This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer File: 02jCohY2GiT97Jfx838uHRIHEIc.cer (raw, json) Hash identifier: OwyLnfccCeI/MqTjC0csqJVJ/i2/U0H3C4pKLN3PU3o= Subject key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79104BD1E619B9F227D758EDC333286E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58334 IP: 185.31.216.0/22 IP: 185.131.224.0/22 IP: 193.35.41.0/24 IP: 2a00:b7a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4b:d1:e6:19:b9:f2:27:d7:58:ed:c3:33:28:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d368c2a216361a24fdec97f1f37f2e1d12071087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:09:38:1b:c0:2d:b5:80:bd:49:f9:77:62: d7:9a:9d:1f:a7:13:c8:56:96:d6:8f:73:ff:fd:f3: 7b:d5:0c:fe:3f:6e:0a:c4:46:c6:4a:79:6b:92:cb: de:68:1d:65:de:c5:1b:68:48:68:10:dd:b7:26:20: 11:6c:90:6a:27:0e:f3:59:a6:04:d6:ad:f0:3c:73: 18:6c:52:50:f0:9d:a8:6b:de:a1:c3:cc:8d:c3:12: a4:7b:4f:78:74:38:0c:62:b4:e6:b6:cf:23:90:04: 2b:f2:bc:bc:57:13:e4:6f:63:64:a6:4a:cf:67:78: 74:ef:a7:78:8a:09:f8:96:93:97:d0:8d:51:15:02: 74:71:47:dc:b4:ce:4e:09:7f:85:b4:86:26:f0:11: 50:c1:e0:a1:9d:94:e0:6c:e3:f4:03:ae:35:2c:24: ed:bd:77:ec:13:e3:17:e8:dd:10:c2:1a:1c:46:be: e7:57:36:0b:a6:f5:cd:9f:2e:34:a3:44:15:88:3a: 5c:50:7c:25:84:f8:4f:d6:3c:73:3a:2b:25:61:9c: dc:0b:53:32:cd:54:fe:42:f5:0f:bd:46:16:95:9e: 2e:7f:c1:54:91:ef:a6:3b:1a:da:9e:c2:71:62:c1: f0:e9:4e:7c:8a:cd:be:78:14:d5:c3:77:a0:55:60: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.216.0/22 185.131.224.0/22 193.35.41.0/24 IPv6: 2a00:b7a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58334 Signature Algorithm: sha256WithRSAEncryption 97:45:4f:64:5a:f2:5d:4f:55:05:d4:ac:31:88:09:3a:38:5b: a1:36:12:65:aa:e4:4d:ce:f9:d0:ca:75:10:1a:f2:bf:99:c1: 08:c7:29:0f:fb:8a:6c:3c:a7:1e:fd:cb:ec:34:40:5c:2b:fd: f9:c1:73:ad:39:c5:40:7e:ab:80:f6:6e:ac:38:43:18:44:f4: 54:1b:fb:e7:f2:42:1b:b4:66:db:cc:5f:cf:fc:58:68:ba:f4: eb:29:e1:98:1d:e2:aa:c1:f3:04:6a:45:6d:65:e5:b0:c3:b3: c5:83:52:6b:c5:ae:73:79:81:90:c8:0f:61:44:d5:cb:88:d2: 8a:76:5f:ce:63:cb:79:11:3c:6f:01:44:7c:59:c2:07:3f:a1: d2:0a:72:64:35:d4:01:e3:5d:1c:6c:ee:d6:c7:a2:37:19:95: c4:a4:09:e4:9e:57:a5:a1:b6:3c:8c:ef:69:11:73:04:17:77: 8e:7f:81:19:f1:6e:af:bd:d5:ae:2e:49:a0:45:98:87:b8:3b: 8e:dc:cb:ca:66:c0:fd:7e:23:85:12:71:c8:85:83:8c:d1:eb: 5d:99:7a:62:62:bb:bf:68:b1:7e:0b:33:d0:6a:c7:9e:52:a0: d9:ef:bd:5e:85:fb:77:e8:f7:47:65:7f:04:14:6f:2c:9a:93: 3c:97:9b:49 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5EEvR5hm58ifXWO3DMyhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzY4YzJhMjE2MzYxYTI0ZmRlYzk3ZjFmMzdmMmUxZDEyMDcxMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsUJOBvALbWAvUn5d2LXmp0fpxPI VpbWj3P//fN71Qz+P24KxEbGSnlrksveaB1l3sUbaEhoEN23JiARbJBqJw7zWaYE 1q3wPHMYbFJQ8J2oa96hw8yNwxKke094dDgMYrTmts8jkAQr8ry8VxPkb2NkpkrP Z3h076d4ign4lpOX0I1RFQJ0cUfctM5OCX+FtIYm8BFQweChnZTgbOP0A641LCTt vXfsE+MX6N0QwhocRr7nVzYLpvXNny40o0QViDpcUHwlhPhP1jxzOislYZzcC1My zVT+QvUPvUYWlZ4uf8FUke+mOxransJxYsHw6U58is2+eBTVw3egVWB/+wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNNowqIWNhok/eyX8fN/Lh0SBxCHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2QyMmVk Zi1mYjQ5LTRlMDEtOGZkNC05MDIwOGUxZjNkZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZDIyZWRm LWZiNDktNGUwMS04ZmQ0LTkwMjA4ZTFmM2RlNi8xLzAyakNvaFkyR2lUOTdKZng4 Mzh1SFJJSEVJYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuR/YAwQCuYPgAwQAwSMpMA0EAgACMAcDBQAq ALegMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDj3jANBgkqhkiG9w0BAQsFAAOC AQEAl0VPZFryXU9VBdSsMYgJOjhboTYSZarkTc750Mp1EBryv5nBCMcpD/uKbDyn Hv3L7DRAXCv9+cFzrTnFQH6rgPZurDhDGET0VBv75/JCG7Rm28xfz/xYaLr06ynh mB3iqsHzBGpFbWXlsMOzxYNSa8Wuc3mBkMgPYUTVy4jSinZfzmPLeRE8bwFEfFnC Bz+h0gpyZDXUAeNdHGzu1seiNxmVxKQJ5J5XpaG2PIzvaRFzBBd3jn+BGfFur73V ri5JoEWYh7g7jtzLymbA/X4jhRJxyIWDjNHrXZl6YmK7v2ixfgsz0GrHnlKg2e+9 XoX7d+j3R2V/BBRvLJqTPJebSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:36 2026 by rpki-client