This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer File: 2Bytep8KCbPVTabNzedDEvrMbXc.cer (raw, json) Hash identifier: Ius6HZ5XVLELDqv7BuSbC/O812R+71suF8o0g7yhLfw= Subject key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AEDAA82E4C510AC568118E5F0C7A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59867 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ed:aa:82:e4:c5:10:ac:56:81:18:e5:f0:c7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:8d:e0:99:d5:30:42:fe:0e:ed:b3:46:56: a2:b1:49:ae:b0:6a:ee:67:c0:7f:c3:0d:62:d2:c9: 78:ac:e7:46:04:d6:32:3c:f7:1b:c5:42:f8:19:07: e8:5e:2d:c8:13:aa:f2:f3:3f:0f:db:ac:b3:08:9f: 8b:01:00:ad:f9:42:86:0e:7b:11:4c:8a:cb:55:f9: fa:db:42:a4:bc:23:79:86:4f:26:fa:e6:3e:96:9e: 8f:a6:81:e3:b5:d6:86:cc:d6:b2:e9:60:3f:3b:9a: 5d:a7:68:d2:d0:b5:4f:1b:a5:76:3b:eb:9f:50:79: eb:0d:2e:93:fb:fe:4d:89:4f:bd:7e:68:e7:04:84: 33:95:2d:92:5c:37:09:4a:14:57:36:cd:e0:b3:71: 97:47:32:df:a3:f2:c4:81:35:26:b1:a8:dc:2e:de: 85:7a:f3:b0:c5:0c:af:60:55:43:4e:4c:07:a2:f7: 62:d8:5b:63:de:25:a9:bd:d4:9d:d0:72:3d:c5:2f: 46:da:15:cd:1e:6a:68:e9:5f:aa:fc:70:55:f3:c4: fc:6a:0b:15:27:75:5c:19:7b:f5:7c:ad:cf:e6:fa: f1:26:c4:64:44:5e:07:80:6c:87:d9:3b:5d:cb:7e: 6e:81:40:15:38:b5:1f:1a:74:04:cb:6a:bc:31:27: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 59867 Signature Algorithm: sha256WithRSAEncryption 48:4b:5d:8f:0c:3c:d4:b5:f1:f9:cf:a6:85:e7:cc:46:0f:70: 8b:51:1c:f4:e8:19:79:c3:08:bd:19:7f:81:b0:ea:49:e7:98: 50:c7:55:58:18:36:ad:ac:db:5c:4f:cd:a5:49:97:17:69:a7: 40:85:4a:02:3c:6c:54:cd:63:aa:b3:21:86:49:94:04:a6:dc: aa:91:df:45:ac:e3:eb:92:73:0e:87:3a:1e:3e:4e:2d:a5:06: 89:7f:2d:95:f9:7a:7e:cb:e2:c3:94:f2:e8:ff:4a:bb:b7:b2: e7:4d:08:bd:ce:ee:a8:54:93:42:18:56:27:d3:10:6a:0f:73: 13:ab:28:a5:85:8d:90:03:a5:73:1f:aa:ca:5e:6f:95:8a:1d: 45:e9:67:5c:be:bd:35:a1:2e:25:9a:df:b5:cd:73:90:9c:67: 4c:2f:73:3c:e5:f3:30:8c:a0:f2:6b:af:9b:c5:f5:b0:71:04: 80:45:f3:60:41:3d:f9:a3:3a:f4:ad:c8:3c:8c:6d:2b:89:cf: 0e:52:bc:03:79:f8:a4:da:a5:1e:dd:f5:fe:ff:0d:bd:66:f2: 37:f4:5a:46:78:c1:f9:1e:62:7b:2b:d2:45:f1:d2:b8:ee:cc: 16:46:64:79:37:38:25:ec:2b:e3:b7:44:02:fc:f7:17:d1:67: 00:a7:ab:bb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6Wu2qguTFEKxWgRjl8MehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODFjYWQ3YTlmMGEwOWIzZDU0ZGE2Y2RjZGU3NDMxMmZhY2M2ZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxyN4JnVMEL+Du2zRlaisUmusGru Z8B/ww1i0sl4rOdGBNYyPPcbxUL4GQfoXi3IE6ry8z8P26yzCJ+LAQCt+UKGDnsR TIrLVfn620KkvCN5hk8m+uY+lp6PpoHjtdaGzNay6WA/O5pdp2jS0LVPG6V2O+uf UHnrDS6T+/5NiU+9fmjnBIQzlS2SXDcJShRXNs3gs3GXRzLfo/LEgTUmsajcLt6F evOwxQyvYFVDTkwHovdi2Ftj3iWpvdSd0HI9xS9G2hXNHmpo6V+q/HBV88T8agsV J3VcGXv1fK3P5vrxJsRkRF4HgGyH2Ttdy35ugUAVOLUfGnQEy2q8MSc8CQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNgcrXqfCgmz1U2mzc3nQxL6zG13MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzZmZWYy Zi1hNzQ4LTQ3OTYtOTZhMC1kM2VhNzA3YzhmMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvNmZlZjJm LWE3NDgtNDc5Ni05NmEwLWQzZWE3MDdjOGYxOC8xLzJCeXRlcDhLQ2JQVlRhYk56 ZWRERXZyTWJYYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDp2zANBgkqhkiG9w0BAQsFAAOCAQEASEtdjww81LXx +c+mhefMRg9wi1Ec9OgZecMIvRl/gbDqSeeYUMdVWBg2razbXE/NpUmXF2mnQIVK AjxsVM1jqrMhhkmUBKbcqpHfRazj65JzDoc6Hj5OLaUGiX8tlfl6fsviw5Ty6P9K u7ey500Ivc7uqFSTQhhWJ9MQag9zE6sopYWNkAOlcx+qyl5vlYodRelnXL69NaEu JZrftc1zkJxnTC9zPOXzMIyg8muvm8X1sHEEgEXzYEE9+aM69K3IPIxtK4nPDlK8 A3n4pNqlHt31/v8NvWbyN/RaRnjB+R5ieyvSRfHSuO7MFkZkeTc4Jewr47dEAvz3 F9FnAKeruw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:07 2026 by rpki-client