This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer File: 2C4TD2tr3205KA43XfNE5uCjSzw.cer (raw, json) Hash identifier: f2+MxDv7xI6E+i5P/DhfYt/VfwAtDYeVpTUf6TgD90M= Subject key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA42DDDD81A78A10A1C2EF75C9A5D82 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50180 IP: 195.189.166.0/23 IP: 2001:67c:2ff0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:2d:dd:d8:1a:78:a1:0a:1c:2e:f7:5c:9a:5d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:35:36:cc:26:36:18:6f:3c:0a:02:f5:cf: c7:fb:66:ad:58:7b:51:9d:65:12:2b:5c:84:d8:32: 7c:33:25:e1:e5:e7:01:c0:cf:3e:e6:a6:a2:ad:41: e3:c8:3c:24:e5:d6:35:8d:35:f6:a5:6f:44:1c:a5: fc:8a:de:65:3d:b2:5c:dc:92:58:a1:a3:6d:61:c1: cd:4e:fe:3a:57:3f:d2:b5:0f:9a:89:8e:dd:5b:04: fa:74:5c:77:5c:0a:4f:71:2b:15:9c:18:05:29:40: f0:b3:b9:2b:ec:b5:1f:c9:5f:fc:84:50:8d:3b:2c: a0:8a:90:c5:df:98:a7:bf:11:47:54:fb:b1:70:41: ec:22:e1:e9:90:6b:73:90:0c:8b:80:40:29:87:7a: 72:2f:a0:8e:3d:c1:55:2d:72:1a:82:fe:4c:7f:de: b5:12:47:e9:82:13:de:1b:e5:f9:b4:b1:b3:e9:f6: 21:b6:db:71:d6:25:8c:4d:92:eb:e1:bf:f6:d0:94: ed:a7:43:38:c4:80:74:c0:22:ef:ff:ca:90:7b:a9: 0c:51:72:6f:44:1a:45:a5:d5:e6:9d:24:8b:cf:08: 91:91:1c:8f:a3:5a:96:ce:9a:a8:e3:6c:cd:a6:d6: 74:32:79:b3:6e:7d:38:89:f0:f3:89:52:4f:20:34: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.166.0/23 IPv6: 2001:67c:2ff0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50180 Signature Algorithm: sha256WithRSAEncryption 0e:b6:e9:ea:b2:99:36:92:ad:33:5c:d2:97:e3:66:ef:c4:5a: cd:f8:37:db:76:3b:32:d4:69:a3:35:d5:52:34:4d:93:d8:fb: 7e:68:7f:c4:35:ac:2e:fb:af:99:ce:0a:01:da:d0:eb:b3:3e: 60:13:81:08:80:a6:6e:0f:6d:ee:4b:4e:46:c4:ab:ec:ec:2e: e4:29:da:e2:88:4a:20:9f:37:a0:a2:72:4d:ad:7f:ab:05:31: 7e:1a:59:2f:78:f2:bf:07:0b:31:0c:68:d4:1c:29:cc:a3:ed: 5d:eb:10:04:81:dc:97:ec:39:8c:1c:36:a5:8c:b7:ef:10:27: 3c:00:2d:15:32:7d:66:1a:4e:d4:d4:ed:a7:b2:8f:8c:1f:55: 99:3e:37:7e:43:ae:f4:63:0f:c1:75:f7:72:fd:a4:73:ef:5e: 3f:23:dd:8b:4b:97:77:19:fc:8c:f7:1c:e8:08:bf:fe:5c:2d: 12:a3:d4:b4:59:21:1d:59:26:c7:1e:24:a4:1c:d6:e6:07:f6: b0:9a:20:a9:d0:67:f2:71:3b:8f:d3:ef:e6:87:5f:d0:e8:d8: 28:f1:f2:01:52:f0:ec:0d:7e:5b:f1:1c:82:22:9c:a3:34:83: 70:a7:59:98:85:ac:37:a7:27:14:74:a2:42:b0:9f:4d:6a:0a: 3a:82:c9:ac -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7pC3d2Bp4oQocLvdcml2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODJlMTMwZjZiNmJkZjZkMzkyODBlMzc1ZGYzNDRlNmUwYTM0YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBA1NswmNhhvPAoC9c/H+2atWHtR nWUSK1yE2DJ8MyXh5ecBwM8+5qairUHjyDwk5dY1jTX2pW9EHKX8it5lPbJc3JJY oaNtYcHNTv46Vz/StQ+aiY7dWwT6dFx3XApPcSsVnBgFKUDws7kr7LUfyV/8hFCN OyygipDF35invxFHVPuxcEHsIuHpkGtzkAyLgEAph3pyL6COPcFVLXIagv5Mf961 EkfpghPeG+X5tLGz6fYhtttx1iWMTZLr4b/20JTtp0M4xIB0wCLv/8qQe6kMUXJv RBpFpdXmnSSLzwiRkRyPo1qWzpqo42zNptZ0Mnmzbn04ifDziVJPIDSGUwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFNguEw9ra99tOSgON13zRObgo0s8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzJkYWYw NC00Zjc2LTQzMzMtYWJmMC0yMzhlMGI3YWUyODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvMmRhZjA0 LTRmNzYtNDMzMy1hYmYwLTIzOGUwYjdhZTI4NC8xLzJDNFREMnRyMzIwNUtBNDNY Zk5FNXVDalN6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw72mMA8EAgACMAkDBwAgAQZ8L/AwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMQEMA0GCSqGSIb3DQEBCwUAA4IBAQAOtunqspk2 kq0zXNKX42bvxFrN+Dfbdjsy1GmjNdVSNE2T2Pt+aH/ENawu+6+ZzgoB2tDrsz5g E4EIgKZuD23uS05GxKvs7C7kKdriiEognzegonJNrX+rBTF+GlkvePK/BwsxDGjU HCnMo+1d6xAEgdyX7DmMHDaljLfvECc8AC0VMn1mGk7U1O2nso+MH1WZPjd+Q670 Yw/Bdfdy/aRz714/I92LS5d3GfyM9xzoCL/+XC0So9S0WSEdWSbHHiSkHNbmB/aw miCp0GfycTuP0+/mh1/Q6Ngo8fIBUvDsDX5b8RyCIpyjNINwp1mYhaw3pycUdKJC sJ9Nago6gsms -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:21 2026 by rpki-client