This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer (raw, json) Hash identifier: 0d6ithzStNelr5BgdaLQEQQwlkpJxY6MBE4H8vV8Nj4= Subject key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355B5F9484E80750319551F4A78EC6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212009 IP: 45.9.76.0/22 IP: 193.246.151.0 -- 193.246.152.255 IP: 193.246.166.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5b:5f:94:84:e8:07:50:31:95:51:f4:a7:8e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:16:59:2c:de:c2:a7:a0:92:eb:a2:1a:b3: d0:c6:aa:18:fb:46:c1:9d:9b:0a:42:42:91:0c:bf: 00:01:e8:fa:25:60:e1:11:2c:02:e6:90:fa:37:a5: 1c:48:fd:42:55:21:cc:6f:0e:00:99:f3:b3:52:5c: ef:a2:a2:f5:ce:b8:a2:1b:9d:a8:c5:ab:2d:52:90: 5b:2c:40:70:c7:cb:e2:98:21:a3:0c:b4:99:58:31: 06:65:50:11:fd:ff:ef:84:44:38:f6:03:12:9c:32: 68:f1:63:30:be:2e:de:92:da:7d:23:aa:67:e5:f9: 30:2b:91:e3:9e:58:b3:10:66:d0:fb:51:3a:16:15: 74:74:b4:ad:8f:50:7b:53:4d:15:2a:8a:30:22:5b: 22:6e:fb:19:bb:69:85:1b:d9:02:85:18:b3:74:60: 96:0a:df:e4:23:24:40:7a:d1:b7:00:0a:d2:d3:af: ff:4f:a0:81:71:b2:b9:38:b8:50:4d:0e:56:be:cb: 18:5d:5d:01:6c:ac:8a:b1:82:78:d3:25:c8:b6:4c: 6b:a7:e2:87:23:6f:9f:23:79:75:86:a0:a9:a7:bf: 2f:20:fc:fc:4c:32:e9:af:5a:9b:3b:84:4e:1a:9c: f7:a4:71:c2:94:04:33:e6:65:41:ad:a5:4d:87:8f: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.76.0/22 193.246.151.0-193.246.152.255 193.246.166.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212009 Signature Algorithm: sha256WithRSAEncryption 9c:fb:69:72:fc:42:7b:06:8b:d1:ec:90:4f:a5:ce:bb:77:8a: 29:50:e9:b5:be:32:e6:d3:fd:8c:63:0f:fc:29:4c:43:3f:7e: 62:04:eb:9e:f8:f3:c8:0f:22:cf:38:49:a4:55:27:52:5a:38: 6c:9e:2d:56:4b:f5:da:3a:61:6d:8f:ca:19:b7:ac:62:9b:0b: f0:c8:79:12:0c:72:fd:01:68:c1:88:ff:9c:8c:d0:c7:c4:0a: aa:a7:5a:00:94:23:4a:80:10:fb:63:e2:2c:f0:c1:98:01:2b: c7:33:38:6e:2e:3f:ca:28:ec:3e:c3:3a:9f:90:17:a5:00:17: fd:ab:da:a6:48:f1:d0:25:24:11:ec:20:23:a4:03:cd:85:2f: 44:57:4d:55:5d:b0:ef:4a:1a:7b:ff:23:14:07:60:05:fc:a2: 8c:86:eb:18:dd:d8:fb:93:eb:72:ce:22:bd:78:ea:9a:9a:ed: e7:f1:0a:8b:35:eb:d3:9f:2c:bc:0b:97:39:d1:6c:06:45:4a: f2:87:6f:17:15:0f:2e:c7:ef:db:3e:a7:ab:f0:e2:23:97:eb: 30:ec:63:c6:65:21:52:ef:7e:b2:33:aa:36:af:2c:ea:2b:3f: 66:e7:e9:b1:ec:15:27:6a:3a:97:4c:03:f5:e2:d6:dc:11:29: de:14:5f:9b -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt4NVtflIToB1AxlVH0p47GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjg0ZTNkMmYxYTIxYzgyYmJiM2Q2NmY3NmYwYmQ5MzMzNTEzYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB8WWSzewqegkuuiGrPQxqoY+0bB nZsKQkKRDL8AAej6JWDhESwC5pD6N6UcSP1CVSHMbw4AmfOzUlzvoqL1zriiG52o xastUpBbLEBwx8vimCGjDLSZWDEGZVAR/f/vhEQ49gMSnDJo8WMwvi7ektp9I6pn 5fkwK5HjnlizEGbQ+1E6FhV0dLStj1B7U00VKoowIlsibvsZu2mFG9kChRizdGCW Ct/kIyRAetG3AArS06//T6CBcbK5OLhQTQ5WvssYXV0BbKyKsYJ40yXItkxrp+KH I2+fI3l1hqCpp78vIPz8TDLpr1qbO4ROGpz3pHHClAQz5mVBraVNh49xlwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFOKE49LxohyCu7PWb3bwvZMzUTyaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzdjOWJi Ny0yNjhhLTQzNjItYmQwOC05MDFhMzczZGYwODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvN2M5YmI3 LTI2OGEtNDM2Mi1iZDA4LTkwMWEzNzNkZjA4MC8xLzRvVGowdkdpSElLN3M5WnZk dkM5a3pOUlBKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjAgBAIAATAaAwQCLQlMMAwDBADB9pcDBADB9pgDBADB9qYwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAzwpMA0GCSqGSIb3DQEBCwUAA4IBAQCc+2ly /EJ7BovR7JBPpc67d4opUOm1vjLm0/2MYw/8KUxDP35iBOue+PPIDyLPOEmkVSdS Wjhsni1WS/XaOmFtj8oZt6ximwvwyHkSDHL9AWjBiP+cjNDHxAqqp1oAlCNKgBD7 Y+Is8MGYASvHMzhuLj/KKOw+wzqfkBelABf9q9qmSPHQJSQR7CAjpAPNhS9EV01V XbDvShp7/yMUB2AF/KKMhusY3dj7k+tyziK9eOqamu3n8QqLNevTnyy8C5c50WwG RUryh28XFQ8ux+/bPqer8OIjl+sw7GPGZSFS736yM6o2ryzqKz9m5+mx7BUnajqX TAP14tbcESneFF+b -----END CERTIFICATE-----Generated at Sun Jan 11 14:33:49 2026 by rpki-client