This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer File: 2OnkD_n7tigNo26XLyDTElAMGFw.cer (raw, json) Hash identifier: 8NzpRbYorLudpHQfAfGAXF0+04zCocSRpaYAPG1I4nA= Subject key identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8164315DB07425F88F6846C5613006 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212367 IP: 194.8.58.0/24 IP: 2a0b:cfc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:64:31:5d:b0:74:25:f8:8f:68:46:c5:61:30:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8e9e40ff9fbb6280da36e972f20d312500c185c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:f2:87:25:5c:20:37:2c:c5:63:65:e4:dc: ff:71:87:1b:46:a6:1c:75:ea:c0:4a:e8:05:1f:f8: 73:3d:e7:58:1b:7f:5f:51:5e:3f:c4:f2:47:a2:0a: ae:5b:1f:86:0c:80:6a:c4:0a:f2:9c:f4:98:a9:59: 71:37:d8:f1:a6:3e:98:b8:90:76:f5:82:81:04:da: 28:be:5e:12:45:1a:23:c0:51:f3:5d:6c:2a:9e:af: 3c:56:df:6f:9c:d8:b7:15:7d:d0:e6:4e:2f:83:4f: 9a:b8:7c:eb:2f:f3:7e:a6:3a:d3:b9:de:da:12:e4: ad:28:73:ea:8d:12:98:35:22:73:28:ed:51:f5:ea: 0c:83:a1:96:a9:2c:b2:70:ca:36:51:68:0f:2d:b0: 27:bd:a9:f2:c7:4e:8c:b9:87:df:38:d0:32:2a:da: 6a:7f:88:e7:6b:06:f3:4e:79:8a:a5:ae:6f:15:3e: 75:d2:76:ec:19:f3:3b:6d:ca:89:b8:cd:69:e4:44: e0:40:72:b7:e4:8e:4c:0e:ce:b2:c6:ac:06:ce:13: 55:27:e4:dc:90:9f:66:0a:dc:69:00:00:8d:75:84: c6:99:05:9c:b2:5e:59:9d:77:51:e8:9b:99:39:8a: 13:e6:59:50:ac:97:4c:53:5c:17:03:c4:0e:a5:75: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.58.0/24 IPv6: 2a0b:cfc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212367 Signature Algorithm: sha256WithRSAEncryption 0a:9d:91:63:83:34:b7:f6:49:33:db:a7:4a:d3:bc:77:9c:d1: a2:b1:1b:40:18:1f:3f:8f:81:b8:cd:f6:b6:b8:1c:44:b9:0d: 32:39:77:0c:d4:90:26:79:d7:24:26:30:92:e5:28:b8:9a:e1: 77:21:5c:e6:c1:b8:6d:67:4e:6e:e7:aa:97:e4:9a:b2:a1:5d: cd:bd:8f:c9:d8:c6:ba:22:08:12:56:1a:f2:4c:03:8d:f7:50: 82:a0:c7:f8:38:22:ab:84:25:79:01:3b:a2:42:d1:c9:24:bd: dc:7f:83:70:c1:14:f9:e7:8a:f8:8c:9b:c5:9f:dc:b3:72:14: 70:39:42:3b:02:00:6a:f1:c4:2f:1b:df:67:c3:55:39:e6:0b: b8:77:82:02:af:3b:f1:73:90:f5:62:4f:bc:4c:cc:32:33:14: 86:df:5d:49:59:4e:13:e3:6c:d0:05:e8:83:1c:5c:24:42:63: 52:3d:5b:42:cc:67:8a:95:b7:09:b7:80:9f:31:78:61:21:be: d2:14:4f:93:03:75:7b:53:06:d0:c5:20:b5:28:fa:5a:ee:b7: 22:44:b3:0f:85:97:03:e0:5b:06:82:2c:28:fc:ac:fd:19:e3: 93:91:e7:fc:08:f6:d4:21:53:ff:fc:ab:6e:bc:86:52:68:82: 55:bb:9d:74 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gWQxXbB0JfiPaEbFYTAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGU5ZTQwZmY5ZmJiNjI4MGRhMzZlOTcyZjIwZDMxMjUwMGMxODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ITyhyVcIDcsxWNl5Nz/cYcbRqYc derASugFH/hzPedYG39fUV4/xPJHogquWx+GDIBqxArynPSYqVlxN9jxpj6YuJB2 9YKBBNoovl4SRRojwFHzXWwqnq88Vt9vnNi3FX3Q5k4vg0+auHzrL/N+pjrTud7a EuStKHPqjRKYNSJzKO1R9eoMg6GWqSyycMo2UWgPLbAnvanyx06MuYffONAyKtpq f4jnawbzTnmKpa5vFT510nbsGfM7bcqJuM1p5ETgQHK35I5MDs6yxqwGzhNVJ+Tc kJ9mCtxpAACNdYTGmQWcsl5ZnXdR6JuZOYoT5llQrJdMU1wXA8QOpXXuZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNjp5A/5+7YoDaNuly8g0xJQDBhcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzg3Mzhi OS0yZDBhLTRlZjYtYWZhZC0xYWU1MDZlYTE3NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvODczOGI5 LTJkMGEtNGVmNi1hZmFkLTFhZTUwNmVhMTc2MC8xLzJPbmtEX243dGlnTm8yNlhM eURURWxBTUdGdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwgg6MA0EAgACMAcDBQMqC8/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM9jzANBgkqhkiG9w0BAQsFAAOCAQEACp2RY4M0t/ZJ M9unStO8d5zRorEbQBgfP4+BuM32trgcRLkNMjl3DNSQJnnXJCYwkuUouJrhdyFc 5sG4bWdObueql+SasqFdzb2PydjGuiIIElYa8kwDjfdQgqDH+Dgiq4QleQE7okLR ySS93H+DcMEU+eeK+IybxZ/cs3IUcDlCOwIAavHELxvfZ8NVOeYLuHeCAq878XOQ 9WJPvEzMMjMUht9dSVlOE+Ns0AXogxxcJEJjUj1bQsxnipW3CbeAnzF4YSG+0hRP kwN1e1MG0MUgtSj6Wu63IkSzD4WXA+BbBoIsKPys/Rnjk5Hn/Aj21CFT//yrbryG UmiCVbuddA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:37 2026 by rpki-client