This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer (raw, json) Hash identifier: vX7QYgnvglA81iGfRA+PgjbCDkJ7WqqvyIgjJ5b0z5A= Subject key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E937E2CC878ACA66E3C77D9175C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.33.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e9:37:e2:cc:87:8a:ca:66:e3:c7:7d:91:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:0a:dc:7f:e0:81:88:37:79:e4:50:7c:b0: 72:a8:be:2f:da:97:e9:76:dd:14:b4:69:1d:12:50: 0b:56:86:b3:34:b2:15:6a:f4:c7:41:0a:e9:ee:68: 34:0c:f8:4a:c1:c9:71:d1:23:08:0c:30:fa:c8:92: 0e:d9:a0:8e:bf:0b:81:ff:e2:93:b8:87:b2:e9:04: 36:21:f8:d5:e6:03:28:b2:9e:8b:df:db:13:a6:ee: 26:3d:dc:38:36:6f:b5:a6:f3:20:f8:f4:49:06:bc: 5f:ed:0f:bf:c1:a7:50:ee:fa:60:00:e7:63:88:6e: 3b:c0:c7:c7:ab:3b:cb:46:97:c0:8c:58:ac:3b:b1: 11:48:f5:50:7e:b1:f0:9d:c0:ea:15:dc:86:9d:bb: 05:f9:d1:24:cd:1f:87:7c:ba:94:d5:64:e3:5b:7e: b7:7f:e0:7d:a0:1e:79:9f:d0:ba:ad:21:e9:f1:2e: b3:1f:83:8a:89:e7:c9:30:51:55:c1:f6:e2:19:38: b1:7c:1a:6b:30:67:45:89:a4:97:93:e1:cc:2f:8e: fc:0e:d1:af:10:03:35:bf:72:73:fb:e5:00:7d:97: 55:35:73:37:60:17:ae:52:1a:c6:ea:39:51:ba:81: 23:ea:29:0d:9d:8e:67:bc:8b:d5:3a:c1:69:ab:65: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption b1:15:dc:7d:7c:23:2b:ab:4a:e7:5f:b9:5a:7f:0d:3d:79:45: af:f2:2a:83:14:7b:9d:c4:1f:3b:65:60:15:d8:6c:35:fa:02: 70:08:7f:58:2c:21:0d:b4:c9:aa:0b:57:09:49:fc:f2:75:8d: 0d:ba:f8:b7:65:53:93:e2:08:ca:ff:d3:c8:3e:bb:43:70:f8: 8c:8e:28:43:16:ec:64:d3:09:61:5a:15:da:a2:04:cc:da:4c: d6:0b:23:b4:74:ce:8d:fc:eb:a2:54:f6:1f:d7:e1:99:5c:53: da:a9:f9:cc:51:be:61:0d:c8:6d:1c:aa:04:01:b7:2a:9a:31: 87:d4:84:d3:ea:4d:66:76:4c:cd:5b:41:f1:d8:20:08:c4:5d: 08:65:15:7f:53:57:6f:0a:fa:54:54:68:b0:ad:1c:63:5e:28: 0b:a2:4b:f9:e0:3b:cd:75:3c:c3:6f:ee:71:9b:b4:00:21:75: f8:40:a3:77:dd:6a:33:3b:a5:d9:54:3f:26:0c:b1:45:b5:02: 46:09:e9:47:b7:af:e1:37:3b:63:c9:0d:71:d5:49:7a:03:84: 5f:6f:b7:73:f4:68:54:9d:d9:ac:3b:0c:03:ba:a2:94:d1:d0: 0f:47:6e:ce:8a:03:eb:8f:7d:70:d2:30:a2:c6:4f:41:2f:50: 41:a5:8c:e9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt3WOk34syHispm48d9kXXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODgxZTU3NzdjY2U5OTBjMGIyYjBmNGMyOWNjOGQyY2Y5YWZlODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxwK3H/ggYg3eeRQfLByqL4v2pfp dt0UtGkdElALVoazNLIVavTHQQrp7mg0DPhKwclx0SMIDDD6yJIO2aCOvwuB/+KT uIey6QQ2IfjV5gMosp6L39sTpu4mPdw4Nm+1pvMg+PRJBrxf7Q+/wadQ7vpgAOdj iG47wMfHqzvLRpfAjFisO7ERSPVQfrHwncDqFdyGnbsF+dEkzR+HfLqU1WTjW363 f+B9oB55n9C6rSHp8S6zH4OKiefJMFFVwfbiGTixfBprMGdFiaSXk+HML478DtGv EAM1v3Jz++UAfZdVNXM3YBeuUhrG6jlRuoEj6ikNnY5nvIvVOsFpq2XgtwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFNiB5Xd8zpkMCysPTCnMjSz5r+g7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzNjOTVm My1kYzNkLTQ4ZWItYjZkNy1kODM1ZGUwOGJjZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvM2M5NWYz LWRjM2QtNDhlYi1iNmQ3LWQ4MzVkZTA4YmNmNi8xLzJJSGxkM3pPbVF3TEt3OU1L Y3lOTFBtdjZEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjSEwDQYJKoZIhvcNAQELBQADggEBALEV3H18 IyurSudfuVp/DT15Ra/yKoMUe53EHztlYBXYbDX6AnAIf1gsIQ20yaoLVwlJ/PJ1 jQ26+LdlU5PiCMr/08g+u0Nw+IyOKEMW7GTTCWFaFdqiBMzaTNYLI7R0zo3866JU 9h/X4ZlcU9qp+cxRvmENyG0cqgQBtyqaMYfUhNPqTWZ2TM1bQfHYIAjEXQhlFX9T V28K+lRUaLCtHGNeKAuiS/ngO811PMNv7nGbtAAhdfhAo3fdajM7pdlUPyYMsUW1 AkYJ6Ue3r+E3O2PJDXHVSXoDhF9vt3P0aFSd2aw7DAO6opTR0A9Hbs6KA+uPfXDS MKLGT0EvUEGljOk= -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:43 2026 by rpki-client