This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer File: 2Hwy4kled0lvwgKzAxZLpAjl0SI.cer (raw, json) Hash identifier: yvZnMy/8GFvwYueiiVGdOv/uSZbZjFGIAMDZHgo8EOM= Subject key identifier: D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3885D87B2A957326AC3F4B6731AF53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213262 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:85:d8:7b:2a:95:73:26:ac:3f:4b:67:31:af:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d87c32e2495e77496fc202b303164ba408e5d122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:63:0e:34:d7:98:ee:ad:1d:b6:9c:f8:39: 54:86:65:8a:cb:84:9c:89:0a:7a:21:2d:80:16:b6: d9:c5:12:9d:48:9d:8e:ad:ff:5b:72:39:f2:51:55: 8e:24:d7:48:bd:8e:36:e8:ef:1d:ca:1d:0a:c9:34: b9:43:1a:fa:d5:b0:5f:1d:a2:76:1b:89:bf:63:b5: 78:be:81:19:b2:c5:d0:b3:a8:88:f1:1a:7c:5a:8d: cf:c3:8c:c9:10:48:22:33:33:3e:8a:8d:ec:89:62: d5:a1:78:b4:1f:80:ff:c5:3a:35:3c:a6:b3:39:07: dd:bb:b6:ad:af:73:68:1a:7c:37:da:18:4e:b7:01: fe:ac:be:8f:1b:c1:34:f0:1d:b8:06:5e:ce:13:fc: 4d:f9:4f:9a:56:8d:b1:d1:7a:73:b5:a3:20:e4:0d: 90:ed:ff:c9:5d:f3:df:b3:75:d2:c5:28:e5:32:dc: 49:bc:89:ba:1d:2a:89:da:3f:cd:f4:6b:9c:46:34: 19:92:3f:1f:fe:e5:ac:63:13:98:7e:d5:63:df:7e: d7:9a:53:fe:41:36:cb:b1:49:35:fb:89:df:11:59: 61:f7:68:e9:c3:fd:ca:69:f5:3f:cb:c8:56:ee:7f: b8:6a:d7:b5:a2:81:d5:43:3e:8b:b4:cb:9b:4b:69: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213262 Signature Algorithm: sha256WithRSAEncryption 44:12:b1:ee:ba:16:e4:ee:97:4f:3a:3f:c1:5a:64:fa:64:88: 58:b6:e6:f9:f0:21:99:87:e3:71:bf:78:98:23:28:64:c0:56: da:f9:cc:23:94:bc:a9:66:cc:f8:14:0d:70:4b:1f:77:09:dc: fa:f2:31:9e:4a:40:70:65:8c:f6:bb:fb:3a:95:21:fb:33:7d: 1f:fe:09:08:60:36:dc:da:ab:42:8d:c2:01:c5:61:73:bd:1f: 8a:52:c3:7a:02:b3:2f:7c:27:39:b9:1f:98:72:50:c7:d8:19: 71:ae:84:b2:52:20:ec:00:fc:b9:b7:cd:88:dd:06:43:67:06: d5:f9:ea:c3:20:0c:f3:db:c1:5c:10:08:c2:e0:d4:b6:4f:7c: 0b:b9:b4:68:bf:e6:25:0d:73:60:cc:a0:22:60:64:38:dc:c4: 00:dd:f1:f8:48:e4:1c:f9:f0:59:30:19:86:dc:13:ad:68:e3: f0:79:52:29:e0:e8:bb:00:70:d3:c8:b7:76:40:7b:e0:6f:19: 46:c2:bf:56:e3:b2:98:23:c2:b0:9d:50:ba:c6:96:e7:76:43: 28:ff:01:b2:96:b6:89:01:96:66:b9:77:36:88:2b:5a:62:e9: 17:a7:bb:92:4b:a8:59:1f:1f:ff:0f:c6:af:06:2f:b6:a7:ae: f1:ae:60:da -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OIXYeyqVcyasP0tnMa9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODdjMzJlMjQ5NWU3NzQ5NmZjMjAyYjMwMzE2NGJhNDA4ZTVkMTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqNjDjTXmO6tHbac+DlUhmWKy4Sc iQp6IS2AFrbZxRKdSJ2Orf9bcjnyUVWOJNdIvY426O8dyh0KyTS5Qxr61bBfHaJ2 G4m/Y7V4voEZssXQs6iI8Rp8Wo3Pw4zJEEgiMzM+io3siWLVoXi0H4D/xTo1PKaz OQfdu7atr3NoGnw32hhOtwH+rL6PG8E08B24Bl7OE/xN+U+aVo2x0XpztaMg5A2Q 7f/JXfPfs3XSxSjlMtxJvIm6HSqJ2j/N9GucRjQZkj8f/uWsYxOYftVj337XmlP+ QTbLsUk1+4nfEVlh92jpw/3KafU/y8hW7n+4ate1ooHVQz6LtMubS2kSrQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNh8MuJJXndJb8ICswMWS6QI5dEiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzFlMTkx ZS0xMTNjLTQ0MzMtYWVmMC03MjQzYjk4NGE2MTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMWUxOTFl LTExM2MtNDQzMy1hZWYwLTcyNDNiOTg0YTYxNS8xLzJId3k0a2xlZDBsdndnS3pB eFpMcEFqbDBTSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBDjANBgkqhkiG9w0BAQsFAAOCAQEARBKx7roW5O6X Tzo/wVpk+mSIWLbm+fAhmYfjcb94mCMoZMBW2vnMI5S8qWbM+BQNcEsfdwnc+vIx nkpAcGWM9rv7OpUh+zN9H/4JCGA23NqrQo3CAcVhc70filLDegKzL3wnObkfmHJQ x9gZca6EslIg7AD8ubfNiN0GQ2cG1fnqwyAM89vBXBAIwuDUtk98C7m0aL/mJQ1z YMygImBkONzEAN3x+EjkHPnwWTAZhtwTrWjj8HlSKeDouwBw08i3dkB74G8ZRsK/ VuOymCPCsJ1QusaW53ZDKP8Bspa2iQGWZrl3NogrWmLpF6e7kkuoWR8f/w/GrwYv tqeu8a5g2g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:46 2026 by rpki-client