This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.cer (raw, json) Hash identifier: ZNJYCUeSRTJaMoBXdMMg4CgxjyNgXmfhQX9+c+dTqyw= Subject key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36728385448CB6B9BB15D469B7381D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.43.60.0/22 IP: 2001:678:f0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:72:83:85:44:8c:b6:b9:bb:15:d4:69:b7:38:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:62:b3:b1:7a:3f:95:5b:3f:85:bc:d6:2a: f7:5d:f8:9e:8e:35:09:56:53:71:15:75:d1:50:13: 28:b3:6a:a5:e4:90:33:d4:1d:2e:33:59:94:80:1f: 53:a3:05:d9:07:6f:e5:60:d0:dc:3f:6c:05:77:5b: 30:53:b6:99:54:e5:4e:99:56:a0:84:9c:98:22:f3: 88:16:98:8b:bb:8c:fd:cc:9e:1a:9f:8c:5d:57:fd: 75:7e:a0:6d:5c:51:d5:99:24:b2:b9:e7:d6:56:e2: 15:ef:c5:f2:da:a8:1e:5d:03:69:ff:3d:57:74:64: 6e:ab:87:89:96:f7:bb:72:5b:ba:e0:89:66:73:d4: 9e:86:45:a0:91:7f:bf:24:1a:7e:37:b5:3a:4d:cb: 02:98:e7:3e:a8:97:e7:6f:73:47:8c:69:9a:85:ba: 10:b6:c5:60:5d:d4:1b:8f:83:df:3f:64:62:6f:1e: b4:db:bf:86:bf:46:84:fd:35:da:4d:c6:ec:78:a8: 39:78:85:9e:19:21:26:de:72:8c:44:f3:66:ac:7b: 4c:f7:15:19:43:00:d5:c8:4a:1a:2c:6b:c4:ea:06: 9e:71:d1:d8:3f:8e:5c:2d:32:58:ee:cd:9a:e3:fe: 60:f4:42:80:ae:72:70:c5:c8:fc:77:3a:fc:f5:65: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.60.0/22 IPv6: 2001:678:f0::/48 Signature Algorithm: sha256WithRSAEncryption 32:80:59:06:e0:c1:00:ba:fd:2b:35:6a:52:1d:e0:d9:c1:e9: 19:7e:04:a9:dd:28:63:a0:ff:c7:8b:3b:65:f8:d4:7e:69:12: cb:7d:1f:5b:32:c8:20:1b:8f:3a:34:82:c1:8d:d6:62:1f:53: 72:6a:dc:3e:ae:03:8f:4f:45:99:1e:1a:bf:0f:27:97:a6:f7: 47:32:8d:c7:8f:1b:47:c8:29:6b:c7:a1:65:07:cb:29:ea:00: fa:9c:02:57:41:84:1e:f2:56:d6:a5:2a:e4:a2:4c:39:97:40: b9:a7:80:20:65:58:fd:62:66:2d:ff:7a:0b:ce:b9:57:de:6e: bf:d7:67:44:9c:78:56:01:df:94:1b:db:08:58:d3:16:40:2a: 76:24:b7:ed:de:67:df:0d:dd:58:53:8e:1e:1d:9f:f7:a2:ec: b5:75:43:70:5c:14:9c:36:d9:e4:7d:37:1e:f1:f6:1f:8e:dd: af:82:3d:6a:14:d1:af:07:8a:ab:c9:a8:ff:be:0b:b7:81:53: 78:f5:26:5a:29:cf:84:c7:9a:22:73:51:a0:a4:47:06:bf:d9: c1:12:3d:6d:2a:cc:95:a5:c9:2c:52:5f:c1:91:e5:ae:5d:86: dd:24:2a:82:46:be:2f:ca:fc:4c:41:8b:ff:c6:a3:a9:c0:07: 6a:c3:9b:3a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt7NnKDhUSMtrm7FdRptzgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODFjZjFhYWMyMWFhNTgyM2IwMTlkZTkxYWVlZWMyM2UzZTUyNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdJis7F6P5VbP4W81ir3XfiejjUJ VlNxFXXRUBMos2ql5JAz1B0uM1mUgB9TowXZB2/lYNDcP2wFd1swU7aZVOVOmVag hJyYIvOIFpiLu4z9zJ4an4xdV/11fqBtXFHVmSSyuefWVuIV78Xy2qgeXQNp/z1X dGRuq4eJlve7clu64Ilmc9SehkWgkX+/JBp+N7U6TcsCmOc+qJfnb3NHjGmahboQ tsVgXdQbj4PfP2Ribx6027+Gv0aE/TXaTcbseKg5eIWeGSEm3nKMRPNmrHtM9xUZ QwDVyEoaLGvE6gaecdHYP45cLTJY7s2a4/5g9EKArnJwxcj8dzr89WUEFQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFNgc8arCGqWCOwGd6Rru7CPj5SbbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2I4YTZh NC1mN2VhLTRhZmUtYjYwZi05YzBkZTM2NTI3MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvYjhhNmE0 LWY3ZWEtNGFmZS1iNjBmLTljMGRlMzY1MjczOC8xLzJCenhxc0lhcFlJN0FaM3BH dTdzSS1QbEp0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCwys8MA8EAgACMAkDBwAgAQZ4APAwDQYJKoZI hvcNAQELBQADggEBADKAWQbgwQC6/Ss1alId4NnB6Rl+BKndKGOg/8eLO2X41H5p Est9H1syyCAbjzo0gsGN1mIfU3Jq3D6uA49PRZkeGr8PJ5em90cyjcePG0fIKWvH oWUHyynqAPqcAldBhB7yVtalKuSiTDmXQLmngCBlWP1iZi3/egvOuVfebr/XZ0Sc eFYB35Qb2whY0xZAKnYkt+3eZ98N3VhTjh4dn/ei7LV1Q3BcFJw22eR9Nx7x9h+O 3a+CPWoU0a8HiqvJqP++C7eBU3j1Jlopz4THmiJzUaCkRwa/2cESPW0qzJWlySxS X8GR5a5dht0kKoJGvi/K/ExBi//Go6nAB2rDmzo= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:28 2026 by rpki-client