This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer File: 2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer (raw, json) Hash identifier: dmBiqar695fqR2RVPd3yXkWCJ5TdV7UbZfxrOLih/KI= Subject key identifier: D8:68:2D:2C:CA:D4:E4:1A:55:20:94:97:EE:0F:E2:7F:39:01:BB:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C715599CF3E89429B68169E1B90098 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207972 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:15:59:9c:f3:e8:94:29:b6:81:69:e1:b9:00:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8682d2ccad4e41a55209497ee0fe27f3901bb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:76:13:c3:9a:30:73:c9:53:3f:66:3b:47: 14:ca:4f:69:d3:4b:f3:eb:4e:20:b7:6e:19:fc:26: bf:29:99:28:3a:46:2b:8e:35:7d:e0:94:03:b4:77: 69:74:76:47:15:4b:15:97:03:a3:49:9c:e6:31:c4: 70:10:1a:73:ae:85:c4:dd:24:e6:d7:05:33:95:c9: 79:97:26:c4:c3:d3:f7:1c:a8:4b:a1:b2:18:a8:f1: 6c:cf:e7:8d:00:09:32:9f:66:aa:f6:f2:45:29:17: 8d:c0:00:24:e7:6d:f1:4b:08:9a:e1:aa:43:a1:a9: c7:10:25:f7:88:d5:3e:c1:02:01:3b:0a:f1:aa:4e: dc:a3:44:1f:4e:53:d7:9c:20:27:86:ea:8e:fa:c2: 4b:94:44:91:f9:20:d5:cd:87:4f:57:11:46:78:2c: b0:f1:e6:a4:46:dd:e5:b8:fc:3f:c9:0f:80:56:4f: ea:40:39:5d:95:6d:fd:76:9d:be:b1:1e:a7:11:4a: dd:af:2f:08:9c:74:f7:d4:b4:83:77:80:b4:45:08: 2f:13:82:3a:52:c9:8f:4a:47:e5:56:dd:e4:94:a5: 05:5e:2d:d0:10:ca:43:35:3f:41:be:36:13:94:dc: f0:c0:51:db:1d:2e:12:e3:86:61:e8:ab:d6:c6:ce: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:2D:2C:CA:D4:E4:1A:55:20:94:97:EE:0F:E2:7F:39:01:BB:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207972 Signature Algorithm: sha256WithRSAEncryption ad:f8:6c:e8:b5:fd:58:23:7b:46:86:d4:25:9c:6c:a9:60:44: b2:23:6b:71:8a:97:0c:43:50:08:a4:98:b2:c6:d6:ee:f4:9e: 6c:2c:88:90:07:55:4c:5a:7c:11:d8:3d:e5:cf:d7:dd:7f:f8: 09:87:63:47:0a:cf:66:4a:91:ad:0c:e2:86:51:31:40:ef:b2: d6:57:15:fc:b2:1c:35:d6:ef:5d:7d:8a:de:bc:98:fa:0d:c6: 11:e5:57:c4:8e:26:cc:23:01:27:05:bc:8a:d2:36:b3:5b:ca: 9c:7f:a9:3d:98:28:06:64:f8:9c:3c:b2:7e:b8:e3:7f:b5:c0: 75:8d:74:b8:3c:48:76:ea:83:7a:0c:2e:06:88:6d:56:6b:4e: ea:67:92:a3:d6:4a:a2:bf:36:9e:35:fc:37:d2:aa:6f:5b:01: 53:2b:db:80:69:49:fa:6f:12:7d:7f:f2:c9:9a:c5:22:6b:65: 07:3f:50:e6:87:3c:81:1b:8c:c8:22:95:89:27:03:5d:da:49: 38:2c:0c:e2:61:6b:cf:53:ee:2a:7f:31:38:17:a8:a5:e2:39: 55:48:e4:4c:6b:ae:26:1d:dc:b7:34:dc:fe:a6:f8:7b:81:37: b6:ab:d1:46:63:b6:75:de:56:63:cf:a7:12:99:8e:8a:1c:c1: b9:c4:18:9c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xxVZnPPolCm2gWnhuQCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODY4MmQyY2NhZDRlNDFhNTUyMDk0OTdlZTBmZTI3ZjM5MDFiYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32l2E8OaMHPJUz9mO0cUyk9p00vz 604gt24Z/Ca/KZkoOkYrjjV94JQDtHdpdHZHFUsVlwOjSZzmMcRwEBpzroXE3STm 1wUzlcl5lybEw9P3HKhLobIYqPFsz+eNAAkyn2aq9vJFKReNwAAk523xSwia4apD oanHECX3iNU+wQIBOwrxqk7co0QfTlPXnCAnhuqO+sJLlESR+SDVzYdPVxFGeCyw 8eakRt3luPw/yQ+AVk/qQDldlW39dp2+sR6nEUrdry8InHT31LSDd4C0RQgvE4I6 UsmPSkflVt3klKUFXi3QEMpDNT9BvjYTlNzwwFHbHS4S44Zh6KvWxs4EgQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNhoLSzK1OQaVSCUl+4P4n85AbtRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2M2OWFh Mi00OThkLTQ0MWItOGIxNy01YzdlOWZlNmUxYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvYzY5YWEy LTQ5OGQtNDQxYi04YjE3LTVjN2U5ZmU2ZTFhOS8xLzJHZ3RMTXJVNUJwVklKU1g3 Z19pZnprQnUxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMsZDANBgkqhkiG9w0BAQsFAAOCAQEArfhs6LX9WCN7 RobUJZxsqWBEsiNrcYqXDENQCKSYssbW7vSebCyIkAdVTFp8Edg95c/X3X/4CYdj RwrPZkqRrQzihlExQO+y1lcV/LIcNdbvXX2K3ryY+g3GEeVXxI4mzCMBJwW8itI2 s1vKnH+pPZgoBmT4nDyyfrjjf7XAdY10uDxIduqDegwuBohtVmtO6meSo9ZKor82 njX8N9Kqb1sBUyvbgGlJ+m8SfX/yyZrFImtlBz9Q5oc8gRuMyCKViScDXdpJOCwM 4mFrz1PuKn8xOBeopeI5VUjkTGuuJh3ctzTc/qb4e4E3tqvRRmO2dd5WY8+nEpmO ihzBucQYnA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:40 2026 by rpki-client