This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.cer (raw, json) Hash identifier: vUQwyOB1VZzsoBn0LUXLx6f1GZfIDTRRaaQZfXdEmbg= Subject key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC77966A7BC9B4E87EEFF289BD675D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210854 IP: 31.210.17.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:79:66:a7:bc:9b:4e:87:ee:ff:28:9b:d6:75:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:c3:b8:a6:be:fc:fb:b5:c2:23:fd:a3:a5: e3:12:12:6b:62:9b:59:c8:32:f2:e4:4d:7f:5c:89: b1:dd:77:12:37:71:74:6a:55:b7:ab:97:13:f6:b9: 68:ae:c2:ce:ac:e0:69:36:e7:07:09:5d:a6:04:c4: 20:e1:a3:80:2c:0b:7d:d0:bc:1c:b5:fb:ab:3c:d6: 56:00:1f:f0:ea:51:e4:ed:30:28:af:09:b6:75:82: d6:f3:ab:aa:2c:cd:a5:92:bf:b3:fa:19:22:06:26: ff:92:7a:98:75:e3:50:93:26:a4:7d:2c:ec:a0:e7: 14:48:b2:9c:eb:ab:75:8e:74:26:9a:53:ca:41:15: c6:92:76:d2:46:44:3d:0e:a5:92:74:ae:7c:98:a9: 1b:8f:c2:18:00:cc:1e:14:de:52:c9:a1:2b:30:0b: 85:29:3e:1e:3c:b8:e1:19:e3:ff:49:b4:4a:98:55: 19:86:85:2a:77:73:11:93:bf:75:4a:3c:56:3c:c0: 69:42:e3:e2:17:b2:37:07:d4:ea:1e:4e:15:66:23: 47:c0:b9:de:d9:70:27:3e:0d:12:20:49:2e:e1:20: 82:58:9a:bc:9e:4c:8e:f3:32:59:c8:2a:5a:3c:46: 61:dd:94:12:6b:d4:a5:82:fa:73:99:d7:ce:ef:4a: 4f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.17.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210854 Signature Algorithm: sha256WithRSAEncryption 2e:dc:01:50:e6:d6:a8:d8:4c:bf:72:9e:7e:76:c3:ff:0c:bd: 1d:84:ec:86:c5:4b:a9:27:e4:1f:8e:97:a9:36:a7:f4:14:de: 18:60:54:5d:74:3d:14:8c:1a:73:36:80:65:9e:b8:9a:e0:5b: 45:f6:2d:64:d5:43:9b:6a:08:78:ec:c3:e2:6c:74:6a:6a:96: e6:11:53:ed:ce:21:04:11:53:c1:ee:d6:4f:3f:d7:57:fd:31: a6:ec:a5:b9:60:ba:e2:2d:65:39:c7:a1:7b:f0:cc:e5:ef:d1: 56:81:49:48:a1:ac:63:c3:f8:74:8d:4e:58:64:24:74:8f:b9: 14:8e:0f:7f:35:ad:ee:f9:8a:5f:ac:5e:4c:f6:1b:5a:9f:27: b9:49:ad:16:57:2b:97:b0:b7:96:d1:9f:c6:5d:2a:c5:87:e5: 76:93:49:36:74:bf:15:85:86:4b:88:3d:8a:61:4d:5c:de:c3: cd:92:79:c3:05:37:83:08:3f:47:5b:1a:d4:70:58:d8:ff:c0: ae:50:7b:ed:6e:59:75:07:6c:2f:99:3e:be:78:f4:60:ea:aa: ef:34:1c:f5:a7:4d:63:9a:bf:96:28:93:1f:d5:bf:15:85:68: 2b:57:29:17:3e:22:00:2b:c8:32:04:80:33:9c:11:93:ea:99: a2:d5:b9:bc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x3lmp7ybTofu/yib1nXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODBiNTY1ZDc3MzY3NTNkYmU3ZjY2MjRiZGYxZDJiYzE4OTZmN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpHDuKa+/Pu1wiP9o6XjEhJrYptZ yDLy5E1/XImx3XcSN3F0alW3q5cT9rlorsLOrOBpNucHCV2mBMQg4aOALAt90Lwc tfurPNZWAB/w6lHk7TAorwm2dYLW86uqLM2lkr+z+hkiBib/knqYdeNQkyakfSzs oOcUSLKc66t1jnQmmlPKQRXGknbSRkQ9DqWSdK58mKkbj8IYAMweFN5SyaErMAuF KT4ePLjhGeP/SbRKmFUZhoUqd3MRk791SjxWPMBpQuPiF7I3B9TqHk4VZiNHwLne 2XAnPg0SIEku4SCCWJq8nkyO8zJZyCpaPEZh3ZQSa9SlgvpzmdfO70pPFQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNgLVl13NnU9vn9mJL3x0rwYlvfAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2Y3NjMz OS0xNzE0LTQwM2ItOTkyNy0yMzI3NzgyMmZlZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZjc2MzM5 LTE3MTQtNDAzYi05OTI3LTIzMjc3ODIyZmVmYS8xLzJBdFdYWGMyZFQyLWYyWWt2 ZkhTdkJpVzk4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAH9IRMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM3pjANBgkqhkiG9w0BAQsFAAOCAQEALtwBUObWqNhMv3KefnbD/wy9HYTshsVL qSfkH46XqTan9BTeGGBUXXQ9FIwaczaAZZ64muBbRfYtZNVDm2oIeOzD4mx0amqW 5hFT7c4hBBFTwe7WTz/XV/0xpuyluWC64i1lOcehe/DM5e/RVoFJSKGsY8P4dI1O WGQkdI+5FI4PfzWt7vmKX6xeTPYbWp8nuUmtFlcrl7C3ltGfxl0qxYfldpNJNnS/ FYWGS4g9imFNXN7DzZJ5wwU3gwg/R1sa1HBY2P/ArlB77W5ZdQdsL5k+vnj0YOqq 7zQc9adNY5q/liiTH9W/FYVoK1cpFz4iACvIMgSAM5wRk+qZotW5vA== -----END CERTIFICATE-----Generated at Wed Jan 21 14:39:41 2026 by rpki-client