This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer File: t4Z4vWVMprEKXHc7wml1TcI0z9U.cer (raw, json) Hash identifier: JwtaqJFu/e946nV48V46GxX0fbT3Toito8qhdVHl6FM= Subject key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30FCBD26E29C7D9FB14967D8227C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214110 IP: 2.59.244.0/22 IP: 89.38.216.0/21 IP: 103.95.124.0/22 IP: 103.115.182.0/23 IP: 103.132.4.0/22 IP: 103.204.220.0/23 IP: 185.124.100.0/22 IP: 185.250.76.0/22 IP: 192.140.228.0/22 IP: 193.36.96.0/22 IP: 2a0c:8c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0f:cb:d2:6e:29:c7:d9:fb:14:96:7d:82:27:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:50:20:91:e9:b3:49:60:a8:7f:68:13:e4: c5:7b:61:be:bf:5c:9e:fc:66:8a:0d:f9:7b:b8:87: 38:13:c8:60:66:f5:b9:fa:65:44:51:14:aa:1a:9a: 26:20:b9:0d:61:fc:92:cb:06:5c:93:a8:5c:e2:4d: 43:df:d9:ad:49:50:91:4c:70:b0:f5:74:f1:f5:13: 3e:d5:81:ca:ba:37:5b:13:a2:e5:88:34:ba:c5:da: 54:7f:39:58:43:73:21:3f:09:d9:84:18:2e:b5:b6: 09:e1:e9:4c:f1:98:51:6b:c3:ec:17:fe:c4:01:85: 2a:3d:9b:cb:2e:2f:00:06:86:83:58:76:6d:0b:de: c4:34:9c:3c:ed:ed:c3:84:0d:bf:78:27:51:c1:58: 73:7b:c5:d9:f7:d4:6c:99:49:c1:98:6c:b8:1a:ca: df:d9:ab:f8:46:32:52:ca:58:6e:d4:d9:78:64:81: 57:f7:0d:c7:93:8b:24:97:4a:9a:e9:2b:d6:4c:ee: e4:19:0b:f1:67:45:bd:5e:df:ec:87:81:5b:95:c2: 58:b4:a6:e6:03:05:08:89:e3:e5:9d:33:86:6a:58: 06:c2:8b:75:cf:9a:3a:81:c4:a6:d7:0f:d6:68:bb: 03:eb:f4:48:b6:3e:2b:d3:e0:21:9e:78:26:25:6b: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.244.0/22 89.38.216.0/21 103.95.124.0/22 103.115.182.0/23 103.132.4.0/22 103.204.220.0/23 185.124.100.0/22 185.250.76.0/22 192.140.228.0/22 193.36.96.0/22 IPv6: 2a0c:8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214110 Signature Algorithm: sha256WithRSAEncryption 34:41:5e:36:cc:62:36:7b:96:db:1b:8f:e8:9a:f2:ce:17:2b: f9:ab:1d:1c:08:62:69:eb:93:6d:d7:2e:01:03:79:e2:94:7b: 6b:5c:50:ec:f2:9f:ac:eb:e4:03:e4:55:4c:00:f3:ee:cb:50: 87:18:6b:15:c2:5e:90:1e:f1:a6:88:de:f3:94:d5:39:33:23: 25:d4:96:1b:16:78:ae:e3:5e:00:95:97:73:4f:02:fc:38:5c: 37:75:01:25:84:d6:de:68:3f:f8:48:25:1f:81:93:35:07:bc: 47:73:ea:ed:d1:d2:53:c9:f0:20:a2:49:68:95:83:b5:2a:3e: 43:d3:f6:8c:bd:5a:6a:68:7b:72:5d:eb:4c:b3:b7:58:8c:f6: d8:05:09:d1:68:a3:82:77:de:56:05:74:72:a1:2c:93:dc:85: 93:79:ce:a5:3a:e5:c6:c6:aa:e4:fb:94:cc:d4:37:c0:46:e9: 06:be:a8:04:ff:3b:b7:42:9b:31:09:64:21:b5:0b:dd:01:1f: 72:53:fe:1e:fc:f4:31:95:c8:b6:40:a7:40:42:7f:d2:df:63: 5b:d7:b8:a4:db:f1:7a:9b:4b:bf:f4:e6:14:20:34:d3:ea:53: 3f:ea:bd:b7:6a:80:8c:86:ea:7f:2d:36:d1:84:17:90:ae:a8: 2a:cd:0b:fc -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZt4ow/L0m4px9n7FJZ9gifHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzg2NzhiZDY1NGNhNmIxMGE1Yzc3M2JjMjY5NzU0ZGMyMzRjZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyxQIJHps0lgqH9oE+TFe2G+v1ye /GaKDfl7uIc4E8hgZvW5+mVEURSqGpomILkNYfySywZck6hc4k1D39mtSVCRTHCw 9XTx9RM+1YHKujdbE6LliDS6xdpUfzlYQ3MhPwnZhBgutbYJ4elM8ZhRa8PsF/7E AYUqPZvLLi8ABoaDWHZtC97ENJw87e3DhA2/eCdRwVhze8XZ99RsmUnBmGy4Gsrf 2av4RjJSylhu1Nl4ZIFX9w3Hk4skl0qa6SvWTO7kGQvxZ0W9Xt/sh4FblcJYtKbm AwUIiePlnTOGalgGwot1z5o6gcSm1w/WaLsD6/RItj4r0+AhnngmJWt8LQIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFLeGeL1lTKaxClx3O8JpdU3CNM/VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzQ4MGY0 YS1hOTM3LTQxNDktYWVlOC1lMzI5MjRhYzdiNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvNDgwZjRh LWE5MzctNDE0OS1hZWU4LWUzMjkyNGFjN2I2My8xL3Q0WjR2V1ZNcHJFS1hIYzd3 bWwxVGNJMHo5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQCAjv0AwQDWSbYAwQCZ198AwQBZ3O2AwQCZ4QE AwQBZ8zcAwQCuXxkAwQCufpMAwQCwIzkAwQCwSRgMA0EAgACMAcDBQAqDAjAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNEXjANBgkqhkiG9w0BAQsFAAOCAQEANEFe NsxiNnuW2xuP6Jryzhcr+asdHAhiaeuTbdcuAQN54pR7a1xQ7PKfrOvkA+RVTADz 7stQhxhrFcJekB7xpoje85TVOTMjJdSWGxZ4ruNeAJWXc08C/DhcN3UBJYTW3mg/ +EglH4GTNQe8R3Pq7dHSU8nwIKJJaJWDtSo+Q9P2jL1aamh7cl3rTLO3WIz22AUJ 0WijgnfeVgV0cqEsk9yFk3nOpTrlxsaq5PuUzNQ3wEbpBr6oBP87t0KbMQlkIbUL 3QEfclP+Hvz0MZXItkCnQEJ/0t9jW9e4pNvxeptLv/TmFCA00+pTP+q9t2qAjIbq fy020YQXkK6oKs0L/A== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:42 2026 by rpki-client