This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer File: v4iEmi616d1XGo50O-17lRPXoSE.cer (raw, json) Hash identifier: n3nYug/41uMfNHYGNcD7gm1hQD5DkUd8hI6ZGZpYe+8= Subject key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3860658FF766A2363A7DFAB1BC312C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35485 AS: 60227 AS: 206693 IP: 46.254.176.0/21 IP: 93.94.32.0/21 IP: 93.174.64.0/21 IP: 158.58.136.0/21 IP: 185.34.84.0/22 IP: 185.84.176.0/22 IP: 185.177.244.0/22 IP: 2a02:6a40::/32 IP: 2a05:a440::/29 IP: 2a0d:6380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:60:65:8f:f7:66:a2:36:3a:7d:fa:b1:bc:31:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c4:2b:cc:46:a7:bf:24:e4:ff:77:cd:8b:88: de:8a:b0:a1:a3:96:28:1b:fe:fb:db:c0:0e:ed:fc: 33:32:73:8a:ee:07:c3:65:0c:d6:64:69:d2:5c:0e: af:e6:c7:c0:98:8a:13:4d:c7:1c:2a:08:9d:a2:e1: 78:3f:19:e0:17:ab:8a:f2:31:3d:41:2b:6c:a7:07: af:09:51:80:25:df:b5:3e:1f:6a:59:73:8d:f2:69: 17:57:d3:54:ec:10:3c:8b:87:51:53:3f:fc:5f:62: 38:26:a8:57:28:9f:a2:7e:5c:81:99:12:03:df:af: e9:da:4f:00:fa:14:5b:18:84:b4:3a:27:9b:b3:31: f5:37:30:93:40:03:0d:e6:86:9d:6f:f6:f7:9d:22: 9d:69:64:77:08:c9:7b:81:f9:85:68:fd:c0:e1:fc: 8d:d3:bd:6f:ba:c1:27:eb:24:67:08:ec:5b:92:92: a1:00:32:79:ee:42:27:87:78:fa:ec:23:39:82:45: e0:9a:1b:96:e1:72:f1:07:5a:98:78:af:d8:8e:81: e8:a8:6b:74:ab:1c:d7:2c:f6:d0:ed:08:cd:eb:b1: 28:c0:5c:4d:b1:eb:cd:be:13:fd:91:a7:24:cf:b4: 42:11:7f:1f:d3:fd:af:06:15:2c:c4:84:fb:0a:43: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.176.0/21 93.94.32.0/21 93.174.64.0/21 158.58.136.0/21 185.34.84.0/22 185.84.176.0/22 185.177.244.0/22 IPv6: 2a02:6a40::/32 2a05:a440::/29 2a0d:6380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35485 60227 206693 Signature Algorithm: sha256WithRSAEncryption 5b:d9:b7:e9:08:c5:23:b2:00:89:d0:24:94:af:47:3b:e2:c2: 46:df:87:d0:4e:60:20:0f:06:7f:e8:bf:df:fc:bf:98:d4:fe: cd:97:27:e0:6d:69:c0:e6:6e:40:38:41:88:7c:cf:1a:30:48: d0:53:52:a1:f9:cb:a4:d7:02:ba:dc:11:ee:01:e6:fa:48:43: 63:64:84:e2:16:d2:ff:da:eb:0b:e7:b5:4f:87:d6:cc:75:ae: 86:87:f8:30:c5:48:88:66:5d:21:0d:8e:c5:8d:0c:f5:92:88: 3c:79:12:44:d6:55:42:89:16:81:81:f9:61:80:b9:f5:21:37: 7e:70:29:24:62:64:a4:d1:69:ef:ca:20:11:75:e4:da:ed:79: 2f:43:11:18:3d:b5:56:46:d5:73:10:83:36:21:f1:89:a0:df: ff:5b:91:01:da:ee:8e:dd:d7:7e:68:21:0e:48:48:78:71:ee: a4:40:4f:64:3f:69:37:4b:4e:72:89:e3:3d:b9:5e:79:a8:9b: c0:7d:45:f7:da:51:81:55:fb:1f:64:6e:f9:f9:d1:06:ee:63: 15:64:8b:a5:a2:81:9a:bb:23:8d:58:dd:f4:84:c2:1b:3f:72: e8:dd:0e:de:0b:e2:46:9e:23:3a:f9:20:bf:76:84:68:62:61: 69:aa:2e:0e -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt+OGBlj/dmojY6ffqxvDEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjg4ODQ5YTJlYjVlOWRkNTcxYThlNzQzYmVkN2I5NTEzZDdhMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksQrzEanvyTk/3fNi4jeirCho5Yo G/7728AO7fwzMnOK7gfDZQzWZGnSXA6v5sfAmIoTTcccKgidouF4PxngF6uK8jE9 QStspwevCVGAJd+1Ph9qWXON8mkXV9NU7BA8i4dRUz/8X2I4JqhXKJ+iflyBmRID 36/p2k8A+hRbGIS0OiebszH1NzCTQAMN5oadb/b3nSKdaWR3CMl7gfmFaP3A4fyN 071vusEn6yRnCOxbkpKhADJ57kInh3j67CM5gkXgmhuW4XLxB1qYeK/YjoHoqGt0 qxzXLPbQ7QjN67EowFxNsevNvhP9kackz7RCEX8f0/2vBhUsxIT7CkNXHQIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFL+IhJoutendVxqOdDvte5UT16EhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2RiYzU4 ZS0wMjdiLTRhYWMtOWRlNi0yMzczOWI1ZmQ4NGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvZGJjNThl LTAyN2ItNGFhYy05ZGU2LTIzNzM5YjVmZDg0Yy8xL3Y0aUVtaTYxNmQxWEdvNTBP LTE3bFJQWG9TRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzAwBAIAATAqAwQDLv6wAwQDXV4gAwQDXa5AAwQDnjqIAwQCuSJU AwQCuVSwAwQCubH0MBsEAgACMBUDBQAqAmpAAwUDKgWkQAMFAyoNY4AwJAYIKwYB BQUHAQgBAf8EFTAToBEwDwIDAIqdAgMA60MCAwMnZTANBgkqhkiG9w0BAQsFAAOC AQEAW9m36QjFI7IAidAklK9HO+LCRt+H0E5gIA8Gf+i/3/y/mNT+zZcn4G1pwOZu QDhBiHzPGjBI0FNSofnLpNcCutwR7gHm+khDY2SE4hbS/9rrC+e1T4fWzHWuhof4 MMVIiGZdIQ2OxY0M9ZKIPHkSRNZVQokWgYH5YYC59SE3fnApJGJkpNFp78ogEXXk 2u15L0MRGD21VkbVcxCDNiHxiaDf/1uRAdrujt3XfmghDkhIeHHupEBPZD9pN0tO conjPbleeaibwH1F99pRgVX7H2Ru+fnRBu5jFWSLpaKBmrsjjVjd9ITCGz9y6N0O 3gviRp4jOvkgv3aEaGJhaaouDg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:10 2026 by rpki-client