This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer File: A4Toj7eaN3bLBYPitnoL7G38aLg.cer (raw, json) Hash identifier: q+rwK2BeZA0FaAoOC0nHCl8aXrRVJrOwfj9eFpxYLSw= Subject key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B8E855197300D15BE3E8F6019D5700FB9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 05 Jan 2026 14:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6753 IP: 176.118.193.0/24 IP: 185.53.249.0/24 IP: 185.115.205.0/24 IP: 185.239.175.0/24 IP: 192.35.206.0/24 IP: 198.135.220.0/24 IP: 212.11.93.0/24 IP: 212.104.211.0/24 IP: 2a0c:a300::/29 IP: 2a12:ea80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:85:51:97:30:0d:15:be:3e:8f:60:19:d5:70:0f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 5 14:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:e1:0c:3e:d0:3f:c2:b4:40:0e:9d:f0:90: c7:25:49:da:db:60:a4:82:66:88:35:42:21:8b:bb: 52:78:96:fd:8f:64:39:07:58:34:c6:b3:e9:f8:9f: d6:a1:29:9b:9d:0c:1e:8e:53:5c:6a:f9:83:f6:bf: 8e:c6:ec:01:52:13:73:95:f0:b6:a8:d2:bb:c0:81: a1:01:da:17:24:44:b7:c2:b2:2a:ae:60:45:44:99: 50:58:2d:55:24:1d:2c:05:14:e7:d5:89:d5:5c:54: c4:c0:5f:97:64:08:ae:11:47:64:c7:fe:f0:0b:89: 3b:ad:64:73:3a:6e:8a:70:38:27:15:05:18:c9:d4: 94:9c:2f:26:ae:e3:3f:17:db:8c:e2:2c:45:a6:2c: a6:3e:ce:e8:99:73:73:e5:1e:b3:61:2d:d0:d3:dd: 1b:9c:d5:4e:26:48:bb:4e:16:bf:2d:a1:0e:db:a5: 6b:99:d6:db:03:c5:32:ed:11:f2:6b:40:40:15:7e: 8b:ec:8f:9b:32:6c:d3:bd:4b:f2:4c:6a:e6:45:87: 33:d4:15:4a:bb:19:63:36:a5:ba:27:47:b1:e0:5f: 57:2e:8c:20:f4:30:5d:12:ea:5f:54:2c:91:e7:0a: f7:d9:8b:c5:31:3a:8b:14:d4:f8:30:b2:e5:b6:6b: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.118.193.0/24 185.53.249.0/24 185.115.205.0/24 185.239.175.0/24 192.35.206.0/24 198.135.220.0/24 212.11.93.0/24 212.104.211.0/24 IPv6: 2a0c:a300::/29 2a12:ea80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6753 Signature Algorithm: sha256WithRSAEncryption a4:3b:d2:d4:86:4e:1d:a0:b9:e9:4f:c2:d6:25:f6:3e:e7:76: 56:cc:1e:81:51:76:8a:08:ac:77:9d:fc:39:90:fc:ce:fa:0e: 15:24:c2:c9:82:f5:20:5e:c7:af:fb:04:fd:93:7f:a1:62:6a: 5d:cc:ba:94:e3:0f:6c:f7:74:1a:76:dc:10:de:8a:e6:ab:e8: 09:6f:2a:8f:4c:be:66:0b:f7:0f:08:37:ce:2e:b3:9b:7b:60: 93:e8:28:03:33:67:ee:38:9f:0f:4f:43:bb:15:df:cf:cc:c9: 7c:2b:ff:90:a2:e6:e7:7c:a3:eb:66:c3:6c:83:9c:1a:d7:d0: 3b:8f:e7:25:bb:2d:7b:f3:bc:a7:ec:f5:20:6a:fb:86:22:4e: 55:e9:88:ab:16:ca:83:10:19:a6:b4:7e:e5:72:a7:c2:64:bd: 20:a7:40:61:7d:ed:63:70:89:d3:18:72:90:af:47:f0:83:63: c9:49:2f:b0:a8:4c:67:3e:b8:37:fd:ab:af:d9:70:88:65:6b: fb:c7:e2:8c:a4:bd:41:b5:44:4f:72:23:9e:03:1f:88:cb:a6: 28:a2:7c:27:7c:bb:c5:a8:c3:72:4a:0f:e9:70:58:05:41:b0: d3:ad:b8:08:b7:24:62:69:a4:8b:a5:7f:9d:a5:1c:2b:23:a3: 70:d8:81:f8 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZuOhVGXMA0Vvj6PYBnVcA+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA1MTQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzg0ZTg4ZmI3OWEzNzc2Y2IwNTgzZTJiNjdhMGJlYzZkZmM2OGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT/hDD7QP8K0QA6d8JDHJUna22Ck gmaINUIhi7tSeJb9j2Q5B1g0xrPp+J/WoSmbnQwejlNcavmD9r+OxuwBUhNzlfC2 qNK7wIGhAdoXJES3wrIqrmBFRJlQWC1VJB0sBRTn1YnVXFTEwF+XZAiuEUdkx/7w C4k7rWRzOm6KcDgnFQUYydSUnC8mruM/F9uM4ixFpiymPs7omXNz5R6zYS3Q090b nNVOJki7Tha/LaEO26VrmdbbA8Uy7RHya0BAFX6L7I+bMmzTvUvyTGrmRYcz1BVK uxljNqW6J0ex4F9XLowg9DBdEupfVCyR5wr32YvFMTqLFNT4MLLltmsHYwIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzdhMDE1 MS1jZTIwLTQ4ZTYtOTA1My0zMzNhMzg0ZDQxN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvN2EwMTUx LWNlMjAtNDhlNi05MDUzLTMzM2EzODRkNDE3ZC8xL0E0VG9qN2VhTjNiTEJZUGl0 bm9MN0czOGFMZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQAsHbBAwQAuTX5AwQAuXPNAwQAue+vAwQAwCPO AwQAxofcAwQA1AtdAwQA1GjTMBQEAgACMA4DBQMqDKMAAwUDKhLqgDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIaYTANBgkqhkiG9w0BAQsFAAOCAQEApDvS1IZOHaC5 6U/C1iX2Pud2VswegVF2igisd538OZD8zvoOFSTCyYL1IF7Hr/sE/ZN/oWJqXcy6 lOMPbPd0GnbcEN6K5qvoCW8qj0y+Zgv3Dwg3zi6zm3tgk+goAzNn7jifD09DuxXf z8zJfCv/kKLm53yj62bDbIOcGtfQO4/nJbste/O8p+z1IGr7hiJOVemIqxbKgxAZ prR+5XKnwmS9IKdAYX3tY3CJ0xhykK9H8INjyUkvsKhMZz64N/2rr9lwiGVr+8fi jKS9QbVET3IjngMfiMumKKJ8J3y7xajDckoP6XBYBUGw0624CLckYmmki6V/naUc KyOjcNiB+A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:21 2026 by rpki-client