This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer File: 4WU0PZW9Tbww89ciSVQanUfnbZE.cer (raw, json) Hash identifier: T6Z0S65nS1e4Hv26ez4f6aD0vDyNKKry50ve1ODts7k= Subject key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7B8C8CE45DF28316634075647A49B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48566 IP: 194.49.50.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b8:c8:ce:45:df:28:31:66:34:07:56:47:a4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:0a:2b:ad:59:1b:16:63:e0:21:5d:0e:9b: d5:60:e1:09:81:1c:14:f1:59:74:f8:a4:4e:95:19: d1:e0:44:58:a7:10:b9:b8:1a:8f:14:3c:c0:85:ea: 35:a1:82:68:df:bc:51:db:50:24:08:80:1c:85:05: f3:fd:04:70:7d:93:dc:59:e2:0a:c4:6c:ba:11:ad: 0a:18:a3:7e:7a:d1:c9:41:9f:48:db:a5:3c:7a:d6: 47:7d:96:4a:77:13:1c:f8:80:0e:d3:a7:0c:61:ed: 5a:73:b3:74:86:4f:c9:cf:73:51:f9:a9:5b:22:bb: 9e:01:48:30:41:82:61:71:86:c1:80:84:20:87:94: 24:b7:fb:db:e4:6e:8a:48:b4:5d:0f:7e:75:87:32: 8b:77:57:b4:bd:38:57:bf:19:e5:63:4c:b6:f2:40: d6:10:2e:9e:dd:2f:19:83:67:5b:91:5d:eb:dd:52: 4a:c5:5a:0f:8b:2e:b2:c7:49:6e:d6:f8:0e:a2:83: ca:34:64:d5:5f:29:73:f4:b8:94:cd:97:e7:1e:4e: 4e:04:76:18:a4:51:6d:0a:8f:ee:9e:d1:d7:2f:ad: 87:1d:30:26:a4:74:24:8e:24:d7:b1:5d:75:3f:bd: 3a:ae:fc:9c:b6:9f:3d:0e:74:74:31:45:95:2b:55: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.50.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48566 Signature Algorithm: sha256WithRSAEncryption 8d:bf:0a:15:96:b0:96:55:e9:59:d9:46:db:d8:d9:ec:09:15: 01:62:30:95:54:44:4f:36:53:1f:56:29:b7:a6:0f:67:22:f0: bc:25:a8:8c:1c:9c:41:79:5c:e3:4c:cc:40:9c:3b:fe:d1:88: 52:af:79:80:e1:0e:1f:22:a7:f1:61:cd:a1:be:da:33:08:f1: 73:77:d5:ea:f5:88:b3:6e:5a:5a:52:e8:34:50:4b:80:8a:8a: e1:2f:d9:22:db:24:82:90:e7:5c:bd:ec:aa:97:8e:83:e1:a9: ca:97:32:79:8f:c7:5e:7c:31:3e:c1:fd:7c:e6:0b:a8:27:ce: 01:8b:b1:95:f4:82:86:68:aa:cf:1e:cd:77:a5:f1:3b:76:1b: 87:94:a2:e6:49:85:1c:05:73:9e:81:da:a7:71:43:00:9e:8a: 77:ec:90:05:d6:ef:47:63:48:2f:9b:86:88:52:36:c2:2b:ae: 70:39:02:e8:c0:84:ad:02:18:2d:01:0a:1c:b6:f8:3e:be:d1: d2:e9:97:23:28:8e:8c:6c:45:48:73:90:78:76:25:e6:36:40: 6e:a7:d7:8c:f9:22:62:60:23:26:4b:11:10:94:66:2d:45:16: 1f:b5:7f:e9:35:e3:15:0e:0b:2e:a7:3f:ef:13:59:d8:b5:e5: bd:8a:fb:b1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x7jIzkXfKDFmNAdWR6SbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTY1MzQzZDk1YmQ0ZGJjMzBmM2Q3MjI0OTU0MWE5ZDQ3ZTc2ZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8kKK61ZGxZj4CFdDpvVYOEJgRwU 8Vl0+KROlRnR4ERYpxC5uBqPFDzAheo1oYJo37xR21AkCIAchQXz/QRwfZPcWeIK xGy6Ea0KGKN+etHJQZ9I26U8etZHfZZKdxMc+IAO06cMYe1ac7N0hk/Jz3NR+alb IrueAUgwQYJhcYbBgIQgh5Qkt/vb5G6KSLRdD351hzKLd1e0vThXvxnlY0y28kDW EC6e3S8Zg2dbkV3r3VJKxVoPiy6yx0lu1vgOooPKNGTVXylz9LiUzZfnHk5OBHYY pFFtCo/untHXL62HHTAmpHQkjiTXsV11P706rvyctp89DnR0MUWVK1VeywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOFlND2VvU28MPPXIklUGp1H522RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzdkMjZi OC1mNzQ3LTRkOWEtOWFhMi02ZTJjMDUzZDk5OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvN2QyNmI4 LWY3NDctNGQ5YS05YWEyLTZlMmMwNTNkOTk5My8xLzRXVTBQWlc5VGJ3dzg5Y2lT VlFhblVmbmJaRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwjEyMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC9tjANBgkqhkiG9w0BAQsFAAOCAQEAjb8KFZawllXpWdlG29jZ7AkVAWIwlVRE TzZTH1Ypt6YPZyLwvCWojBycQXlc40zMQJw7/tGIUq95gOEOHyKn8WHNob7aMwjx c3fV6vWIs25aWlLoNFBLgIqK4S/ZItskgpDnXL3sqpeOg+GpypcyeY/HXnwxPsH9 fOYLqCfOAYuxlfSChmiqzx7Nd6XxO3Ybh5Si5kmFHAVznoHap3FDAJ6Kd+yQBdbv R2NIL5uGiFI2wiuucDkC6MCErQIYLQEKHLb4Pr7R0umXIyiOjGxFSHOQeHYl5jZA bqfXjPkiYmAjJksREJRmLUUWH7V/6TXjFQ4LLqc/7xNZ2LXlvYr7sQ== -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:55 2026 by rpki-client