This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer (raw, json) Hash identifier: 4P8uh/o5DczEsaNVCxGDk5Uafkc2CLlRplnLgqyGiCM= Subject key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AEE7C2BBA61B64AC0FC7CD1B8029F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215273 IP: 194.104.94.0/24 IP: 2a14:2640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ee:7c:2b:ba:61:b6:4a:c0:fc:7c:d1:b8:02:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:72:3d:fd:20:3a:f6:ec:ac:b4:df:1f:1f: e6:8c:77:33:46:62:98:9f:a5:a3:c5:4e:b5:69:07: 01:29:63:d1:cb:45:07:c6:dd:50:ad:1f:c8:a4:54: 0b:56:74:2c:b1:17:70:46:7d:94:ec:0a:77:0c:90: 63:9a:2a:56:cf:54:8c:8b:62:a2:ea:3e:19:31:33: 7d:e1:42:e4:3b:e5:5f:ef:a5:6c:26:6b:e7:66:16: ed:c9:70:5e:1d:c9:e2:bd:06:e7:b4:0e:10:42:9e: 4b:9f:41:e5:18:05:fb:29:c5:b2:34:77:23:41:92: bb:14:f1:08:06:31:11:0e:de:39:8c:88:60:6d:c8: 19:36:04:a4:b2:00:fa:aa:51:8a:83:aa:4d:d1:b9: da:d3:e2:08:62:4d:fd:4d:cd:f3:14:ce:d8:9e:62: be:85:88:26:8c:20:c6:f7:b2:98:47:07:19:8a:17: 92:cb:22:a2:f6:25:7b:43:c2:e2:a7:23:80:c8:c5: 1f:56:08:25:14:aa:f5:6d:b4:b6:06:46:6f:10:b8: 7e:34:d5:58:47:15:62:b8:50:60:d6:cf:72:28:a3: 52:3c:36:58:da:7b:5b:28:22:27:b5:81:c7:1b:2f: 24:e0:2a:f5:81:59:bf:62:67:13:88:83:7e:00:98: 0d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.94.0/24 IPv6: 2a14:2640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215273 Signature Algorithm: sha256WithRSAEncryption 0f:17:46:35:e8:0b:51:11:03:f6:cc:39:f4:b7:92:01:6e:fe: d7:80:84:ec:5a:77:1e:00:0c:40:d2:2d:a7:f6:f7:db:72:e1: a6:6b:08:1b:a4:a1:46:89:ba:11:31:cb:e6:ce:8b:f5:1e:1b: 38:11:d2:d5:b9:23:28:6c:f9:36:da:42:c3:cb:c6:0a:ed:c6: 00:7a:b4:3f:cd:ff:96:f5:37:77:28:06:e4:43:dc:0b:5a:11: 88:9b:c8:77:b7:8a:e9:d2:b7:7f:43:9c:02:e1:2c:0a:47:f0: 21:9a:dd:55:46:6e:94:a5:89:0e:ce:00:6a:c6:81:01:b8:29: 03:8d:52:c2:f0:13:a7:f6:1f:22:76:11:60:64:c8:a5:99:42: f5:2e:90:b4:85:71:ba:63:5b:ea:da:1e:ce:a7:e1:71:eb:48: dd:23:84:7a:b5:98:3e:e9:d3:40:42:0d:95:b3:31:91:c8:92: 0b:f8:64:0e:c4:bf:c5:03:c8:42:89:30:da:8b:45:2d:0b:0c: ab:96:f6:97:ff:86:a6:c7:7c:b4:c2:43:cc:55:1a:f5:30:be: 94:49:c5:78:ec:b8:27:86:50:45:eb:58:66:7d:4e:09:fe:d2: b8:0f:97:aa:76:45:ec:ae:11:68:76:85:b2:12:99:53:26:ef: 34:54:84:16 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9Wu58K7phtkrA/HzRuAKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmVjZWM5NmEwMzcxYTNhZTYyZDdhYTZkZDdkOWU0M2FjNTVkMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZByPf0gOvbsrLTfHx/mjHczRmKY n6WjxU61aQcBKWPRy0UHxt1QrR/IpFQLVnQssRdwRn2U7Ap3DJBjmipWz1SMi2Ki 6j4ZMTN94ULkO+Vf76VsJmvnZhbtyXBeHcnivQbntA4QQp5Ln0HlGAX7KcWyNHcj QZK7FPEIBjERDt45jIhgbcgZNgSksgD6qlGKg6pN0bna0+IIYk39Tc3zFM7YnmK+ hYgmjCDG97KYRwcZiheSyyKi9iV7Q8LipyOAyMUfVgglFKr1bbS2BkZvELh+NNVY RxViuFBg1s9yKKNSPDZY2ntbKCIntYHHGy8k4Cr1gVm/YmcTiIN+AJgNhwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNvs7JagNxo65i16pt19nkOsVdAlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzEzNGYw Yy1kOTExLTQ4ODctOTZiNy1hODc2NjUyMGZlYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMTM0ZjBj LWQ5MTEtNDg4Ny05NmI3LWE4NzY2NTIwZmVhMi8xLzItenNscUEzR2pybUxYcW0z WDJlUTZ4VjBDVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwmheMA0EAgACMAcDBQMqFCZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNI6TANBgkqhkiG9w0BAQsFAAOCAQEADxdGNegLURED 9sw59LeSAW7+14CE7Fp3HgAMQNItp/b323LhpmsIG6ShRom6ETHL5s6L9R4bOBHS 1bkjKGz5NtpCw8vGCu3GAHq0P83/lvU3dygG5EPcC1oRiJvId7eK6dK3f0OcAuEs CkfwIZrdVUZulKWJDs4AasaBAbgpA41SwvATp/YfInYRYGTIpZlC9S6QtIVxumNb 6toezqfhcetI3SOEerWYPunTQEINlbMxkciSC/hkDsS/xQPIQokw2otFLQsMq5b2 l/+Gpsd8tMJDzFUa9TC+lEnFeOy4J4ZQRetYZn1OCf7SuA+XqnZF7K4RaHaFshKZ UybvNFSEFg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:35 2026 by rpki-client