This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer (raw, json) Hash identifier: R9kTg8jG8xyQY5E91eWzyAlM+a9fmgl6a9yA5zHgiUw= Subject key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910DC3335E51B4875206AE399A50A25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197745 IP: 185.2.0.0/22 IP: 2a00:90c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:dc:33:35:e5:1b:48:75:20:6a:e3:99:a5:0a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:6d:8a:a1:0d:e1:aa:ba:cf:b7:43:97:0a: 1e:e8:bd:e9:d5:c2:16:d3:b3:49:13:63:f8:05:87: f2:15:a1:77:6e:f8:5c:7e:bc:96:0b:36:26:8c:82: 93:9d:9a:ad:34:ac:31:6d:3f:f9:9c:eb:b4:a8:61: 25:5d:dd:a2:f0:ca:58:3a:d8:c0:90:af:78:d0:65: 5f:cc:3f:fd:ac:9b:a2:fb:84:cf:dd:16:de:dd:a8: 6e:fc:ff:54:d8:dc:6f:01:3a:38:a7:32:ee:45:09: 91:cb:3c:9b:fe:3b:af:c4:74:1f:9f:50:09:39:11: e4:1b:c0:13:21:de:6e:92:13:d8:1c:76:5e:91:05: 79:7b:80:c3:be:6e:ce:98:a1:b3:af:83:e8:ac:e6: 60:35:80:8b:fa:74:25:bf:1b:6c:d8:92:3d:b5:9f: fa:d4:07:e2:80:d1:f6:ce:01:2f:d8:a7:99:e4:77: d7:88:e2:0b:a9:d2:99:7f:cf:40:99:c2:0b:ea:d5: f4:d3:4f:9c:8e:b5:fd:2d:8b:2e:d1:37:d2:02:a5: 84:b7:2f:a3:42:b1:c8:95:20:f1:f2:85:e1:67:75: 99:62:ea:b9:26:0b:02:88:c7:ca:11:94:d2:91:55: 71:61:be:6d:1d:da:a0:2c:a4:63:fc:a9:8c:9d:db: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.2.0.0/22 IPv6: 2a00:90c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197745 Signature Algorithm: sha256WithRSAEncryption 1f:52:69:38:49:ea:83:a9:75:28:cf:ff:46:ea:51:66:41:f6: 89:79:be:3f:8a:6f:ec:a3:7a:d3:3f:bc:3d:e9:c8:16:9d:a1: bc:f2:8c:23:84:f3:91:4c:86:c6:a8:b5:cf:97:fc:d8:2c:1c: a2:44:76:72:61:2a:b1:87:79:11:19:71:6e:56:4f:3a:da:24: c9:c2:cb:e7:68:ec:75:f8:6d:a8:4b:6b:19:f1:51:5d:fa:aa: fd:dd:dd:49:94:81:3c:d1:e2:80:7a:ef:fa:be:0d:37:86:94: c4:90:a0:b8:cc:3e:2a:0f:a7:df:c1:e7:cf:90:ff:0b:b3:d7: fd:bd:f8:a9:02:23:04:79:7d:43:98:95:5c:ba:e4:be:61:47: ff:1a:c3:be:d5:04:60:44:c8:89:24:9b:8d:90:53:c7:5e:84: b4:2e:ec:60:d0:b9:e2:f8:17:6a:c3:90:c9:5d:4e:41:d6:be: c7:dc:8f:bc:f0:e1:17:2b:dd:54:45:15:50:38:63:19:81:ed: 21:0f:d8:f2:34:f4:9c:f9:f7:b6:11:e0:f4:88:14:c7:79:51: 94:5f:fc:08:ee:05:bb:d9:d2:6b:97:64:f1:cb:7d:76:3a:1a: a6:04:3c:b5:cd:cf:12:31:40:cd:30:a4:f0:42:8d:d7:09:03: 6b:58:54:8b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ENwzNeUbSHUgauOZpQolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjllZDlhOWQxYjZiNTM4M2ViZjk0NmQ1ZmM1NDk4MDYxMjU2M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9ZtiqEN4aq6z7dDlwoe6L3p1cIW 07NJE2P4BYfyFaF3bvhcfryWCzYmjIKTnZqtNKwxbT/5nOu0qGElXd2i8MpYOtjA kK940GVfzD/9rJui+4TP3Rbe3ahu/P9U2NxvATo4pzLuRQmRyzyb/juvxHQfn1AJ ORHkG8ATId5ukhPYHHZekQV5e4DDvm7OmKGzr4PorOZgNYCL+nQlvxts2JI9tZ/6 1AfigNH2zgEv2KeZ5HfXiOILqdKZf89AmcIL6tX000+cjrX9LYsu0TfSAqWEty+j QrHIlSDx8oXhZ3WZYuq5JgsCiMfKEZTSkVVxYb5tHdqgLKRj/KmMnduMaQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOKe2anRtrU4Pr+UbV/FSYBhJWPqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzM4ZWM1 Yi0zMzZkLTRhMWMtYTg0YS1mNmM2ODU5YjMwZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMzhlYzVi LTMzNmQtNGExYy1hODRhLWY2YzY4NTliMzBmMC8xLzRwN1pxZEcydFRnLXY1UnRY OFZKZ0dFbFktby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQIAMA0EAgACMAcDBQMqAJDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMEcTANBgkqhkiG9w0BAQsFAAOCAQEAH1JpOEnqg6l1 KM//RupRZkH2iXm+P4pv7KN60z+8PenIFp2hvPKMI4TzkUyGxqi1z5f82CwcokR2 cmEqsYd5ERlxblZPOtokycLL52jsdfhtqEtrGfFRXfqq/d3dSZSBPNHigHrv+r4N N4aUxJCguMw+Kg+n38Hnz5D/C7PX/b34qQIjBHl9Q5iVXLrkvmFH/xrDvtUEYETI iSSbjZBTx16EtC7sYNC54vgXasOQyV1OQda+x9yPvPDhFyvdVEUVUDhjGYHtIQ/Y 8jT0nPn3thHg9IgUx3lRlF/8CO4Fu9nSa5dk8ct9djoapgQ8tc3PEjFAzTCk8EKN 1wkDa1hUiw== -----END CERTIFICATE-----Generated at Thu Jan 1 18:00:47 2026 by rpki-client