This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.cer (raw, json) Hash identifier: 94YtfwRiDMbF02dcyUV4j64w6JY/fFVlrGdabFIvQN0= Subject key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC9211D2540E6DEBF40BA07FC0EAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206922 IP: 185.20.4.0/24 IP: 185.171.244.0/22 IP: 2a13:1e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c9:21:1d:25:40:e6:de:bf:40:ba:07:fc:0e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:b1:f1:fe:cc:9d:a6:7b:09:2f:7b:2e:97: dc:1b:3a:80:9d:20:17:30:ef:7b:f9:9f:cc:8b:ce: 9e:30:ea:31:85:6c:37:34:49:b9:57:0b:6e:fa:5e: 1d:6c:db:6c:45:86:bb:b1:08:c1:9f:58:b3:4d:a9: ea:77:50:48:7a:69:09:39:03:36:b9:1a:b2:e4:69: 3f:77:1e:7e:3c:5e:65:0a:fb:18:24:75:c7:c7:b7: 4c:29:61:92:38:1a:00:b1:9b:7e:c3:96:1f:6f:ef: 51:c5:81:1e:f0:4b:b0:e7:77:ed:87:50:a9:73:57: 48:ec:4b:e8:1a:8b:41:4d:0a:ac:e7:af:61:54:0c: fa:47:57:1c:09:77:50:4d:b0:00:24:f2:e4:19:f4: a4:47:bb:a9:97:76:e7:f0:c1:81:40:bf:ea:b4:80: ad:18:80:aa:bf:d2:c0:7b:1f:0f:e2:93:61:8f:b4: b4:41:b0:dd:38:2e:4f:63:06:e1:93:98:89:0d:ea: 66:fd:ef:22:b7:65:b7:6c:23:8a:c6:02:88:e3:d3: c6:b4:9f:d4:54:6a:65:5c:79:ff:76:56:1d:ae:9e: 59:77:95:3a:bc:f8:e0:c6:b9:6f:ea:ae:30:5d:a8: 24:3e:b3:b8:08:cb:9c:06:ac:65:50:65:9b:59:d3: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.4.0/24 185.171.244.0/22 IPv6: 2a13:1e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206922 Signature Algorithm: sha256WithRSAEncryption 8e:31:11:c4:c0:49:d5:96:0b:6e:68:94:1f:99:18:18:a1:bd: 2d:cf:80:85:b3:24:61:de:90:46:3d:6d:17:bd:fc:0a:ea:74: 34:d3:36:f0:f9:38:f5:b5:99:97:58:3e:7c:76:fa:ac:7c:08: bb:76:0d:13:71:b4:7b:27:61:96:b3:bd:52:d9:33:77:5f:86: 7c:da:5f:35:5e:d7:68:a2:87:a8:52:76:14:ed:72:91:b5:6f: e8:a9:7a:55:96:83:ac:60:c2:77:f4:a5:a8:9d:a1:6e:03:1f: 95:53:96:94:38:a4:36:39:bb:63:21:10:ae:67:ef:e1:66:e0: 74:a4:06:ac:f8:59:4f:ae:71:ea:61:ef:c7:97:c9:26:5c:ea: e3:ee:a0:56:04:cb:9b:b0:af:4c:ea:91:67:1e:75:de:cf:ce: 56:33:9e:50:e9:e6:91:9c:00:41:92:a4:dd:1b:8a:9f:f5:eb: ff:73:b2:7a:31:92:d9:dc:7f:d6:ee:fa:a9:06:bd:4b:5a:39: 2d:2b:03:a6:ea:45:17:e4:31:41:ae:ed:8a:bb:39:09:17:5d: 8a:e2:f3:09:38:c7:df:43:87:22:3a:e1:8d:33:90:f0:7f:bb: bd:2d:50:c0:95:b1:36:ca:af:9a:23:3a:b3:fc:e2:20:12:07: b3:27:69:6a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt26skhHSVA5t6/QLoH/A6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODMwMDkzNmZiNTAwYTc0NTY0NDBhYmE4YjNiOGFkNTNjOWYwMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqyx8f7MnaZ7CS97LpfcGzqAnSAX MO97+Z/Mi86eMOoxhWw3NEm5Vwtu+l4dbNtsRYa7sQjBn1izTanqd1BIemkJOQM2 uRqy5Gk/dx5+PF5lCvsYJHXHx7dMKWGSOBoAsZt+w5Yfb+9RxYEe8Euw53fth1Cp c1dI7EvoGotBTQqs569hVAz6R1ccCXdQTbAAJPLkGfSkR7upl3bn8MGBQL/qtICt GICqv9LAex8P4pNhj7S0QbDdOC5PYwbhk5iJDepm/e8it2W3bCOKxgKI49PGtJ/U VGplXHn/dlYdrp5Zd5U6vPjgxrlv6q4wXagkPrO4CMucBqxlUGWbWdM08wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNgwCTb7UAp0VkQKuos7itU8nwFAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3Lzc3ZjJh YS1jYzBjLTRmMTUtOGIzOS1hZGRjZDg1NTIwMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvNzdmMmFh LWNjMGMtNGYxNS04YjM5LWFkZGNkODU1MjAyNi8xLzJEQUpOdnRRQ25SV1JBcTZp enVLMVR5ZkFVQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuRQEAwQCuav0MA0EAgACMAcDBQMqEx6AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMoSjANBgkqhkiG9w0BAQsFAAOCAQEAjjER xMBJ1ZYLbmiUH5kYGKG9Lc+AhbMkYd6QRj1tF738Cup0NNM28Pk49bWZl1g+fHb6 rHwIu3YNE3G0eydhlrO9Utkzd1+GfNpfNV7XaKKHqFJ2FO1ykbVv6Kl6VZaDrGDC d/SlqJ2hbgMflVOWlDikNjm7YyEQrmfv4WbgdKQGrPhZT65x6mHvx5fJJlzq4+6g VgTLm7CvTOqRZx513s/OVjOeUOnmkZwAQZKk3RuKn/Xr/3OyejGS2dx/1u76qQa9 S1o5LSsDpupFF+QxQa7tirs5CRddiuLzCTjH30OHIjrhjTOQ8H+7vS1QwJWxNsqv miM6s/ziIBIHsydpag== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:42 2026 by rpki-client