This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer File: 2EPxqgSY2E95UyPB_2uuOvQCBtE.cer (raw, json) Hash identifier: CssyqBC2N2h+6+O1OPUhjkq9zCLL8oBaiuwHRI0cmgE= Subject key identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834B0FC325F96E9E4FEF935554B1A4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208584 IP: 2001:678:ab4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b0:fc:32:5f:96:e9:e4:fe:f9:35:55:4b:1a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d843f1aa0498d84f795323c1ff6bae3af40206d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:f3:c9:de:cb:dc:e2:d0:d9:3b:73:03:d5: 98:e1:88:45:33:8f:82:c4:c5:db:02:57:9b:43:12: 8f:fa:f8:94:b7:dc:b1:b2:0e:80:98:08:54:43:18: a4:2b:72:02:89:1d:aa:45:01:7a:ae:fd:34:41:86: 0a:c3:38:c6:9b:a7:dc:fa:fd:21:43:8b:e8:2d:42: 8d:15:4c:3f:65:05:d9:d7:36:a2:ee:53:d5:2f:5b: 67:ee:f9:bc:e8:ec:5c:bd:7f:0e:75:36:d4:fe:2d: 9e:1b:33:e0:26:75:ad:8f:da:11:6e:da:89:a5:03: e0:9e:b9:44:a3:6b:16:3d:b7:f6:00:fb:09:72:17: 8d:c6:9a:ac:b9:f6:59:b0:8f:73:09:26:19:d9:35: 49:2d:6e:aa:28:c6:7f:da:e0:c1:f3:25:cb:3c:2f: ae:e1:7e:b5:42:1e:cf:83:57:48:d0:f7:45:88:02: 71:39:57:f1:c1:ab:e2:83:65:52:c5:82:61:f5:67: 62:77:85:73:5c:de:68:cc:ac:ad:64:90:fc:6d:19: 06:42:e8:ae:27:d7:96:ba:8f:92:b9:f8:c8:21:21: 6d:e7:83:39:16:f4:4d:5f:4d:7b:fe:e3:e2:54:4c: 87:37:98:30:f8:72:85:a1:91:70:34:b2:92:af:5a: 1e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ab4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208584 Signature Algorithm: sha256WithRSAEncryption 61:6c:ce:96:01:9e:cb:56:22:90:9a:61:86:b2:ec:a1:2f:7f: f4:84:3a:fa:90:4c:b2:c9:82:d1:ae:d2:af:b2:97:44:e1:ab: 0a:4e:f0:86:35:19:fa:a8:c7:d5:ba:36:3d:09:84:af:10:a1: a8:e3:07:ce:c4:a8:f9:1a:03:67:94:aa:48:83:a8:27:9c:29: 04:e4:2d:f8:41:d2:12:97:51:e9:0d:0e:90:00:f5:00:65:88: ad:7e:74:34:5c:1c:ce:5e:9a:eb:d3:71:2f:37:15:e3:21:fb: 1b:c7:37:5b:2e:41:d5:bf:46:9a:04:9c:14:56:cc:1e:e8:31: 1d:b0:b6:b8:a2:7d:fa:d1:5c:a8:2e:39:50:b5:d4:ba:1e:1c: c3:d4:e4:5f:be:ed:d2:22:51:55:33:46:20:b7:8b:9f:ba:62: 56:f2:10:38:a3:6c:c7:4e:6f:2a:bd:5a:2f:c6:4e:a6:7d:05: 08:a2:c7:fa:3a:4a:00:7d:de:11:d7:ee:b5:ed:a6:2a:db:e9: e4:b9:81:56:b2:83:71:e3:86:23:b6:77:9f:c4:6e:f6:53:42: f1:7a:84:67:48:9c:bb:b8:08:35:7e:58:62:2e:7f:87:a9:d6: fc:8e:29:9d:dc:93:fb:7a:70:3b:b8:66:cf:53:38:89:a6:65: 4f:4b:4f:3b -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4NLD8Ml+W6eT++TVVSxpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODQzZjFhYTA0OThkODRmNzk1MzIzYzFmZjZiYWUzYWY0MDIwNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh3zyd7L3OLQ2TtzA9WY4YhFM4+C xMXbAlebQxKP+viUt9yxsg6AmAhUQxikK3ICiR2qRQF6rv00QYYKwzjGm6fc+v0h Q4voLUKNFUw/ZQXZ1zai7lPVL1tn7vm86OxcvX8OdTbU/i2eGzPgJnWtj9oRbtqJ pQPgnrlEo2sWPbf2APsJcheNxpqsufZZsI9zCSYZ2TVJLW6qKMZ/2uDB8yXLPC+u 4X61Qh7Pg1dI0PdFiAJxOVfxwavig2VSxYJh9Wdid4VzXN5ozKytZJD8bRkGQuiu J9eWuo+SufjIISFt54M5FvRNX017/uPiVEyHN5gw+HKFoZFwNLKSr1oewQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFNhD8aoEmNhPeVMjwf9rrjr0AgbRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2RhNGRk OS01OTRkLTQ1NmMtOWY3MS03NmExOTQ1NTRiMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvZGE0ZGQ5 LTU5NGQtNDU2Yy05ZjcxLTc2YTE5NDU1NGIwNS8xLzJFUHhxZ1NZMkU5NVV5UEJf MnV1T3ZRQ0J0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAq0MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMuyDANBgkqhkiG9w0BAQsFAAOCAQEAYWzOlgGey1YikJphhrLsoS9/9IQ6 +pBMssmC0a7Sr7KXROGrCk7whjUZ+qjH1bo2PQmErxChqOMHzsSo+RoDZ5SqSIOo J5wpBOQt+EHSEpdR6Q0OkAD1AGWIrX50NFwczl6a69NxLzcV4yH7G8c3Wy5B1b9G mgScFFbMHugxHbC2uKJ9+tFcqC45ULXUuh4cw9TkX77t0iJRVTNGILeLn7piVvIQ OKNsx05vKr1aL8ZOpn0FCKLH+jpKAH3eEdfute2mKtvp5LmBVrKDceOGI7Z3n8Ru 9lNC8XqEZ0icu7gINX5YYi5/h6nW/I4pndyT+3pwO7hmz1M4iaZlT0tPOw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:31 2026 by rpki-client