This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.cer (raw, json) Hash identifier: 8g8YzDNII3ZgrxwsmHowDhqapGMnr0lHXoPU3/AksgE= Subject key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8F650D95C8C0A290C7319B7052A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42907 IP: 77.245.224.0/20 IP: 2a05:9240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8f:65:0d:95:c8:c0:a2:90:c7:31:9b:70:52:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:5e:b1:0b:64:4f:6c:2f:5a:eb:44:e1:13: 66:40:d0:e6:8e:b4:35:e8:14:fd:b3:ed:32:6f:5b: f8:5c:92:83:68:90:1e:10:68:52:86:43:17:3c:5a: e4:c5:89:5a:24:54:18:93:b3:4f:57:59:e5:1c:67: a1:93:63:84:8f:7d:be:f9:d0:85:45:68:27:66:eb: fd:4f:b8:97:8c:cb:39:9d:21:a3:e8:2d:27:62:1d: 16:e4:95:3b:8a:a7:27:d0:cf:4c:e8:53:5a:43:46: 37:fc:cf:aa:84:0d:39:8c:61:9c:6a:06:3e:fa:72: 58:8c:a9:65:9e:9e:01:5f:83:85:5d:7d:ff:57:4a: 63:d7:ae:a2:ab:ad:05:c0:fb:ce:d8:d6:97:8b:4b: 2d:92:29:63:49:32:99:b5:10:c7:e7:09:88:65:35: 47:71:ef:6e:f0:81:26:8a:5d:8d:5d:c9:c0:24:2e: 73:e6:e7:29:9e:ab:95:3b:90:3c:1e:66:51:ff:85: e5:cf:77:6d:e1:0c:ad:d1:3a:c5:a1:89:b0:90:a9: 21:21:4b:c4:fa:de:03:91:d5:d5:9f:68:8c:72:c1: 7b:eb:7a:c9:2f:88:d9:b7:5f:3d:73:04:5b:2b:4e: c4:5d:e3:07:0f:4b:3d:3b:0b:d3:ad:55:16:cb:99: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.245.224.0/20 IPv6: 2a05:9240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42907 Signature Algorithm: sha256WithRSAEncryption 4a:ac:58:fc:a1:06:77:c1:7e:04:62:1c:84:a9:75:ef:65:88: b7:3c:d7:48:d9:a5:56:69:07:c4:dc:59:7b:6f:ae:7f:8a:c1: 51:72:98:61:f8:64:f8:4a:25:b3:5b:1d:02:e6:e3:74:8a:6b: 2b:52:61:a7:87:0b:8f:4d:37:50:42:d6:ed:99:68:ad:4e:f2: 53:00:1d:ee:b7:4c:01:1b:f9:48:ce:fc:90:ce:ca:fc:68:f4: 69:d8:cd:aa:cc:bc:e6:6a:d3:8c:63:eb:d8:73:bd:74:82:61: 28:e6:87:77:5f:ee:44:3c:31:d9:6e:6e:86:bf:dc:19:0b:3d: 15:b3:66:98:4f:76:0a:9b:29:e9:18:1c:19:94:40:57:3c:a9: 62:93:40:04:4d:0b:0a:31:e0:77:0c:62:1b:f0:68:ea:e7:12: d7:b8:a2:ae:7e:01:2e:35:fd:d1:1e:b5:be:92:f4:76:da:1e: 80:41:e1:e1:7f:37:7f:43:b2:1e:b0:57:7c:c1:41:3b:72:10: 7f:1a:11:3d:b6:ba:c2:ff:41:34:17:8a:b9:ba:40:af:e7:af: fe:45:13:88:8a:30:62:0a:18:d5:c1:a6:7f:16:5d:cd:ed:c9: 02:8b:43:18:2e:7f:d3:b3:f1:e9:57:56:6b:b3:58:08:ef:68: 74:34:16:6d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6Wo9lDZXIwKKQxzGbcFKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGQ2MDY0MTg2NDkwZDhjZWEyMzQ3ZmY3YTNhODI0OTJkMWY3OTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAJesQtkT2wvWutE4RNmQNDmjrQ1 6BT9s+0yb1v4XJKDaJAeEGhShkMXPFrkxYlaJFQYk7NPV1nlHGehk2OEj32++dCF RWgnZuv9T7iXjMs5nSGj6C0nYh0W5JU7iqcn0M9M6FNaQ0Y3/M+qhA05jGGcagY+ +nJYjKllnp4BX4OFXX3/V0pj166iq60FwPvO2NaXi0stkiljSTKZtRDH5wmIZTVH ce9u8IEmil2NXcnAJC5z5ucpnquVO5A8HmZR/4Xlz3dt4Qyt0TrFoYmwkKkhIUvE +t4DkdXVn2iMcsF763rJL4jZt189cwRbK07EXeMHD0s9OwvTrVUWy5n5FQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNjWBkGGSQ2M6iNH/3o6gkktH3l3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzdhYmRl Zi05MWFiLTQ2ZmItODJlMi01NjA4NWM5ZTUyMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvN2FiZGVm LTkxYWItNDZmYi04MmUyLTU2MDg1YzllNTIyZS8xLzJOWUdRWVpKRFl6cUkwZl9l anFDU1MwZmVYYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQETfXgMA0EAgACMAcDBQMqBZJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCnmzANBgkqhkiG9w0BAQsFAAOCAQEASqxY/KEGd8F+ BGIchKl172WItzzXSNmlVmkHxNxZe2+uf4rBUXKYYfhk+Eols1sdAubjdIprK1Jh p4cLj003UELW7ZlorU7yUwAd7rdMARv5SM78kM7K/Gj0adjNqsy85mrTjGPr2HO9 dIJhKOaHd1/uRDwx2W5uhr/cGQs9FbNmmE92Cpsp6RgcGZRAVzypYpNABE0LCjHg dwxiG/Bo6ucS17iirn4BLjX90R61vpL0dtoegEHh4X83f0OyHrBXfMFBO3IQfxoR Pba6wv9BNBeKubpAr+ev/kUTiIowYgoY1cGmfxZdze3JAotDGC5/07Px6VdWa7NY CO9odDQWbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:06 2026 by rpki-client