This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer File: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer (raw, json) Hash identifier: TgeHHpqeXRGT2gz+j0ergujnEy5C1zjFlIYPSzk4U0o= Subject key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35F38EB3375D022FFBA0FD03C410ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60752 IP: 185.26.0.0/22 IP: 193.35.225.0/24 IP: 2a00:8320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f3:8e:b3:37:5d:02:2f:fb:a0:fd:03:c4:10:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:7a:ba:a7:95:db:38:12:cb:a2:d4:a9:7b: dc:c5:8d:3b:99:a5:14:aa:6e:2d:11:bd:d7:a5:60: de:01:7f:5d:9b:fd:3c:b7:22:89:85:65:03:38:b4: 01:a8:03:64:28:e2:17:58:64:2d:bc:3e:99:50:1f: 90:cd:0b:23:aa:d3:fb:4c:a6:06:fb:85:4c:62:be: 2a:a7:ba:b7:d0:20:c3:7c:0a:9e:0a:49:79:b0:75: 81:bd:77:49:9c:3f:a0:c7:80:36:e9:d7:92:f6:d6: 32:98:f9:8d:2d:6e:27:3a:81:8b:d3:0e:7a:9b:84: 10:26:15:44:3e:2d:07:70:81:8b:53:7d:c7:26:dd: 5b:9f:07:33:dc:8e:83:a1:5b:ca:58:50:0c:e9:b2: 7e:c9:60:cf:1e:52:71:8e:12:97:c8:39:76:36:ee: 74:f5:b0:5b:5e:0f:6d:ee:a9:a8:9e:22:67:11:6f: d4:84:8d:17:b6:6e:59:85:85:94:55:03:9d:a8:55: 87:19:1f:3d:d9:9c:0a:5f:76:16:5c:38:46:d8:ab: a6:b4:75:7c:97:a7:fa:20:00:bc:ac:f6:0f:00:55: 5f:3d:e9:7b:fc:a3:6a:54:2b:d3:3d:e4:f9:ba:a4: ea:84:78:4b:8b:65:29:57:aa:d1:57:99:ff:40:56: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.0.0/22 193.35.225.0/24 IPv6: 2a00:8320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60752 Signature Algorithm: sha256WithRSAEncryption 9c:6b:dd:cb:9d:42:87:24:9e:1d:72:a6:06:9b:89:b2:f8:17: 0d:77:c8:6d:7e:1b:d9:88:28:fe:98:7d:a8:1d:3b:48:77:06: 96:c0:44:c2:22:80:ab:1a:1a:44:82:7f:d2:fd:35:9b:6f:31: da:76:f3:ea:88:9e:d2:3d:9e:32:42:cd:6c:a8:29:29:8b:2e: a4:47:39:20:55:76:65:88:26:e0:67:08:c0:c9:78:3e:3c:da: 0b:75:ce:78:bc:ca:10:3f:a4:15:6b:2f:5f:7e:74:07:49:56: 68:73:35:53:91:a4:2a:33:18:dd:ce:e5:57:81:40:9e:6b:d5: d6:b2:4f:29:27:25:25:ee:d6:1f:57:f6:3d:92:92:08:a8:45: 3a:71:72:09:a2:fb:e5:44:f5:e2:7b:51:0c:c6:9f:a6:08:d6: d8:b0:7a:b8:20:f0:29:23:81:2c:dd:1e:b3:6f:df:a5:54:95: c3:c8:bf:ad:c3:7b:a3:3b:eb:6d:d6:62:c0:23:7a:67:b2:a0: 7c:db:6e:b5:03:51:bf:da:39:99:4d:c0:8c:e6:f0:08:f2:3b: 8a:8c:b7:9a:6b:96:54:db:ac:32:24:52:f7:83:e0:dd:53:54: fd:2c:84:d8:94:66:5e:ed:44:bc:44:75:92:23:a3:2c:79:65: 8b:59:84:c7 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NfOOszddAi/7oP0DxBDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODMyMGJkNGVmODU4ZmQ2MmJiMjQ4NWQwOGIwYTg2OTIwZTkxMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3N6uqeV2zgSy6LUqXvcxY07maUU qm4tEb3XpWDeAX9dm/08tyKJhWUDOLQBqANkKOIXWGQtvD6ZUB+QzQsjqtP7TKYG +4VMYr4qp7q30CDDfAqeCkl5sHWBvXdJnD+gx4A26deS9tYymPmNLW4nOoGL0w56 m4QQJhVEPi0HcIGLU33HJt1bnwcz3I6DoVvKWFAM6bJ+yWDPHlJxjhKXyDl2Nu50 9bBbXg9t7qmoniJnEW/UhI0Xtm5ZhYWUVQOdqFWHGR892ZwKX3YWXDhG2KumtHV8 l6f6IAC8rPYPAFVfPel7/KNqVCvTPeT5uqTqhHhLi2UpV6rRV5n/QFbj/wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNgyC9TvhY/WK7JIXQiwqGkg6RHBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2JkODFl Ny0zOTdlLTRkNWQtYTVmMS0zYTBmYWEyOGI1YWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvYmQ4MWU3 LTM5N2UtNGQ1ZC1hNWYxLTNhMGZhYTI4YjVhYy8xLzJESUwxTy1GajlZcnNraGRD TENvYVNEcEVjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuRoAAwQAwSPhMA0EAgACMAcDBQAqAIMgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtUDANBgkqhkiG9w0BAQsFAAOCAQEAnGvd y51ChySeHXKmBpuJsvgXDXfIbX4b2Ygo/ph9qB07SHcGlsBEwiKAqxoaRIJ/0v01 m28x2nbz6oie0j2eMkLNbKgpKYsupEc5IFV2ZYgm4GcIwMl4PjzaC3XOeLzKED+k FWsvX350B0lWaHM1U5GkKjMY3c7lV4FAnmvV1rJPKSclJe7WH1f2PZKSCKhFOnFy CaL75UT14ntRDMafpgjW2LB6uCDwKSOBLN0es2/fpVSVw8i/rcN7ozvrbdZiwCN6 Z7KgfNtutQNRv9o5mU3AjObwCPI7ioy3mmuWVNusMiRS94Pg3VNU/SyE2JRmXu1E vER1kiOjLHlli1mExw== -----END CERTIFICATE-----Generated at Sat Feb 7 17:22:47 2026 by rpki-client