This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer File: 4CzXYQ92Hg7SUq57ufMPHisXtec.cer (raw, json) Hash identifier: aPXyKfN8GWh4f2g6rE6x9JDwSNPz19UMe62ja5/qkVg= Subject key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A310AB9DE5B6B49B00F17D52E50D2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31743 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:10:ab:9d:e5:b6:b4:9b:00:f1:7d:52:e5:0d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:17:9c:b5:01:80:c4:0e:5a:93:3d:5d:80: 49:a7:39:67:0a:4c:cb:e8:21:ae:96:e2:ca:84:f8: 61:78:6a:37:33:b6:4b:f7:02:d1:91:f9:4b:ce:e1: 64:0b:64:17:1d:9c:e6:a4:9f:08:d7:5e:3e:c1:72: f7:5e:fd:29:7f:e6:f9:65:3f:d7:cb:54:b2:f3:07: 45:6f:8a:90:44:07:57:fe:81:ef:dc:c1:11:96:f0: 23:c0:09:03:40:4e:c9:76:e1:52:c1:47:fd:6c:a5: 37:a6:15:bb:19:dd:3a:c1:c1:2c:a4:fa:a5:ac:5b: 29:ff:fb:a0:1e:01:8c:4a:b1:14:9a:06:fd:be:58: 4f:b9:64:2a:68:ec:18:c9:80:a9:14:ce:a7:ee:92: 6e:28:e4:b4:80:70:4e:da:a3:70:67:5d:10:a7:55: 16:07:32:52:06:4b:80:83:ef:65:68:02:e3:1c:cd: dd:33:10:57:25:bc:2a:73:2d:50:56:71:05:5a:c6: ed:d9:04:52:27:02:9d:2e:9f:2c:31:b3:ab:de:a1: 30:3e:a6:a0:12:64:2c:02:08:c2:24:e8:db:cb:04: 0c:74:8e:db:43:1f:ef:4a:4f:90:68:ea:e4:d4:d2: 6d:c0:49:d5:a9:6f:5c:11:15:1e:1d:96:c5:e8:68: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 31743 Signature Algorithm: sha256WithRSAEncryption a8:bc:20:fe:6d:49:92:94:d3:50:78:07:be:ff:f2:95:9a:e3: b8:63:1a:bd:f7:4c:d5:de:61:f3:df:31:37:f5:a1:23:8c:07: 3d:2e:20:7b:2a:f1:5e:53:de:0d:56:5e:94:d7:65:69:85:92: 9b:c9:2c:9f:a7:d6:48:f6:4e:d5:9a:5d:41:04:54:26:b1:3e: fc:60:ec:7d:a0:53:55:e5:0b:30:8b:21:ff:43:38:77:68:cf: a5:f6:33:96:0e:42:a7:dd:6a:04:32:e1:6c:a7:36:9c:26:be: b2:71:f2:92:be:70:39:e9:9d:bd:16:60:c2:ae:1b:0e:af:d0: ee:cf:29:34:f7:e8:48:20:f4:a5:17:43:1d:7c:ad:95:16:9d: e8:96:a1:ab:ae:bf:47:f5:96:a9:3a:fd:0b:6d:08:d5:20:52: 42:c8:a0:97:24:f5:f5:f7:13:1d:5b:15:9e:9f:d4:48:cb:2d: e0:ca:9a:db:bf:8e:4d:59:e4:3a:f4:b9:1d:1c:6c:c3:94:1e: 3c:4f:00:b5:d6:0c:db:04:da:ed:67:08:12:9c:7e:a4:24:e8: 5e:66:9d:48:ba:ec:7c:aa:d1:52:8d:be:af:98:3b:b1:80:03: 71:37:8b:e2:88:b5:3f:70:2e:cc:1e:2b:85:d1:9e:45:73:10: 00:2b:0a:4a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt4oxCrneW2tJsA8X1S5Q0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDJjZDc2MTBmNzYxZTBlZDI1MmFlN2JiOWYzMGYxZTJiMTdiNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwXnLUBgMQOWpM9XYBJpzlnCkzL 6CGuluLKhPhheGo3M7ZL9wLRkflLzuFkC2QXHZzmpJ8I114+wXL3Xv0pf+b5ZT/X y1Sy8wdFb4qQRAdX/oHv3MERlvAjwAkDQE7JduFSwUf9bKU3phW7Gd06wcEspPql rFsp//ugHgGMSrEUmgb9vlhPuWQqaOwYyYCpFM6n7pJuKOS0gHBO2qNwZ10Qp1UW BzJSBkuAg+9laALjHM3dMxBXJbwqcy1QVnEFWsbt2QRSJwKdLp8sMbOr3qEwPqag EmQsAgjCJOjbywQMdI7bQx/vSk+QaOrk1NJtwEnVqW9cERUeHZbF6GgQXQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFOAs12EPdh4O0lKue7nzDx4rF7XnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2JkYmVl OS01ZWVlLTQ1NjEtYTUyMy05NDM1MTU5YzkzZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYmRiZWU5 LTVlZWUtNDU2MS1hNTIzLTk0MzUxNTljOTNlYi8xLzRDelhZUTkySGc3U1VxNTd1 Zk1QSGlzWHRlYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnv/MA0GCSqGSIb3DQEBCwUAA4IBAQCovCD+bUmSlNNQ eAe+//KVmuO4Yxq990zV3mHz3zE39aEjjAc9LiB7KvFeU94NVl6U12VphZKbySyf p9ZI9k7Vml1BBFQmsT78YOx9oFNV5QswiyH/Qzh3aM+l9jOWDkKn3WoEMuFspzac Jr6ycfKSvnA56Z29FmDCrhsOr9Duzyk09+hIIPSlF0MdfK2VFp3olqGrrr9H9Zap Ov0LbQjVIFJCyKCXJPX19xMdWxWen9RIyy3gyprbv45NWeQ69LkdHGzDlB48TwC1 1gzbBNrtZwgSnH6kJOheZp1Iuux8qtFSjb6vmDuxgANxN4viiLU/cC7MHiuF0Z5F cxAAKwpK -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:42 2026 by rpki-client