This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer File: 4eHrAgq2pUL2C1hXaYctnwYXryY.cer (raw, json) Hash identifier: J7z0FpRT2Lx+a2SuyuUFJj4njb++XlEpM6h12qUJJYw= Subject key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83064CF98C3B8C228B2506EC02BEF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209550 IP: 185.239.100.0/22 IP: 2a0c:5380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:06:4c:f9:8c:3b:8c:22:8b:25:06:ec:02:be:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:2c:6e:c5:c8:45:33:64:8d:d7:69:f4:f3: 58:e6:c6:4c:2e:25:5d:3c:69:de:c3:07:e7:1b:48: d4:d7:91:3c:01:19:78:1d:b7:34:72:ce:33:53:61: 04:c1:ba:76:99:98:95:31:11:5c:f2:ab:44:a6:52: a9:5e:06:8d:54:62:20:74:54:18:1d:ef:3f:e7:45: 55:4f:d5:80:ee:cf:a7:2c:8f:b2:22:9d:45:39:89: d7:2a:95:54:64:bc:d5:69:7a:25:3f:f3:9a:83:5e: 41:89:42:d1:0a:39:28:07:54:ac:18:aa:da:34:49: 29:37:65:d0:53:70:04:4d:6c:57:e8:ad:41:4a:d5: 07:28:fc:c4:2d:b4:14:18:80:85:8a:52:12:71:ba: ad:6e:47:68:ae:fb:b1:48:76:55:d4:18:33:01:a6: 77:7e:fe:50:96:47:20:54:03:50:2d:14:bb:51:e0: c5:b9:0f:cc:b8:fd:aa:9b:18:c5:fe:f6:e4:27:b3: e7:75:0d:12:5b:ab:82:52:42:fa:3b:97:59:b1:34: d2:0f:07:41:64:e3:65:ff:e1:5d:81:de:06:23:a8: 24:2c:69:15:02:ba:a8:83:32:ee:00:e4:94:d3:57: 5e:e5:2d:e8:16:65:f7:9f:fd:d4:0b:81:6d:5c:28: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.100.0/22 IPv6: 2a0c:5380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209550 Signature Algorithm: sha256WithRSAEncryption 39:2c:31:7d:2f:9b:84:93:4c:64:5b:75:e7:57:60:45:ab:ad: 71:0e:eb:7e:09:7e:83:fa:79:1f:cc:03:c8:89:3a:c5:93:73: 10:4f:de:8a:5d:b4:e7:10:e6:2b:d9:1a:8c:ab:6d:90:49:0c: ae:dd:54:6a:f1:36:05:5f:84:82:90:e8:e0:d9:03:c9:b4:0c: ff:66:79:db:c9:21:1a:50:ff:5e:77:9a:69:f7:57:9c:73:eb: 94:86:c3:b6:d2:19:1d:e0:94:0b:70:b7:3c:a0:d3:c2:a5:e0: 10:9b:7e:45:a1:47:12:07:ef:56:6e:f1:5b:41:fb:23:e9:ad: 52:48:77:b4:21:a0:a6:27:75:d3:d1:6a:ef:e3:da:24:8e:8b: 1c:77:3e:10:a5:b8:df:19:c2:72:c3:f2:18:50:02:6d:39:bc: c6:e9:01:c6:f0:e2:35:80:34:b6:66:90:39:bc:df:23:f5:b6: be:e4:6b:2c:e5:6a:c6:a6:d1:59:33:55:97:6f:d4:3a:51:a5: 87:42:1c:6a:4e:61:10:4c:30:1f:76:3e:fb:2b:b0:c1:1c:4e: 74:4a:2d:6f:69:87:f3:b9:36:ae:7d:ad:59:20:3e:fa:2e:a0: c1:f8:69:65:dd:22:f3:42:eb:2f:18:d8:2e:37:f3:33:28:b1: 4c:1b:9d:ee -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gwZM+Yw7jCKLJQbsAr71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWUxZWIwMjBhYjZhNTQyZjYwYjU4NTc2OTg3MmQ5ZjA2MTdhZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnosbsXIRTNkjddp9PNY5sZMLiVd PGnewwfnG0jU15E8ARl4Hbc0cs4zU2EEwbp2mZiVMRFc8qtEplKpXgaNVGIgdFQY He8/50VVT9WA7s+nLI+yIp1FOYnXKpVUZLzVaXolP/Oag15BiULRCjkoB1SsGKra NEkpN2XQU3AETWxX6K1BStUHKPzELbQUGICFilIScbqtbkdorvuxSHZV1BgzAaZ3 fv5QlkcgVANQLRS7UeDFuQ/MuP2qmxjF/vbkJ7PndQ0SW6uCUkL6O5dZsTTSDwdB ZONl/+Fdgd4GI6gkLGkVArqogzLuAOSU01de5S3oFmX3n/3UC4FtXCiQWwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOHh6wIKtqVC9gtYV2mHLZ8GF68mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2VlZjM2 OS02YjEyLTQ3ODYtOTdlMC1jODM1ZTVkYWFmMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvZWVmMzY5 LTZiMTItNDc4Ni05N2UwLWM4MzVlNWRhYWYyNC8xLzRlSHJBZ3EycFVMMkMxaFhh WWN0bndZWHJ5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCue9kMA0EAgACMAcDBQMqDFOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMyjjANBgkqhkiG9w0BAQsFAAOCAQEAOSwxfS+bhJNM ZFt151dgRautcQ7rfgl+g/p5H8wDyIk6xZNzEE/eil205xDmK9kajKttkEkMrt1U avE2BV+EgpDo4NkDybQM/2Z528khGlD/XneaafdXnHPrlIbDttIZHeCUC3C3PKDT wqXgEJt+RaFHEgfvVm7xW0H7I+mtUkh3tCGgpid109Fq7+PaJI6LHHc+EKW43xnC csPyGFACbTm8xukBxvDiNYA0tmaQObzfI/W2vuRrLOVqxqbRWTNVl2/UOlGlh0Ic ak5hEEwwH3Y++yuwwRxOdEotb2mH87k2rn2tWSA++i6gwfhpZd0i80LrLxjYLjfz MyixTBud7g== -----END CERTIFICATE-----Generated at Mon Jan 12 17:19:15 2026 by rpki-client