This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer File: lH4-X564CJtcqU845lF8-8WyAGM.cer (raw, json) Hash identifier: OUYiHgPrd0fqtuPa7cj1SzxMwT57C56e7TRoCqihHgE= Subject key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E83ED95674009E5814E706F3E0CE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204719 AS: 209560 IP: 91.132.100.0/24 IP: 141.98.64.0/22 IP: 2a13:5c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:83:ed:95:67:40:09:e5:81:4e:70:6f:3e:0c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:d5:2a:99:3c:c6:a7:12:98:1c:05:5c:ab: b0:13:13:e7:8c:73:50:6f:1b:8c:c2:db:85:6a:73: bc:f9:07:29:39:f4:eb:b1:ba:fd:78:bf:60:19:53: 71:ef:8a:3c:bf:c9:d7:31:76:7a:17:fa:c3:e7:86: 58:f4:6d:d6:9d:d7:c4:83:28:f0:60:00:d8:3d:28: 40:07:e4:52:73:d8:f3:e4:d3:0a:9b:83:51:70:89: a0:c5:86:86:2a:41:03:0a:a4:5d:1d:47:d0:11:6b: 93:42:d9:29:2d:2b:d4:62:39:b6:aa:fd:e2:c0:31: 54:3a:97:e5:7a:7b:e0:ad:ae:6e:0c:11:f9:d4:29: 73:5d:53:46:f8:db:ac:fe:e0:8e:13:f8:e5:07:35: 77:60:30:c0:2c:30:71:a4:cc:a6:07:06:52:a1:d4: e7:0c:a2:21:92:9b:ac:fb:97:c3:6b:9d:2f:f4:a6: b7:00:2d:2f:e6:3a:97:14:49:bd:fd:7a:38:0c:e8: 3c:86:af:d3:fe:50:35:cd:3b:d4:42:3e:9f:7b:c1: 8b:f7:68:97:3d:2d:6d:b5:f2:19:1e:4e:bf:89:5b: e4:94:68:e9:ee:c2:55:85:12:27:e4:02:32:c7:64: 32:1e:58:c2:c4:ca:22:4b:af:c1:7f:4c:55:82:a0: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.100.0/24 141.98.64.0/22 IPv6: 2a13:5c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204719 209560 Signature Algorithm: sha256WithRSAEncryption a6:25:fc:0b:09:30:3c:7e:95:48:f9:3f:85:ac:19:82:ba:0e: 33:4e:2b:92:25:c8:00:4d:85:31:4f:16:2f:51:1c:5d:a4:53: b4:dd:05:7b:63:00:0e:b7:66:e0:f7:de:ca:6c:70:0a:ea:7f: 0b:a4:bd:6b:59:a4:c0:6a:e3:65:d4:04:0e:9f:68:9b:4b:23: 00:d6:96:14:aa:7f:dd:b5:26:c5:8e:ea:6f:82:c4:2b:24:aa: 8c:1e:c2:72:d1:ad:94:8c:e4:5e:cb:21:28:c5:bd:6a:60:a8: 91:c8:5d:dc:6e:cc:3d:89:c8:ac:b8:20:65:97:56:03:7c:c9: 10:cc:43:41:71:9b:f0:60:fd:24:d2:d6:b0:a2:5f:b7:e6:1d: 34:aa:bf:d9:a7:e6:29:f1:c1:3a:e6:cc:4d:12:06:86:60:1e: 2c:9c:0d:66:bc:91:c4:4d:66:07:a4:fc:4e:33:5e:22:b8:3b: 8a:98:f7:e3:5b:7b:95:60:1e:cd:7d:6f:65:39:bc:21:ea:c8: 7e:cb:f3:b6:e7:29:03:23:4d:f2:2d:a1:b5:e3:dd:a2:59:44: 0a:18:69:f8:6d:88:8b:60:8f:cc:19:60:d6:2d:ad:f5:46:09: 45:ab:e7:48:a4:aa:fc:81:bf:80:92:31:d9:77:66:ab:25:03: c1:80:b6:d0 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt5foPtlWdACeWBTnBvPgzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDdlM2U1ZjllYjgwODliNWNhOTRmMzhlNjUxN2NmYmM1YjIwMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoijVKpk8xqcSmBwFXKuwExPnjHNQ bxuMwtuFanO8+QcpOfTrsbr9eL9gGVNx74o8v8nXMXZ6F/rD54ZY9G3WndfEgyjw YADYPShAB+RSc9jz5NMKm4NRcImgxYaGKkEDCqRdHUfQEWuTQtkpLSvUYjm2qv3i wDFUOpflenvgra5uDBH51ClzXVNG+Nus/uCOE/jlBzV3YDDALDBxpMymBwZSodTn DKIhkpus+5fDa50v9Ka3AC0v5jqXFEm9/Xo4DOg8hq/T/lA1zTvUQj6fe8GL92iX PS1ttfIZHk6/iVvklGjp7sJVhRIn5AIyx2QyHljCxMoiS6/Bf0xVgqCSxQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFJR+Pl+euAibXKlPOOZRfPvFsgBjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzZjNGMy Ni1lMzRhLTQzMzYtOTBjOC1mOTBhZTk5NjY0MjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNmM0YzI2 LWUzNGEtNDMzNi05MGM4LWY5MGFlOTk2NjQyOC8xL2xINC1YNTY0Q0p0Y3FVODQ1 bEY4LThXeUFHTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW4RkAwQCjWJAMA0EAgACMAcDBQMqE1wAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMfrwIDAzKYMA0GCSqGSIb3DQEBCwUAA4IB AQCmJfwLCTA8fpVI+T+FrBmCug4zTiuSJcgATYUxTxYvURxdpFO03QV7YwAOt2bg 997KbHAK6n8LpL1rWaTAauNl1AQOn2ibSyMA1pYUqn/dtSbFjupvgsQrJKqMHsJy 0a2UjOReyyEoxb1qYKiRyF3cbsw9icisuCBll1YDfMkQzENBcZvwYP0k0tawol+3 5h00qr/Zp+Yp8cE65sxNEgaGYB4snA1mvJHETWYHpPxOM14iuDuKmPfjW3uVYB7N fW9lObwh6sh+y/O25ykDI03yLaG1492iWUQKGGn4bYiLYI/MGWDWLa31RglFq+dI pKr8gb+AkjHZd2arJQPBgLbQ -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:12 2026 by rpki-client