This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer (raw, json) Hash identifier: LO/rUiON49eIsgzl/6ZDpnco8UGkqyASe+YhIyeA6y0= Subject key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2516598D4D2EA750324A62A6CB809 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48620 IP: 5.159.200.0/21 IP: 94.142.64.0/19 IP: 185.127.248.0/22 IP: 2a00:1cd8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:51:65:98:d4:d2:ea:75:03:24:a6:2a:6c:b8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d81843032164e0b62ed6da7c67557bf46895d0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:89:bf:55:30:3c:61:37:d5:f6:64:82:c2: 8d:74:24:9a:be:c9:a5:7f:c3:aa:02:3d:a2:31:77: 57:d5:42:bd:7a:4f:b3:e3:36:49:f2:15:ae:d3:1d: 80:d8:1a:ca:75:ac:32:0c:f7:c5:30:d7:d7:de:b5: 9d:06:dd:32:08:02:60:5d:16:4b:de:5a:f6:33:eb: 4d:3c:88:29:e6:05:e7:e6:96:d9:5e:76:cc:5e:51: 83:ee:9a:66:cf:fb:be:51:6c:52:a0:c8:fb:8f:82: 1d:eb:34:3c:c7:8b:15:7e:63:f3:de:89:78:f9:4d: c3:72:ed:d6:53:f9:50:45:4c:61:cb:69:3e:ae:04: 5c:b3:e8:5b:7d:64:d4:8b:d4:67:26:3d:07:7b:2d: 02:1f:5f:16:02:9f:91:eb:c4:b0:fc:9b:59:fe:ff: e4:54:9e:71:c5:25:cc:5d:02:49:9a:08:73:9f:9b: 66:ea:45:18:45:90:8a:e9:36:c4:96:1c:fc:bb:be: 37:cc:cf:7f:c4:9f:3e:4a:67:2e:2f:55:8e:e6:6a: 97:7e:36:65:ea:36:1d:f2:ff:60:ac:72:74:b7:2d: 72:75:53:30:da:72:b9:0b:c3:db:f9:99:a3:87:95: c3:ef:a7:2b:b0:f5:8b:10:66:71:62:16:97:f6:fd: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.200.0/21 94.142.64.0/19 185.127.248.0/22 IPv6: 2a00:1cd8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48620 Signature Algorithm: sha256WithRSAEncryption a6:4a:3c:43:07:29:e0:11:b1:04:61:cc:ab:96:45:ff:b5:85: 17:43:1c:75:3d:53:53:1b:c3:ab:1e:d5:65:29:fb:c4:56:b6: 19:cd:f6:34:22:cd:c6:f0:c4:cd:ec:60:21:1f:79:84:1c:99: 26:ec:b0:8b:b3:e2:b1:bd:5a:94:4b:29:ee:8a:cf:50:20:e7: c7:e5:69:5a:52:c3:ac:d0:49:eb:e2:f7:5e:c1:41:d8:50:07: 9d:e3:23:5c:47:d6:4b:f9:24:10:ec:a4:41:5b:b8:44:ef:75: ed:2b:0b:f5:45:e4:9e:8a:48:63:46:8a:e6:83:5e:58:b0:c8: 53:63:8c:ff:b9:06:17:ca:a1:72:23:21:92:90:ef:78:ad:3f: 37:62:ad:89:0e:d9:13:d5:d2:f0:ee:67:87:ad:d8:aa:45:6b: 39:ce:bd:c9:52:84:e7:32:de:6e:6a:46:3e:6d:15:69:c2:92: 41:64:24:61:4f:75:f8:b3:77:66:40:87:ec:e0:f8:37:7c:cb: d7:09:73:29:56:6b:bd:3f:a5:37:2e:59:64:58:ee:fb:72:36: 56:53:30:ed:85:3b:e5:3f:f5:96:f1:d7:6b:51:63:30:60:b4: 93:08:0a:07:be:92:94:04:0c:0b:b5:3a:6d:a1:e5:d8:f4:6a: 47:64:88:3f -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/8lFlmNTS6nUDJKYqbLgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODE4NDMwMzIxNjRlMGI2MmVkNmRhN2M2NzU1N2JmNDY4OTVkMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwGJv1UwPGE31fZkgsKNdCSavsml f8OqAj2iMXdX1UK9ek+z4zZJ8hWu0x2A2BrKdawyDPfFMNfX3rWdBt0yCAJgXRZL 3lr2M+tNPIgp5gXn5pbZXnbMXlGD7ppmz/u+UWxSoMj7j4Id6zQ8x4sVfmPz3ol4 +U3Dcu3WU/lQRUxhy2k+rgRcs+hbfWTUi9RnJj0Hey0CH18WAp+R68Sw/JtZ/v/k VJ5xxSXMXQJJmghzn5tm6kUYRZCK6TbElhz8u743zM9/xJ8+SmcuL1WO5mqXfjZl 6jYd8v9grHJ0ty1ydVMw2nK5C8Pb+Zmjh5XD76crsPWLEGZxYhaX9v29TwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNgYQwMhZOC2LtbafGdVe/RoldDwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzVjMWVl Yy0zNzAwLTQ5YmItYmZlZS02NWQzNzNhYjU3M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNWMxZWVj LTM3MDAtNDliYi1iZmVlLTY1ZDM3M2FiNTczZi8xLzJCaERBeUZrNExZdTF0cDha MVY3OUdpVjBQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDBZ/IAwQFXo5AAwQCuX/4MA0EAgACMAcDBQMq ABzYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC97DANBgkqhkiG9w0BAQsFAAOC AQEApko8Qwcp4BGxBGHMq5ZF/7WFF0McdT1TUxvDqx7VZSn7xFa2Gc32NCLNxvDE zexgIR95hByZJuywi7Pisb1alEsp7orPUCDnx+VpWlLDrNBJ6+L3XsFB2FAHneMj XEfWS/kkEOykQVu4RO917SsL9UXknopIY0aK5oNeWLDIU2OM/7kGF8qhciMhkpDv eK0/N2KtiQ7ZE9XS8O5nh63YqkVrOc69yVKE5zLebmpGPm0VacKSQWQkYU91+LN3 ZkCH7OD4N3zL1wlzKVZrvT+lNy5ZZFju+3I2VlMw7YU75T/1lvHXa1FjMGC0kwgK B76SlAQMC7U6baHl2PRqR2SIPw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:53 2026 by rpki-client