This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer File: e4f2uRGfqdzT4S5-a_twbf-XiCU.cer (raw, json) Hash identifier: Cg0dLf3yaE4ellX5qoEzephSHsa19Ko1CBRloqZvAcI= Subject key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECF80217564E244607227FF90F8AA1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.173.20.0/22 IP: 2a0b:3100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f8:02:17:56:4e:24:46:07:22:7f:f9:0f:8a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:12:de:12:bb:5f:19:3b:b1:9d:6e:e3:9e:a7: 8d:69:b2:9c:69:85:58:15:27:10:73:62:be:6c:45: 8a:97:8c:e5:cc:ed:13:07:06:31:b5:bd:43:e0:5b: b1:0b:c7:ee:b9:91:2f:31:78:38:67:4b:db:16:13: 77:93:c9:6c:e0:6b:44:d9:11:90:f1:5b:b0:af:01: 68:70:d1:11:95:62:49:df:59:82:b4:a5:e6:60:f6: 80:02:22:f2:02:08:0c:a9:f1:b2:06:d3:12:e9:c0: 97:04:27:6b:76:ac:50:3f:6a:31:35:35:c4:ac:99: 6f:ea:cd:84:0b:0c:68:ef:8c:4a:61:9a:66:2f:c3: 2a:51:35:7a:8b:7f:5d:9c:0e:8f:a5:34:48:71:58: 83:3e:7e:e2:77:d6:6d:07:d8:91:1d:cc:6e:3b:c7: f3:86:1d:ca:3b:60:72:1c:08:22:37:9e:0e:7c:bf: 4d:2d:73:90:f1:e8:49:d2:30:8d:44:ef:2c:b0:5b: 38:7c:08:25:ac:74:1b:92:56:df:53:2f:06:dd:8c: 39:f3:74:39:f1:9d:87:0e:b7:39:69:7e:1a:e8:a2: bd:e3:a4:1e:8b:70:81:29:50:dd:e0:e6:25:69:b8: 27:ec:64:f7:1c:79:0b:5a:ab:bf:c2:5d:32:44:b4: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.20.0/22 IPv6: 2a0b:3100::/29 Signature Algorithm: sha256WithRSAEncryption 14:58:21:11:77:2b:1f:f3:80:99:68:34:bc:d8:e7:65:06:09: ba:a4:0a:3c:0e:16:c1:f2:c3:c4:2b:92:da:2c:c0:8f:97:c6: b6:9f:d4:93:3a:44:24:e8:d1:7d:9c:12:66:50:96:b5:98:6a: 6d:2f:94:ec:83:93:f2:4b:a2:e6:82:76:97:26:45:3d:39:79: d4:21:82:07:93:d3:17:c9:45:f4:f6:ba:92:be:fb:6d:59:28: 6c:a4:4c:83:40:b3:d7:6f:a7:cc:5c:07:2b:4d:c0:21:c8:1a: cf:5d:49:82:a9:e7:91:28:20:47:e0:b7:44:3f:e1:7e:05:46: 54:4f:f1:a6:0c:47:b1:74:41:09:a9:80:6e:36:5b:12:d2:ab: 7d:3e:af:93:8b:a8:35:bf:8b:1d:b8:34:10:fd:05:dc:8c:fa: 5c:f0:84:5f:6e:3f:a7:da:68:0d:95:4d:1e:e2:bd:59:80:69: 13:49:b5:1e:df:cf:fc:43:a1:ff:57:e5:60:d1:01:ee:0a:0b: 51:df:e5:9b:7f:b0:83:ff:fa:9c:9d:bc:2c:0b:5b:6f:75:2a: d6:4b:75:2e:b1:37:b5:53:46:2a:a7:60:a0:32:3c:af:d4:c8: ea:8b:19:76:24:85:9f:94:5f:aa:da:b4:8f:b2:34:de:d7:28: 9e:c6:b0:41 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57PgCF1ZOJEYHIn/5D4qhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjg3ZjZiOTExOWZhOWRjZDNlMTJlN2U2YmZiNzA2ZGZmOTc4ODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RLeErtfGTuxnW7jnqeNabKcaYVY FScQc2K+bEWKl4zlzO0TBwYxtb1D4FuxC8fuuZEvMXg4Z0vbFhN3k8ls4GtE2RGQ 8VuwrwFocNERlWJJ31mCtKXmYPaAAiLyAggMqfGyBtMS6cCXBCdrdqxQP2oxNTXE rJlv6s2ECwxo74xKYZpmL8MqUTV6i39dnA6PpTRIcViDPn7id9ZtB9iRHcxuO8fz hh3KO2ByHAgiN54OfL9NLXOQ8ehJ0jCNRO8ssFs4fAglrHQbklbfUy8G3Yw583Q5 8Z2HDrc5aX4a6KK946Qei3CBKVDd4OYlabgn7GT3HHkLWqu/wl0yRLTVsQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHuH9rkRn6nc0+Eufmv7cG3/l4glMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzNmM2Fi MS01OTU5LTQ1YTgtYmMwZi1kNzg1MTRlOWU4MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvM2YzYWIx LTU5NTktNDVhOC1iYzBmLWQ3ODUxNGU5ZTgxMi8xL2U0ZjJ1UkdmcWR6VDRTNS1h X3R3YmYtWGlDVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCua0UMA0EAgACMAcDBQMqCzEAMA0GCSqGSIb3 DQEBCwUAA4IBAQAUWCERdysf84CZaDS82OdlBgm6pAo8DhbB8sPEK5LaLMCPl8a2 n9STOkQk6NF9nBJmUJa1mGptL5Tsg5PyS6LmgnaXJkU9OXnUIYIHk9MXyUX09rqS vvttWShspEyDQLPXb6fMXAcrTcAhyBrPXUmCqeeRKCBH4LdEP+F+BUZUT/GmDEex dEEJqYBuNlsS0qt9Pq+Ti6g1v4sduDQQ/QXcjPpc8IRfbj+n2mgNlU0e4r1ZgGkT SbUe38/8Q6H/V+Vg0QHuCgtR3+Wbf7CD//qcnbwsC1tvdSrWS3UusTe1U0Yqp2Cg Mjyv1Mjqixl2JIWflF+q2rSPsjTe1yiexrBB -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:49 2026 by rpki-client