This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer File: T4lf8Omad8AX6KODKSy1xvgmESA.cer (raw, json) Hash identifier: 7n3Hygqu3QGOae5xHP7UH6dfQBUOZXBLK4A5TawdQ6s= Subject key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2D6BEA8B2CE871A0AFAC465CAE88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58010 IP: 37.208.104.0/21 IP: 185.26.156.0/22 IP: 185.219.100.0/22 IP: 193.243.164.0/23 IP: 195.74.88.0/23 IP: 2a00:d0c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2d:6b:ea:8b:2c:e8:71:a0:af:ac:46:5c:ae:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:1a:12:91:32:33:6d:ce:a8:60:b9:65:70: ab:38:27:63:5d:3c:99:ac:28:89:d8:4c:c8:cf:8d: 6c:4c:aa:7a:26:fa:5c:c1:82:28:39:7d:2c:7a:76: 4d:9d:de:b7:50:45:ee:56:99:d2:dd:e0:83:f1:93: 6e:57:5b:a6:64:83:69:a8:60:df:c9:3d:e8:bc:ea: 8b:69:67:50:2c:b1:a1:11:e0:c7:2a:ef:56:ba:47: f6:86:68:6e:d6:4d:0e:1d:37:5b:4a:73:44:a8:e3: b6:e0:72:42:bd:1f:cf:61:4f:06:bc:8d:26:b9:d4: 6e:9b:96:c6:32:2b:e9:c8:f2:61:b9:51:23:02:09: 4c:d5:ae:14:4d:28:7a:c3:ab:27:d3:c4:c1:d5:55: 2d:45:52:17:ee:78:eb:90:f4:96:c1:ea:b0:77:c7: 70:57:82:73:9f:1e:b0:f0:e5:1b:2a:c3:3d:dc:38: 63:ff:bf:c1:b2:80:c4:7f:c9:58:0e:6d:92:fb:09: 84:ad:44:03:ca:2e:59:f4:b9:8d:a5:47:14:3e:6c: 47:9a:f2:5b:35:0b:97:21:e2:75:50:cb:f2:90:65: c5:02:4f:56:62:c4:ec:8a:da:67:1d:19:22:be:3e: f9:fe:5a:e5:bd:06:24:5e:2d:b7:d7:16:a9:40:62: 66:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.104.0/21 185.26.156.0/22 185.219.100.0/22 193.243.164.0/23 195.74.88.0/23 IPv6: 2a00:d0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58010 Signature Algorithm: sha256WithRSAEncryption 6e:61:d1:24:fd:2c:94:00:aa:ee:82:aa:93:5e:8c:b1:42:20: 3d:8d:18:d3:c1:59:68:f5:2b:bd:f3:bc:c3:34:4c:4e:f9:e4: 2c:93:2d:35:c0:4a:29:6b:8c:56:de:77:c3:70:bd:f2:26:5f: 41:04:fc:19:5d:03:0b:a5:3d:49:db:98:2f:5f:b1:ca:dc:52: 5c:54:15:33:27:1c:90:0b:c3:8f:10:eb:05:3d:6a:e4:41:80: e6:0e:91:49:b9:b0:99:8d:93:20:02:60:18:d7:8f:dd:6f:80: 56:c1:6f:68:17:09:14:f9:58:57:7d:83:69:d0:a1:bf:af:a0: 30:8c:4a:42:30:43:37:b4:df:16:62:d3:3b:6f:cb:47:08:cf: 25:6d:a6:cd:da:17:2f:75:e7:58:64:f0:b2:62:a9:bb:81:cc: b9:da:d8:9e:eb:e4:3b:70:56:f0:38:1e:fc:07:b8:bd:e5:08: 4e:19:83:cf:34:4b:70:88:56:03:dd:74:14:16:e3:73:a4:70: 5b:f2:82:9d:c2:a8:00:36:c4:73:c1:75:53:fd:0d:fc:a8:f0: 76:03:da:1d:88:73:7f:3e:f2:b0:77:1f:87:af:f7:c0:09:4a: 42:54:ce:d6:aa:a8:bf:9f:95:f5:a6:1f:5c:8b:38:2e:75:7d: 8d:fe:1d:e2 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt5fy1r6oss6HGgr6xGXK6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Zjg5NWZmMGU5OWE3N2MwMTdlOGEzODMyOTJjYjVjNmY4MjYxMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4oaEpEyM23OqGC5ZXCrOCdjXTyZ rCiJ2EzIz41sTKp6JvpcwYIoOX0senZNnd63UEXuVpnS3eCD8ZNuV1umZINpqGDf yT3ovOqLaWdQLLGhEeDHKu9Wukf2hmhu1k0OHTdbSnNEqOO24HJCvR/PYU8GvI0m udRum5bGMivpyPJhuVEjAglM1a4UTSh6w6sn08TB1VUtRVIX7njrkPSWweqwd8dw V4Jznx6w8OUbKsM93Dhj/7/BsoDEf8lYDm2S+wmErUQDyi5Z9LmNpUcUPmxHmvJb NQuXIeJ1UMvykGXFAk9WYsTsitpnHRkivj75/lrlvQYkXi231xapQGJmEwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFE+JX/DpmnfAF+ijgykstcb4JhEgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzMzMjhk YS1hYTRlLTQ0NWItOWRhOS1kMDUzNzQ1YzJhY2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMzMyOGRh LWFhNGUtNDQ1Yi05ZGE5LWQwNTM3NDVjMmFjYy8xL1Q0bGY4T21hZDhBWDZLT0RL U3kxeHZnbUVTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDJdBoAwQCuRqcAwQCudtkAwQBwfOkAwQBw0pY MA0EAgACMAcDBQAqANDAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDimjANBgkq hkiG9w0BAQsFAAOCAQEAbmHRJP0slACq7oKqk16MsUIgPY0Y08FZaPUrvfO8wzRM TvnkLJMtNcBKKWuMVt53w3C98iZfQQT8GV0DC6U9SduYL1+xytxSXFQVMycckAvD jxDrBT1q5EGA5g6RSbmwmY2TIAJgGNeP3W+AVsFvaBcJFPlYV32DadChv6+gMIxK QjBDN7TfFmLTO2/LRwjPJW2mzdoXL3XnWGTwsmKpu4HMudrYnuvkO3BW8Dge/Ae4 veUIThmDzzRLcIhWA910FBbjc6RwW/KCncKoADbEc8F1U/0N/KjwdgPaHYhzfz7y sHcfh6/3wAlKQlTO1qqov5+V9aYfXIs4LnV9jf4d4g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:17 2026 by rpki-client