This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2N0PBmo-JPGmYxEqHyjp2DsuzXM.cer File: 2N0PBmo-JPGmYxEqHyjp2DsuzXM.cer (raw, json) Hash identifier: w0QHqHUVy2ZQqqa4mcRuhYlz8z68MXft1savfrd8p5U= Subject key identifier: D8:DD:0F:06:6A:3E:24:F1:A6:63:11:2A:1F:28:E9:D8:3B:2E:CD:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE082CCE755F596F7D88E2700089AB258 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 12:23:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41484 IP: 31.25.0.0/21 IP: 37.72.112.0/21 IP: 176.62.208.0/21 IP: 185.4.156.0/22 IP: 185.68.104.0/22 IP: 2a02:5680::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:82:cc:e7:55:f5:96:f7:d8:8e:27:00:08:9a:b2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 12:23:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8dd0f066a3e24f1a663112a1f28e9d83b2ecd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:ea:a7:f6:f4:66:8d:eb:e8:5e:f6:90:67: 12:02:6a:b1:cb:6b:ef:e1:f9:c1:cd:93:fc:f1:aa: c0:b8:a4:a8:5a:64:af:99:e3:94:2e:9d:50:5f:a6: 6b:f7:d4:61:3f:be:fc:85:fe:c1:65:f5:bd:99:c6: 9b:17:74:02:1d:3b:bf:3f:59:c8:d4:33:16:83:6f: ce:41:68:55:2d:c7:3a:f7:fc:84:60:59:8e:62:84: 8b:90:09:5a:a8:2b:f8:76:e8:96:4a:47:78:1c:ca: 3c:28:7e:32:ae:c9:13:6d:66:48:94:2c:e2:3f:c4: 8c:53:fc:6b:8d:b3:f9:f0:92:57:03:cb:91:93:0a: d4:69:41:2b:8e:a5:99:66:5e:d5:ad:90:8a:14:77: 78:ef:42:d5:10:34:41:e2:0a:db:e2:a9:29:78:f1: 72:cc:e9:6b:29:72:af:e5:f4:a8:9d:26:6c:ef:5e: ab:64:69:07:f9:6f:df:b4:9a:62:47:a9:aa:5a:47: d0:ed:4f:1c:70:9a:8d:4a:eb:c0:a5:2a:09:53:16: 6b:38:71:ef:ff:a1:aa:9f:8d:83:de:cd:53:a1:83: 5f:c2:c0:29:14:d4:94:2d:e5:fa:32:60:4b:1f:fe: 3f:ae:1f:c5:4c:78:c9:a5:ca:e8:55:83:0a:ba:80: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DD:0F:06:6A:3E:24:F1:A6:63:11:2A:1F:28:E9:D8:3B:2E:CD:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.0.0/21 37.72.112.0/21 176.62.208.0/21 185.4.156.0/22 185.68.104.0/22 IPv6: 2a02:5680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41484 Signature Algorithm: sha256WithRSAEncryption 20:36:bf:04:38:cf:02:cd:af:3d:c9:5d:f7:61:38:e2:e0:7c: 43:27:73:e3:f2:5d:fe:8c:2a:0d:31:e1:7e:62:db:f6:4f:e2: d3:d6:e1:6d:18:86:db:71:77:3c:74:fc:45:94:70:58:5c:67: 9f:b3:a6:de:16:62:e7:7f:cc:b9:57:f8:1e:04:07:ea:6f:27: 43:10:e3:a4:04:2b:3e:0c:1e:ba:21:43:78:43:17:90:1b:8b: 83:d5:89:d8:18:bb:eb:96:09:5d:5e:d2:43:13:4c:a2:5c:38: a2:2e:bb:98:55:12:ea:12:2a:93:cd:ea:28:f8:ab:6e:6e:15: 96:2f:7c:19:56:0a:a2:eb:6b:d4:3a:47:7c:05:fe:04:91:fa: dc:4c:12:f1:c3:4f:df:b5:76:7b:1e:63:68:e4:9c:dd:46:e3: cc:94:7d:99:a5:20:b0:a0:0f:47:83:bd:55:a6:9b:fb:f2:81: 15:28:63:f6:10:83:7b:c9:f8:95:48:0f:ff:06:af:d1:45:b8: c7:f1:30:83:b2:01:56:8a:01:36:f9:78:89:ae:41:93:a4:88: 9e:cd:fe:17:15:0e:32:91:6e:17:f4:7e:cd:59:7e:f3:54:b7: 51:b6:e6:43:ea:90:d6:dd:82:88:d0:9d:ed:16:aa:f6:f0:ad: b1:6b:18:f4 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZvggsznVfWW99iOJwAImrJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTIyMzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGRkMGYwNjZhM2UyNGYxYTY2MzExMmExZjI4ZTlkODNiMmVjZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKPqp/b0Zo3r6F72kGcSAmqxy2vv 4fnBzZP88arAuKSoWmSvmeOULp1QX6Zr99RhP778hf7BZfW9mcabF3QCHTu/P1nI 1DMWg2/OQWhVLcc69/yEYFmOYoSLkAlaqCv4duiWSkd4HMo8KH4yrskTbWZIlCzi P8SMU/xrjbP58JJXA8uRkwrUaUErjqWZZl7VrZCKFHd470LVEDRB4grb4qkpePFy zOlrKXKv5fSonSZs716rZGkH+W/ftJpiR6mqWkfQ7U8ccJqNSuvApSoJUxZrOHHv /6Gqn42D3s1ToYNfwsApFNSULeX6MmBLH/4/rh/FTHjJpcroVYMKuoA5LwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFNjdDwZqPiTxpmMRKh8o6dg7Ls1zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2U0Y2Rj Ny00MDAxLTRkMDktOWIyOC1kZTRhZjIyOWUzYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTRjZGM3 LTQwMDEtNGQwOS05YjI4LWRlNGFmMjI5ZTNiYS8xLzJOMFBCbW8tSlBHbVl4RXFI eWpwMkRzdXpYTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDHxkAAwQDJUhwAwQDsD7QAwQCuQScAwQCuURo MA0EAgACMAcDBQAqAlaAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCiDDANBgkq hkiG9w0BAQsFAAOCAQEAIDa/BDjPAs2vPcld92E44uB8Qydz4/Jd/owqDTHhfmLb 9k/i09bhbRiG23F3PHT8RZRwWFxnn7Om3hZi53/MuVf4HgQH6m8nQxDjpAQrPgwe uiFDeEMXkBuLg9WJ2Bi765YJXV7SQxNMolw4oi67mFUS6hIqk83qKPirbm4Vli98 GVYKoutr1DpHfAX+BJH63EwS8cNP37V2ex5jaOSc3UbjzJR9maUgsKAPR4O9Vaab +/KBFShj9hCDe8n4lUgP/wav0UW4x/Ewg7IBVooBNvl4ia5Bk6SIns3+FxUOMpFu F/R+zVl+81S3UbbmQ+qQ1t2CiNCd7Raq9vCtsWsY9A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:38 2026 by rpki-client