This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer File: g4heOKx3ysBEgptTyzslq-Yen2Q.cer (raw, json) Hash identifier: 5B5HXZy6dXfrKdDMo0esVO++ftht2acEInDcRgXMgeY= Subject key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB314AA6B2F2334AD77C789427EF80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.142.129.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:31:4a:a6:b2:f2:33:4a:d7:7c:78:94:27:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:06:4b:89:95:28:39:0f:72:95:95:b3:f4: b5:39:d5:66:df:30:07:7e:46:ea:53:c1:79:be:c3: cd:80:84:b3:58:53:4b:1a:08:63:09:26:87:2e:a5: 25:a4:ac:77:26:2a:68:5b:54:7d:d2:05:89:72:ef: 5f:8c:f5:e3:31:c5:5a:02:2c:6b:c6:50:58:85:d7: 41:76:45:0c:fb:9d:26:9a:b8:fd:2b:db:01:ca:91: 78:bb:dd:0e:c1:a2:66:92:fc:74:21:19:b6:51:c1: 01:ee:9f:04:cf:1a:3d:6f:cb:d5:8f:77:25:00:d1: 0e:01:54:44:22:bb:59:88:0b:d9:c5:bf:28:f9:1b: da:c7:46:65:cc:34:31:90:42:5c:7a:9f:19:37:b3: 4d:d5:6b:31:25:25:9f:e0:6a:74:6f:5d:ee:31:cd: 22:f5:7b:ee:00:35:4a:54:75:b9:ed:1b:9e:0f:2e: 7e:26:80:f0:ae:ef:5a:e5:98:af:15:19:3c:fd:0d: 6e:98:a9:6a:56:72:e0:50:11:26:54:c4:31:cb:f8: a1:03:c2:bc:45:7d:0e:b5:eb:77:25:2f:b8:62:a0: e3:87:df:3a:59:02:5c:f8:1e:40:b4:45:ff:2a:4b: 61:e2:75:78:5d:92:3f:66:02:e4:db:ea:9c:cf:d3: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.129.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:49:16:56:cb:3c:9e:6a:b4:c4:da:15:2f:a0:3e:6b:aa:42: f1:04:f3:de:54:4e:e5:87:35:3f:74:62:86:47:45:3b:06:39: e3:ac:32:4b:10:22:9b:e0:0a:f3:44:97:86:f5:2e:a2:ab:b0: b7:a9:0a:13:11:c2:2d:e5:fc:a6:e8:d4:11:14:a5:d7:ba:2b: a8:2d:2f:2b:47:61:76:b7:1d:76:af:8a:45:ce:31:62:2d:2f: 88:b1:bd:ef:82:df:bc:6c:a9:f0:13:40:41:a7:a9:f5:dd:cd: c5:84:2f:28:e3:e8:85:ba:6b:7e:e5:14:24:67:4b:60:b6:ce: 25:62:fc:f3:89:1d:65:3a:f9:5b:27:d1:ae:ac:98:27:76:0a: 7c:61:4b:79:13:47:c8:be:0d:4a:58:73:1e:f6:5e:51:21:bd: 65:60:29:c8:99:31:f6:0e:1d:38:22:d3:2d:68:45:40:3b:97: 76:25:7f:38:fc:47:21:e7:48:60:90:21:1d:8b:87:00:87:12: 90:a3:86:c6:2a:80:56:33:e4:2f:b7:74:b0:36:b6:4f:01:77: 5d:cc:79:26:66:51:84:0c:2d:c1:77:e7:a2:6e:fe:82:e2:c8: e9:0c:0a:5c:15:da:33:8a:db:b8:67:18:20:42:57:fb:3d:33: 70:1f:7c:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9yzFKprLyM0rXfHiUJ++AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzg4NWUzOGFjNzdjYWMwNDQ4MjliNTNjYjNiMjVhYmU2MWU5ZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUsGS4mVKDkPcpWVs/S1OdVm3zAH fkbqU8F5vsPNgISzWFNLGghjCSaHLqUlpKx3JipoW1R90gWJcu9fjPXjMcVaAixr xlBYhddBdkUM+50mmrj9K9sBypF4u90OwaJmkvx0IRm2UcEB7p8Ezxo9b8vVj3cl ANEOAVREIrtZiAvZxb8o+Rvax0ZlzDQxkEJcep8ZN7NN1WsxJSWf4Gp0b13uMc0i 9XvuADVKVHW57RueDy5+JoDwru9a5ZivFRk8/Q1umKlqVnLgUBEmVMQxy/ihA8K8 RX0Otet3JS+4YqDjh986WQJc+B5AtEX/Kkth4nV4XZI/ZgLk2+qcz9Ni8wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIOIXjisd8rARIKbU8s7JavmHp9kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzQ2MzY4 Ni1jZTQ4LTQ4N2MtYmMzZC1hMmY1OWVhZTg2ZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvNDYzNjg2 LWNlNDgtNDg3Yy1iYzNkLWEyZjU5ZWFlODZkMC8xL2c0aGVPS3gzeXNCRWdwdFR5 enNscS1ZZW4yUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuY6BMA0GCSqGSIb3DQEBCwUAA4IBAQBfSRZW yzyearTE2hUvoD5rqkLxBPPeVE7lhzU/dGKGR0U7BjnjrDJLECKb4ArzRJeG9S6i q7C3qQoTEcIt5fym6NQRFKXXuiuoLS8rR2F2tx12r4pFzjFiLS+Isb3vgt+8bKnw E0BBp6n13c3FhC8o4+iFumt+5RQkZ0tgts4lYvzziR1lOvlbJ9GurJgndgp8YUt5 E0fIvg1KWHMe9l5RIb1lYCnImTH2Dh04ItMtaEVAO5d2JX84/Ech50hgkCEdi4cA hxKQo4bGKoBWM+Qvt3SwNrZPAXddzHkmZlGEDC3Bd+eibv6C4sjpDApcFdozitu4 ZxggQlf7PTNwH3wq -----END CERTIFICATE-----Generated at Sun Jan 11 19:19:07 2026 by rpki-client