This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer File: t4skH3ysfR5SHigxR-xhdjxCKqc.cer (raw, json) Hash identifier: +huZIsjXEi17uRK5BrI3id87zvPABngjtDO820fm2s0= Subject key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C694CADA4E6A56DD0B33F6959B8A2B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206130 IP: 185.110.112.0/22 IP: 2a06:55c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:94:ca:da:4e:6a:56:dd:0b:33:f6:95:9b:8a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b78b241f7cac7d1e521e283147ec61763c422aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:3c:15:e3:ee:5a:5c:63:97:71:ef:87:9f: 79:ef:61:dc:c2:58:92:df:bf:f5:6a:30:4c:40:1a: 45:63:61:3a:dd:7b:bc:61:a4:18:9e:5b:8e:c9:e9: 02:c8:1f:b4:67:8f:d0:2f:ce:ab:d2:55:50:d9:d1: 98:b0:57:1b:4b:39:e1:3b:74:2c:79:b7:c6:06:9c: ce:9c:db:41:45:e1:96:8f:df:e1:4e:8e:29:27:32: a4:6a:61:04:4b:8d:ac:4a:61:66:9e:bd:bd:31:06: c7:7e:ae:57:16:3c:89:a1:51:7a:cd:61:70:52:9f: 0e:19:a5:25:34:f3:62:05:17:37:4f:96:3f:f1:b8: e9:40:ca:46:12:74:4e:a0:8c:c5:10:37:d5:4e:94: a6:51:14:ea:49:24:83:95:b1:75:de:f5:98:18:e8: 0d:b4:e1:74:1a:d3:a3:03:b5:1d:20:13:7a:52:3f: de:83:bb:33:4c:ff:9c:f3:ea:64:8b:b9:95:3d:b0: b7:5a:3b:52:41:49:1c:a8:58:89:b6:b5:75:0c:5d: 5a:d2:35:f3:7e:4f:02:c6:a7:05:ad:04:af:aa:13: 55:69:46:e8:8b:18:73:a2:10:60:aa:29:2b:09:31: 7a:87:46:49:06:21:09:a1:36:60:42:37:4a:e0:9f: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.112.0/22 IPv6: 2a06:55c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206130 Signature Algorithm: sha256WithRSAEncryption 84:3d:74:f9:1e:08:fb:e6:ae:a0:b8:1b:dc:b3:9d:09:5d:07: 92:79:bf:dd:62:86:68:3b:75:d6:2e:c8:ef:42:ad:c6:7b:71: 10:9c:f0:66:c9:c5:96:b3:55:c8:fb:a9:d2:0e:30:b3:03:71: 69:85:e6:ec:93:06:32:ff:a6:22:ba:48:6d:ce:ef:fd:cb:1f: 73:5c:04:21:ae:05:b7:52:23:39:52:d9:96:69:b0:da:60:f2: 46:e1:42:c3:29:d4:ce:8b:e8:8c:4e:cd:b2:7a:ea:c9:fd:23: 89:ac:8b:00:68:b1:3c:18:88:db:55:77:60:90:ea:48:26:75: 9c:f9:14:0a:bf:c5:99:4a:3e:07:23:d2:0f:ab:b7:f7:1a:c8: a7:ff:f8:a1:a5:85:f5:69:00:10:bd:62:37:5b:e9:7c:f3:c6: 7d:ca:16:f0:d6:cb:8e:a2:a3:99:87:ed:fc:12:cc:24:ad:cd: 0d:4c:d1:72:e7:0a:91:3b:b9:6c:6a:f4:73:5b:05:dd:68:a4: ed:59:3d:31:09:cf:5b:92:82:80:2e:93:0e:03:bb:b1:19:d2: 5f:07:af:a5:ba:c8:0e:2a:02:04:54:10:32:f9:2d:06:80:00: da:4f:e0:64:b4:3b:e5:e3:90:43:4d:cb:d4:96:1d:a4:1c:5d: 99:95:08:6c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xpTK2k5qVt0LM/aVm4orMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzhiMjQxZjdjYWM3ZDFlNTIxZTI4MzE0N2VjNjE3NjNjNDIyYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz48FePuWlxjl3Hvh59572HcwliS 37/1ajBMQBpFY2E63Xu8YaQYnluOyekCyB+0Z4/QL86r0lVQ2dGYsFcbSznhO3Qs ebfGBpzOnNtBReGWj9/hTo4pJzKkamEES42sSmFmnr29MQbHfq5XFjyJoVF6zWFw Up8OGaUlNPNiBRc3T5Y/8bjpQMpGEnROoIzFEDfVTpSmURTqSSSDlbF13vWYGOgN tOF0GtOjA7UdIBN6Uj/eg7szTP+c8+pki7mVPbC3WjtSQUkcqFiJtrV1DF1a0jXz fk8CxqcFrQSvqhNVaUboixhzohBgqikrCTF6h0ZJBiEJoTZgQjdK4J+N0wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLeLJB98rH0eUh4oMUfsYXY8QiqnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2QwMzA1 Zi0yYjBkLTQ0ODAtOGQ5Mi1jMGQ5NzNjYTI1ZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvZDAzMDVm LTJiMGQtNDQ4MC04ZDkyLWMwZDk3M2NhMjVkOC8xL3Q0c2tIM3lzZlI1U0hpZ3hS LXhoZGp4Q0txYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuW5wMA0EAgACMAcDBQMqBlXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMlMjANBgkqhkiG9w0BAQsFAAOCAQEAhD10+R4I++au oLgb3LOdCV0Hknm/3WKGaDt11i7I70KtxntxEJzwZsnFlrNVyPup0g4wswNxaYXm 7JMGMv+mIrpIbc7v/csfc1wEIa4Ft1IjOVLZlmmw2mDyRuFCwynUzovojE7Nsnrq yf0jiayLAGixPBiI21V3YJDqSCZ1nPkUCr/FmUo+ByPSD6u39xrIp//4oaWF9WkA EL1iN1vpfPPGfcoW8NbLjqKjmYft/BLMJK3NDUzRcucKkTu5bGr0c1sF3Wik7Vk9 MQnPW5KCgC6TDgO7sRnSXwevpbrIDioCBFQQMvktBoAA2k/gZLQ75eOQQ03L1JYd pBxdmZUIbA== -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:32 2026 by rpki-client