This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer (raw, json) Hash identifier: 59bTH4qjtQw4J/XIBUtnnQ4mCBEY1lejvjQAXjeaaV4= Subject key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1590A0EC1946C4427EAE8FC59ABCE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50984 IP: 91.216.75.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:90:a0:ec:19:46:c4:42:7e:ae:8f:c5:9a:bc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f87521f15e0457288a9f196a8c8865c36922150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:0c:bd:0c:36:67:e0:d8:5e:c5:a7:61:44: 22:30:d9:6d:04:d0:0b:68:26:f5:66:af:50:3c:ad: 72:1f:5d:50:eb:5e:df:06:4b:a8:a7:68:b5:a8:ce: f0:c9:00:ec:ef:00:24:c4:91:34:38:d4:cb:fc:46: 3a:07:08:c6:18:f7:63:74:5d:6d:2f:d7:69:f2:87: a3:fc:1b:60:36:2a:0a:49:13:ed:cd:4b:5f:aa:71: 63:51:c4:a0:24:58:50:83:f5:13:3e:b1:26:f0:4b: 37:cf:1b:99:1a:39:13:56:6d:1a:b8:59:b8:0e:a3: ad:61:03:65:74:30:6a:a4:d2:f1:6f:42:a9:f7:9c: 77:f0:09:ee:ce:ca:2a:d0:db:e9:41:ed:6e:cf:6c: 12:10:9e:2e:bb:43:62:13:e5:f4:e3:0f:1f:86:08: f9:a6:70:ec:2f:b8:6b:75:24:4f:8d:63:ba:af:ff: 8a:6e:c2:f8:52:5e:c6:99:e2:6e:dc:0a:6e:30:b7: 4a:c0:39:4c:48:b4:24:8b:9e:4d:bd:8c:4c:6e:19: bb:7e:02:90:2f:5f:60:dd:8d:df:59:73:cb:c1:e1: 32:35:da:8a:45:ec:4f:33:5f:7d:c1:24:2b:8f:5d: 3f:52:0f:6d:7b:4d:5b:40:c9:0d:dc:49:83:46:46: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.75.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50984 Signature Algorithm: sha256WithRSAEncryption 95:fe:70:82:78:94:f1:dd:1d:bd:da:34:50:df:2b:84:f9:eb: b2:0d:ba:3a:7a:55:11:c7:e6:f5:48:08:a1:ab:df:fd:0c:87: af:a6:a5:65:4b:46:eb:8e:e0:19:3a:74:e5:4c:42:45:d7:57: b4:61:c3:22:b9:00:b1:38:bd:4f:af:37:14:32:59:01:d3:25: eb:1a:e0:a9:09:9a:a6:88:b7:11:61:89:27:82:7d:57:32:d4: 7e:72:c3:a3:de:be:24:25:8e:c7:74:1b:f7:84:c4:64:88:b4: 57:c1:cd:75:f9:9b:46:87:40:6e:33:51:51:ef:36:18:66:48: 1c:76:8b:23:1b:ad:7d:80:b1:83:22:e9:db:07:62:c1:75:ee: 33:5e:c3:55:e8:cd:d0:05:13:57:57:48:47:62:ac:b7:7d:97: 54:4f:05:fd:46:80:11:98:a8:e5:3c:d9:f9:9b:6c:7b:b6:44: 54:16:a1:93:e8:11:b5:c1:f7:4c:b9:a3:6c:4c:5b:1c:89:6a: 81:f8:3a:d9:bb:76:5b:7d:1a:85:a3:b6:ef:4a:95:b4:d1:90: 65:aa:ea:d7:23:1e:37:fd:0e:9b:74:4c:c2:18:ee:04:21:14: b8:7f:ae:ac:5a:39:cc:84:99:ba:71:70:c6:cf:f7:7b:01:0b: 63:39:f1:fc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FZCg7BlGxEJ+ro/FmrzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Zjg3NTIxZjE1ZTA0NTcyODhhOWYxOTZhOGM4ODY1YzM2OTIyMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv30MvQw2Z+DYXsWnYUQiMNltBNAL aCb1Zq9QPK1yH11Q617fBkuop2i1qM7wyQDs7wAkxJE0ONTL/EY6BwjGGPdjdF1t L9dp8oej/BtgNioKSRPtzUtfqnFjUcSgJFhQg/UTPrEm8Es3zxuZGjkTVm0auFm4 DqOtYQNldDBqpNLxb0Kp95x38Anuzsoq0NvpQe1uz2wSEJ4uu0NiE+X04w8fhgj5 pnDsL7hrdSRPjWO6r/+KbsL4Ul7GmeJu3ApuMLdKwDlMSLQki55NvYxMbhm7fgKQ L19g3Y3fWXPLweEyNdqKRexPM199wSQrj10/Ug9te01bQMkN3EmDRkZfYwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ+HUh8V4EVyiKnxlqjIhlw2kiFQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzY4MDU4 OS04NDcyLTQzZWItYjAzNC0yMTc2OWRlNGExYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvNjgwNTg5 LTg0NzItNDNlYi1iMDM0LTIxNzY5ZGU0YTFhOC8xL240ZFNIeFhnUlhLSXFmR1dx TWlHWERhU0lWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9hLMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDHKDANBgkqhkiG9w0BAQsFAAOCAQEAlf5wgniU8d0dvdo0UN8rhPnrsg26OnpV Ecfm9UgIoavf/QyHr6alZUtG647gGTp05UxCRddXtGHDIrkAsTi9T683FDJZAdMl 6xrgqQmapoi3EWGJJ4J9VzLUfnLDo96+JCWOx3Qb94TEZIi0V8HNdfmbRodAbjNR Ue82GGZIHHaLIxutfYCxgyLp2wdiwXXuM17DVejN0AUTV1dIR2Kst32XVE8F/UaA EZio5TzZ+Ztse7ZEVBahk+gRtcH3TLmjbExbHIlqgfg62bt2W30ahaO270qVtNGQ Zarq1yMeN/0Om3RMwhjuBCEUuH+urFo5zISZunFwxs/3ewELYznx/A== -----END CERTIFICATE-----Generated at Mon Jan 12 01:46:39 2026 by rpki-client