This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.cer (raw, json) Hash identifier: SF8zwpsIVk7m71u4Sp3Td9RCJK/rWypHjUPZ5WLxet4= Subject key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78344B5037F31DA4D7B9A5CD6558A0A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210669 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4b:50:37:f3:1d:a4:d7:b9:a5:cd:65:58:a0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d885055d70398cf0c72cceac5e581ad40f203efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bc:97:bf:aa:20:db:62:7d:4b:32:78:d0:4c: 91:0c:d6:26:36:b7:d7:71:dd:04:39:96:96:93:bd: f4:cd:4c:cd:4c:32:6e:12:05:53:6f:b5:ef:b8:46: 0c:7e:03:00:ae:87:d4:b1:00:13:01:7e:df:76:b3: 19:d5:2d:fa:2e:f3:32:7a:3f:7f:18:e4:57:8d:47: 8c:42:b3:9f:78:89:c4:ad:7c:6a:af:06:eb:40:03: 76:42:61:33:d1:70:8a:d1:11:1f:d7:13:b4:46:d6: 07:79:ab:20:c8:5a:15:9d:cd:0a:de:67:da:89:68: 60:4e:d8:18:8e:7f:59:f1:7c:a2:9d:fb:64:3a:9a: eb:6e:79:53:d1:85:3f:fc:ae:24:7c:8a:bc:41:06: d2:e6:a4:32:42:ab:23:62:25:fe:91:3a:5d:ce:c4: 3b:c7:4f:fd:d5:7c:f4:ba:7d:5d:7a:7a:4b:a2:aa: 72:53:78:e3:04:4c:cf:fa:6b:d8:92:3b:3d:c3:ce: 8c:d6:bf:f9:05:51:63:71:0a:40:58:ef:cf:81:af: 08:43:21:3b:74:e9:c6:76:98:64:5e:78:16:f3:9e: 27:3d:33:84:0c:e7:de:b7:5a:4f:a8:f2:f5:c8:1a: b2:6b:1e:36:f2:92:56:de:00:5b:60:46:60:ea:81: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210669 Signature Algorithm: sha256WithRSAEncryption 66:78:06:4a:c8:97:d0:e2:70:f7:38:85:9e:b0:4f:3b:3b:b8: 34:f9:96:2c:a1:77:04:82:5b:c8:1f:28:0f:92:ed:58:9d:77: 8d:07:27:ad:ba:de:82:9b:f9:95:54:b9:5b:78:d0:22:5e:1e: 68:9e:3d:f3:c5:90:87:02:0d:f5:a4:e2:2b:a2:f7:17:24:1f: 3a:67:1d:c0:33:3f:b8:cb:8b:74:47:fc:a5:f2:84:a2:ad:33: e7:89:4d:fd:36:25:23:5d:dc:f9:4e:07:a2:0f:91:e3:98:12: d1:ea:f0:a9:40:1b:f4:a9:56:ca:22:35:1d:57:d5:d5:a2:ea: ce:00:47:4b:dc:db:e1:dd:eb:73:85:4a:0f:8f:00:fd:a9:e9: 9f:8d:7a:34:88:e2:71:c6:6b:f7:b5:da:d2:b3:81:17:88:27: d3:a0:81:bc:fd:c4:33:fb:d4:63:d2:bf:5f:72:ac:41:e8:e0: f6:6b:c6:ee:29:e4:53:9f:2d:ef:ae:b0:1e:10:e1:07:1f:03: 98:a5:c6:f2:4d:09:b5:b9:98:78:cb:8f:b6:a0:29:5d:e0:cd: f0:49:40:9d:6d:2e:fb:f6:73:bb:81:7c:61:b6:f5:c6:36:e1: 25:3f:16:b4:c3:8b:90:58:67:3a:d3:13:2c:0a:0a:48:28:1c: f4:70:b5:5b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NEtQN/MdpNe5pc1lWKClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODg1MDU1ZDcwMzk4Y2YwYzcyY2NlYWM1ZTU4MWFkNDBmMjAzZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3byXv6og22J9SzJ40EyRDNYmNrfX cd0EOZaWk730zUzNTDJuEgVTb7XvuEYMfgMArofUsQATAX7fdrMZ1S36LvMyej9/ GORXjUeMQrOfeInErXxqrwbrQAN2QmEz0XCK0REf1xO0RtYHeasgyFoVnc0K3mfa iWhgTtgYjn9Z8XyinftkOprrbnlT0YU//K4kfIq8QQbS5qQyQqsjYiX+kTpdzsQ7 x0/91Xz0un1denpLoqpyU3jjBEzP+mvYkjs9w86M1r/5BVFjcQpAWO/Pga8IQyE7 dOnGdphkXngW854nPTOEDOfet1pPqPL1yBqyax428pJW3gBbYEZg6oH/IwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNiFBV1wOYzwxyzOrF5YGtQPID78MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzgyYWYy OC1iNjM0LTQ2M2EtYjZiZS0xY2EzYzY3ZjE1MDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvODJhZjI4 LWI2MzQtNDYzYS1iNmJlLTFjYTNjNjdmMTUwNi8xLzJJVUZYWEE1alBESExNNnNY bGdhMUE4Z1B2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM27TANBgkqhkiG9w0BAQsFAAOCAQEAZngGSsiX0OJw 9ziFnrBPOzu4NPmWLKF3BIJbyB8oD5LtWJ13jQcnrbregpv5lVS5W3jQIl4eaJ49 88WQhwIN9aTiK6L3FyQfOmcdwDM/uMuLdEf8pfKEoq0z54lN/TYlI13c+U4Hog+R 45gS0erwqUAb9KlWyiI1HVfV1aLqzgBHS9zb4d3rc4VKD48A/anpn416NIjiccZr 97Xa0rOBF4gn06CBvP3EM/vUY9K/X3KsQejg9mvG7inkU58t766wHhDhBx8DmKXG 8k0JtbmYeMuPtqApXeDN8ElAnW0u+/Zzu4F8Ybb1xjbhJT8WtMOLkFhnOtMTLAoK SCgc9HC1Ww== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:43 2026 by rpki-client