:ef:24:49:6a:94:5c:58:a9:27:4b:7b:ad:dd:44: 7f:89:2e:2b:d9:2d:9d:21:10:30:ad:20:64:18:9e: c7:5b:fb:0f:4b:95:3b:ef:80:5c:79:7e:39:31:4c: 3f:56:25:88:9c:12:fb:c0:4d:72:b9:22:e0:8c:f4: 1a:2b:b6:26:14:e6:c7:0e:ed:f0:31:fb:ea:5a:b8: d3:cc:20:50:15:0d:69:2b:a4:02:fd:78:5e:05:d8: 66:a6:09:1d:60:0d:73:fe:84:d6:c6:94:99:49:d3: 9d:61:a0:30:28:57:89:13:46:06:42:55:8e:55:e2: 2f:ac:76:fc:09:ac:3d:f4:d7:a5:c2:bb:8a:0c:8e: c0:71:33:8f:77:be:fd:52:bc:43:28:93:35:e9:ff: 9f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.99.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212671 Signature Algorithm: sha256WithRSAEncryption 3d:b7:dc:d3:db:4f:31:7c:1e:cc:06:04:fd:6c:45:f2:50:16: a1:e8:b7:8a:a0:e7:3c:fa:61:73:b0:c4:4e:b0:b8:dc:74:6b: 19:7d:46:2d:30:00:7b:9a:f8:62:80:e2:a0:bb:04:6b:08:1c: f9:85:b2:86:80:e3:05:eb:c6:22:d2:bf:bb:ed:7b:d9:c7:5f: 71:a3:7c:2c:84:a5:55:77:ee:7e:4c:c9:ba:c4:dc:8e:13:81: 80:fb:49:12:73:a9:19:ea:6a:0b:3f:12:f8:5e:0f:7f:ca:12: d9:6e:43:16:bd:71:8b:94:94:07:87:ad:a3:73:66:87:10:05: 4b:5b:50:be:ae:3e:32:12:ee:2c:e4:97:9d:c0:ee:82:9e:43: c6:f3:ca:f1:d2:29:14:cd:35:50:7a:d4:76:0a:64:f8:7e:81: 5a:c9:fb:4c:f8:6d:a5:b6:3e:25:f4:65:f2:f5:38:3e:7b:67: f1:e5:d4:2f:40:9d:cd:14:ff:1d:fa:09:8b:ad:28:fc:59:29: 0d:56:c1:f6:4d:36:4c:2d:e1:81:3b:98:14:3b:cb:75:b9:a4: 39:60:ad:3b:d3:85:be:0e:bb:94:da:ee:bd:d2:08:b5:8a:32: 58:a6:96:09:f1:ad:23:a1:21:62:20:df:75:39:e4:4a:6f:82: 83:4d:d7:87 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4o3Mg9R5DcLm/Wr3A5mbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzNkOWZmZGFjNThlNzYxMmIwOTUxNDRmZWMwNmJhMjU4NWFhNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JYqrzuaINZ3rYQftoLG3TCOXoHO lFEuCkD8fRJeuUEq1ZsH5U9uZ6pzbQOLdvaSleAWlpHiwDCH3LS94zcYXT8ci12z WzqgtU8G8tgSaHZA0sWGJtKQlGJJUdaQSKjIqYmvDzw9L4AZ7yRJapRcWKknS3ut 3UR/iS4r2S2dIRAwrSBkGJ7HW/sPS5U774BceX45MUw/ViWInBL7wE1yuSLgjPQa K7YmFObHDu3wMfvqWrjTzCBQFQ1pK6QC/XheBdhmpgkdYA1z/oTWxpSZSdOdYaAw KFeJE0YGQlWOVeIvrHb8Caw99NelwruKDI7AcTOPd779UrxDKJM16f+fEQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2EzNDIw MC00YjliLTQzMzQtYTE1OS05Y2IyOTYzMDFlNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvYTM0MjAw LTRiOWItNDMzNC1hMTU5LTljYjI5NjMwMWU2NC8xLzR6MmZfYXhZNTJFckNWRkVf c0Jyb2xoYXBxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwaNjMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM+vzANBgkqhkiG9w0BAQsFAAOCAQEAPbfc09tPMXwezAYE/WxF8lAWoei3iqDn PPphc7DETrC43HRrGX1GLTAAe5r4YoDioLsEawgc+YWyhoDjBevGItK/u+172cdf caN8LISlVXfufkzJusTcjhOBgPtJEnOpGepqCz8S+F4Pf8oS2W5DFr1xi5SUB4et o3NmhxAFS1tQvq4+MhLuLOSXncDugp5DxvPK8dIpFM01UHrUdgpk+H6BWsn7TPht pbY+JfRl8vU4Pntn8eXUL0CdzRT/HfoJi60o/FkpDVbB9k02TC3hgTuYFDvLdbmk OWCtO9OFvg67lNruvdIItYoyWKaWCfGtI6EhYiDfdTnkSm+Cg03Xhw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:32 2026 by rpki-client