This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer (raw, json) Hash identifier: ccKylXyyOWRK7su3qvi8mHuUKtbR4S9TOoAhtBFx0/g= Subject key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE66C7996206B39E569D671349BCD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60821 IP: 81.85.63.0/24 IP: 185.22.168.0/22 IP: 194.46.38.0/24 IP: 2a00:63e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:66:c7:99:62:06:b3:9e:56:9d:67:13:49:bc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08fe040242651353d556b8c4240082190f271d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:37:8d:9a:ea:a9:d7:fe:8d:f7:96:f8:4a: 1e:32:8e:47:5d:1d:08:cb:60:00:11:87:4d:ac:e9: f6:10:f5:9f:2d:a8:c8:0a:ab:ef:63:d2:c1:f4:10: d1:c1:bd:fe:aa:9d:42:c3:21:11:ee:dc:85:4e:25: a8:24:c6:c8:aa:77:17:1f:27:e0:35:9e:d4:68:6f: fd:81:68:12:f9:fd:69:a6:c0:77:04:ae:43:ce:c3: a5:19:ff:e9:22:db:ea:55:c1:43:58:42:e0:fd:ca: 4d:dd:e3:69:d1:cb:90:72:43:3e:67:bc:75:08:31: c8:21:0a:49:62:92:b2:5c:4e:e0:4c:42:06:23:51: bf:03:a2:3e:bd:4d:e5:9c:b5:29:c7:b8:e8:bd:05: 4e:69:a3:43:fa:84:d0:a4:5f:b8:67:21:a2:25:e0: 52:e6:d0:70:9a:c0:00:2b:82:65:28:d4:93:2d:05: f2:af:ec:40:ee:5d:98:d6:18:4b:ea:8d:b9:ac:8d: f9:aa:dc:94:3a:a3:78:41:fb:7a:51:35:f1:41:e6: 14:d4:18:ea:da:d3:52:67:c4:b3:15:17:98:4e:d6: 51:66:71:68:ad:e5:de:94:bf:e5:b1:a6:45:91:36: 18:55:19:a8:bf:dd:7f:f3:05:ec:31:a3:43:56:32: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.63.0/24 185.22.168.0/22 194.46.38.0/24 IPv6: 2a00:63e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60821 Signature Algorithm: sha256WithRSAEncryption a9:cc:6d:60:78:74:b9:9c:ae:ed:0e:51:90:2d:0d:54:8f:b4: 1f:f0:07:3e:9f:0e:f6:3c:4e:80:4b:81:e9:fd:f8:b4:7f:fa: 8b:13:42:89:bc:e8:0f:85:e4:17:46:39:09:de:80:d6:85:c8: 17:a2:7f:e9:3b:f6:22:8e:3b:41:4e:4c:16:75:73:f5:09:9e: d9:f8:3e:c3:54:c9:0c:ca:8c:be:26:f3:f6:2f:2a:0c:f3:38: 22:a0:95:d6:a8:83:35:26:33:1c:ba:17:ec:c2:2c:c8:18:1d: 45:82:84:54:51:37:04:08:72:eb:2c:90:42:f3:9b:ff:b2:8f: bc:0c:29:d0:6d:91:27:37:1a:92:ad:e8:a6:cb:9a:05:2f:00: 4e:39:ef:95:99:c6:f3:43:1f:79:20:e2:8f:73:03:7f:e9:38: ad:df:be:4c:06:4d:1f:72:97:3f:f1:76:07:d1:64:73:e8:d2: 50:91:0f:f5:b3:ce:f2:ae:85:fc:9d:1a:fd:37:ec:89:f9:07: 8e:8a:90:ba:bd:0f:5b:18:87:d4:e1:e9:42:2b:a1:bc:22:b0: 5d:ed:22:e0:8e:00:c3:b1:a6:54:39:1e:9d:69:8c:45:d4:bb: f2:39:08:7e:30:0a:93:55:9a:ec:69:85:de:0f:9f:19:7b:69: 08:9d:52:b5 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt87mbHmWIGs55WnWcTSbzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGZlMDQwMjQyNjUxMzUzZDU1NmI4YzQyNDAwODIxOTBmMjcxZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptQ3jZrqqdf+jfeW+EoeMo5HXR0I y2AAEYdNrOn2EPWfLajICqvvY9LB9BDRwb3+qp1CwyER7tyFTiWoJMbIqncXHyfg NZ7UaG/9gWgS+f1ppsB3BK5DzsOlGf/pItvqVcFDWELg/cpN3eNp0cuQckM+Z7x1 CDHIIQpJYpKyXE7gTEIGI1G/A6I+vU3lnLUpx7jovQVOaaND+oTQpF+4ZyGiJeBS 5tBwmsAAK4JlKNSTLQXyr+xA7l2Y1hhL6o25rI35qtyUOqN4Qft6UTXxQeYU1Bjq 2tNSZ8SzFReYTtZRZnForeXelL/lsaZFkTYYVRmov91/8wXsMaNDVjJnEwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFAj+BAJCZRNT1Va4xCQAghkPJx0TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzRlYmMz My1lZTU0LTQzN2MtOGExYi1kZWM0ODA3Y2Q3ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvNGViYzMz LWVlNTQtNDM3Yy04YTFiLWRlYzQ4MDdjZDdlNi8xL0NQNEVBa0psRTFQVlZyakVK QUNDR1E4bkhSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAUVU/AwQCuRaoAwQAwi4mMA0EAgACMAcDBQAq AGPgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtlTANBgkqhkiG9w0BAQsFAAOC AQEAqcxtYHh0uZyu7Q5RkC0NVI+0H/AHPp8O9jxOgEuB6f34tH/6ixNCibzoD4Xk F0Y5Cd6A1oXIF6J/6Tv2Io47QU5MFnVz9Qme2fg+w1TJDMqMvibz9i8qDPM4IqCV 1qiDNSYzHLoX7MIsyBgdRYKEVFE3BAhy6yyQQvOb/7KPvAwp0G2RJzcakq3opsua BS8ATjnvlZnG80MfeSDij3MDf+k4rd++TAZNH3KXP/F2B9Fkc+jSUJEP9bPO8q6F /J0a/TfsifkHjoqQur0PWxiH1OHpQiuhvCKwXe0i4I4Aw7GmVDkenWmMRdS78jkI fjAKk1Wa7GmF3g+fGXtpCJ1StQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:03 2026 by rpki-client