This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer (raw, json) Hash identifier: Vws3qXlp9xw/fvd+WAfemeJNvmKPQoJnlOSiNtS81zU= Subject key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB890B41A9872CC11697AEA30771DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204904 IP: 185.236.88.0/22 IP: 2a0d:a700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:89:0b:41:a9:87:2c:c1:16:97:ae:a3:07:71:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:49:cb:c1:71:1d:87:4a:48:3d:5c:45:e4: 03:6f:b3:01:f9:f4:41:1c:c7:75:a4:36:8c:15:2f: e3:60:5e:9e:a9:a8:84:4d:42:27:25:77:86:4e:dc: 94:1c:7d:b8:82:9b:20:4c:99:05:93:60:bd:7c:d2: 70:80:9c:c0:a0:eb:f1:5a:c8:9e:11:31:ae:49:5d: 8d:72:f9:d6:ed:78:01:e7:82:4b:5e:df:1f:22:bc: 6d:99:ce:e1:db:1f:52:27:e6:aa:b2:c4:73:f5:22: 1c:88:f4:94:4e:45:dd:67:c5:42:3c:d8:cb:a2:df: 36:47:8a:19:39:dc:a7:e9:70:b1:32:fd:47:56:7b: 85:70:9c:63:1b:3a:ab:0c:a8:d0:98:b7:ab:b5:55: 17:05:42:ee:38:1e:99:26:32:c3:ed:7b:00:3c:c1: c1:3e:30:3f:7b:a4:81:9c:8c:ad:29:7d:1e:4d:0e: bb:f3:a7:92:ee:3d:98:2c:fd:59:84:ff:3a:78:b4: 8c:5e:24:85:1d:5d:93:f5:98:8a:2c:a0:18:12:b2: e6:f3:99:ea:b9:d4:8a:0e:01:a2:89:05:fe:21:6a: 43:72:70:7f:71:44:d8:f8:4d:c3:eb:1d:ad:be:44: 02:cd:f4:04:c3:31:42:52:11:e4:a9:5f:b6:44:4d: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.88.0/22 IPv6: 2a0d:a700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204904 Signature Algorithm: sha256WithRSAEncryption 0c:43:15:ea:d0:fa:6c:40:87:02:d0:10:c0:1f:9c:e4:5e:33: d6:05:2c:0c:7e:35:9b:80:c3:4a:f9:77:25:71:e1:27:9f:1b: 48:90:b2:57:c2:a0:ce:18:1e:1d:af:48:97:66:22:49:c0:a7: 23:54:6c:d4:10:50:4e:ed:ac:e2:67:67:38:a1:22:5d:3d:28: f7:b7:a2:55:e0:8b:7e:a2:18:4b:0a:a8:45:3e:33:07:2c:29: a5:1e:dc:ab:d2:81:c7:b3:d8:25:48:86:fc:31:ca:db:49:d2: d2:6e:0a:71:10:59:c2:69:de:60:e7:9c:3b:95:d9:21:33:8c: 09:32:cd:6c:ef:b9:06:70:73:d1:3f:68:69:11:80:65:0c:d3: 1c:01:0a:2f:91:76:08:83:0d:03:32:40:14:e5:39:0e:ad:39: 90:b2:8c:2f:a1:c7:05:6a:f3:c4:71:ca:c4:67:9a:7d:eb:8b: a2:06:31:37:c9:00:7b:07:b1:6e:0d:58:de:ab:78:f2:a2:34: ca:b4:49:02:79:58:87:c9:cd:80:11:2e:52:97:f0:c7:cd:75: c5:85:aa:4a:8f:32:cc:ba:dd:d5:d5:d3:47:c3:77:2c:79:58: cc:41:e1:a6:5e:56:c5:f6:97:37:bb:0d:5c:15:a2:fb:33:19: 5e:6d:58:5d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt264kLQamHLMEWl66jB3HfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmFlZTVhNTkyYjNhN2VjNzNiNTQ5NDQyNDk5NmY3ZWJlYzY4ZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvRJy8FxHYdKSD1cReQDb7MB+fRB HMd1pDaMFS/jYF6eqaiETUInJXeGTtyUHH24gpsgTJkFk2C9fNJwgJzAoOvxWsie ETGuSV2NcvnW7XgB54JLXt8fIrxtmc7h2x9SJ+aqssRz9SIciPSUTkXdZ8VCPNjL ot82R4oZOdyn6XCxMv1HVnuFcJxjGzqrDKjQmLertVUXBULuOB6ZJjLD7XsAPMHB PjA/e6SBnIytKX0eTQ6786eS7j2YLP1ZhP86eLSMXiSFHV2T9ZiKLKAYErLm85nq udSKDgGiiQX+IWpDcnB/cUTY+E3D6x2tvkQCzfQEwzFCUhHkqV+2RE0UBwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOKu5aWSs6fsc7VJRCSZb36+xo+8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzE3ZTkz Ni0xNjMwLTRhODUtYTkzYi0zOTU1ZTA3ODYwOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMTdlOTM2 LTE2MzAtNGE4NS1hOTNiLTM5NTVlMDc4NjA5Mi8xLzRxN2xwWkt6cC14enRVbEVK Smx2ZnI3R2o3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuexYMA0EAgACMAcDBQMqDacAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgaDANBgkqhkiG9w0BAQsFAAOCAQEADEMV6tD6bECH AtAQwB+c5F4z1gUsDH41m4DDSvl3JXHhJ58bSJCyV8KgzhgeHa9Il2YiScCnI1Rs 1BBQTu2s4mdnOKEiXT0o97eiVeCLfqIYSwqoRT4zBywppR7cq9KBx7PYJUiG/DHK 20nS0m4KcRBZwmneYOecO5XZITOMCTLNbO+5BnBz0T9oaRGAZQzTHAEKL5F2CIMN AzJAFOU5Dq05kLKML6HHBWrzxHHKxGeafeuLogYxN8kAewexbg1Y3qt48qI0yrRJ AnlYh8nNgBEuUpfwx811xYWqSo8yzLrd1dXTR8N3LHlYzEHhpl5WxfaXN7sNXBWi +zMZXm1YXQ== -----END CERTIFICATE-----Generated at Mon Jan 12 14:58:36 2026 by rpki-client