This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer File: T4EisJRezMsfL7mRL72GqgSmGYc.cer (raw, json) Hash identifier: Zd+9215ILZZUiarl2cXOZpDjV28KzyAaHZNkDbFBeLk= Subject key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1CDDD9C2B3E4318C9F89EBE736B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197289 IP: 95.215.132.0/22 IP: 185.18.160.0/22 IP: 2a03:95c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1c:dd:d9:c2:b3:e4:31:8c:9f:89:eb:e7:36:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:99:32:c2:40:c0:a5:9e:5c:8d:6e:0c:11: e8:72:b6:da:b4:93:f8:65:db:b9:dc:42:ab:e0:4c: 52:6a:36:dc:39:15:a0:ad:04:44:fb:bb:24:96:44: 2d:77:73:78:e1:e3:01:2b:f4:3d:5d:3c:4f:e6:e9: 76:ce:d8:8a:d2:76:7c:2f:df:c3:bc:2c:5a:d0:05: e1:76:f8:ca:27:a6:35:ee:4e:87:e0:8c:27:47:1b: 71:6d:2e:27:fb:c4:c2:e5:63:96:d0:a6:2c:ae:a1: 34:9b:4d:f5:f1:45:37:f3:d0:df:24:f3:50:5f:0f: 61:53:7c:a8:e5:37:d1:e0:4d:3c:a0:20:cc:52:e8: 13:f0:fa:7b:e4:6d:b3:25:bd:28:24:89:24:9f:e1: ed:8b:0c:21:07:f6:ab:59:91:b3:3b:8e:8e:0b:52: 7a:9d:77:fc:aa:b1:65:eb:3d:b3:18:7a:68:e0:be: 1b:b4:4b:0f:8e:35:99:25:08:93:3c:44:12:8a:6f: ee:3e:21:bd:33:29:b2:c4:8b:6d:ce:49:88:ce:5a: 15:ac:86:e2:16:5c:dd:ef:59:8f:14:45:c5:cc:3d: 3b:0e:a3:f6:64:b0:a2:8c:12:21:07:e1:ef:ae:b8: d4:e6:2c:52:f3:75:a9:11:f6:1e:99:d7:51:01:c1: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.132.0/22 185.18.160.0/22 IPv6: 2a03:95c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197289 Signature Algorithm: sha256WithRSAEncryption 79:f0:c3:46:ed:2e:c8:de:dd:8a:50:a3:24:42:a3:85:bc:00: 64:f4:e4:45:5e:af:3d:69:7f:02:d0:d4:b2:06:49:61:47:db: 6e:8c:54:a6:4d:e6:2b:2f:a1:1f:e2:24:47:bc:33:41:ea:a7: 42:63:5e:2b:1d:70:f5:72:65:78:ba:92:75:97:c9:b7:02:c6: c6:5a:26:9a:fb:fd:91:7e:16:84:0f:81:00:3a:0a:67:19:27: 21:a8:24:d8:68:eb:8e:2e:4f:4b:a9:e9:90:44:7a:e4:e3:5b: 9a:9e:ee:20:10:35:49:e1:e1:3a:0c:53:d0:62:3d:6e:79:5d: a2:29:75:29:a9:52:be:34:26:a6:51:c5:6f:8a:5d:b6:32:ee: 25:54:27:e7:d9:5d:df:01:88:fa:cb:24:49:5c:06:5e:41:4a: ac:f0:0f:e6:d7:67:61:79:f6:1d:9b:7f:ce:53:f1:8a:36:14: 77:04:88:ea:6b:81:d4:c5:30:9b:0e:60:23:10:d1:88:bb:7b: db:9d:9f:b7:ae:90:40:17:f9:99:d4:92:69:03:3e:71:b9:4e: b0:77:d0:16:ce:72:ff:49:bc:de:23:88:0a:1f:ea:43:b5:04: 80:51:51:ea:48:ff:6a:27:f6:46:e0:7c:23:a1:e2:6d:e4:1d: 4b:06:c5:ad -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt26xzd2cKz5DGMn4nr5zaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjgxMjJiMDk0NWVjY2NiMWYyZmI5OTEyZmJkODZhYTA0YTYxOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmWZMsJAwKWeXI1uDBHocrbatJP4 Zdu53EKr4ExSajbcORWgrQRE+7sklkQtd3N44eMBK/Q9XTxP5ul2ztiK0nZ8L9/D vCxa0AXhdvjKJ6Y17k6H4IwnRxtxbS4n+8TC5WOW0KYsrqE0m0318UU389DfJPNQ Xw9hU3yo5TfR4E08oCDMUugT8Pp75G2zJb0oJIkkn+HtiwwhB/arWZGzO46OC1J6 nXf8qrFl6z2zGHpo4L4btEsPjjWZJQiTPEQSim/uPiG9MymyxIttzkmIzloVrIbi Flzd71mPFEXFzD07DqP2ZLCijBIhB+HvrrjU5ixS83WpEfYemddRAcEE/QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFE+BIrCUXszLHy+5kS+9hqoEphmHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzIxZGVl Mi0yOWQ3LTRkYWQtYmViOS0yYjIyNmEyMzQwNmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMjFkZWUy LTI5ZDctNGRhZC1iZWI5LTJiMjI2YTIzNDA2YS8xL1Q0RWlzSlJlek1zZkw3bVJM NzJHcWdTbUdZYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCX9eEAwQCuRKgMA0EAgACMAcDBQAqA5XAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCqTANBgkqhkiG9w0BAQsFAAOCAQEAefDD Ru0uyN7dilCjJEKjhbwAZPTkRV6vPWl/AtDUsgZJYUfbboxUpk3mKy+hH+IkR7wz QeqnQmNeKx1w9XJleLqSdZfJtwLGxlommvv9kX4WhA+BADoKZxknIagk2Gjrji5P S6npkER65ONbmp7uIBA1SeHhOgxT0GI9bnldoil1KalSvjQmplHFb4pdtjLuJVQn 59ld3wGI+sskSVwGXkFKrPAP5tdnYXn2HZt/zlPxijYUdwSI6muB1MUwmw5gIxDR iLt7252ft66QQBf5mdSSaQM+cblOsHfQFs5y/0m83iOICh/qQ7UEgFFR6kj/aif2 RuB8I6HibeQdSwbFrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:46 2026 by rpki-client