This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.cer (raw, json) Hash identifier: NLxD058DCnBsrgKtEHszMVetuXoRAWJ0uLAgjpcBxfQ= Subject key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC10C6FC47B76DD66F45C92565BEE270A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 09:46:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210108 IP: 185.38.220.0/24 IP: 194.49.100.0/22 IP: 2a13:ce00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:0c:6f:c4:7b:76:dd:66:f4:5c:92:56:5b:ee:27:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 09:46:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:e7:6d:21:d8:c6:25:b1:fa:d1:0f:3e:53: 50:96:a1:09:ab:3b:c1:b6:0f:ce:53:54:d0:2e:c5: 7c:51:b6:df:c8:9b:d7:ab:9f:14:78:cb:0d:c0:dc: d3:d7:cd:5b:58:92:64:53:1b:51:6c:c2:4a:d9:4f: a5:4d:e0:41:e2:8b:04:0d:7a:1d:7d:1e:a9:86:bb: 99:0f:7d:76:7d:27:4b:b6:d9:fd:c3:ce:66:a3:75: ea:d3:3b:d2:6e:d4:1d:fe:20:35:19:71:78:cc:a2: 0e:08:e2:d9:b1:cb:cc:35:51:90:ca:5b:99:76:4b: e2:14:f0:d9:6a:61:ee:58:3c:de:42:c2:bc:7f:42: a5:fd:35:7c:62:3c:08:42:69:a6:eb:65:63:96:43: 2e:83:f6:44:10:1d:a0:e7:b8:53:c1:f7:95:18:88: 20:2d:39:21:e8:03:79:38:08:69:9a:f4:0e:70:c7: d8:f4:6b:3c:08:f7:b4:e5:aa:ce:4f:16:60:af:8d: b5:2a:07:b0:8e:01:fd:0f:c3:a2:70:78:53:1d:22: c5:f5:ae:5a:cb:cb:d2:a8:8d:c1:6a:6e:5e:6c:4f: 6e:97:41:19:46:51:39:cc:29:96:e4:22:8c:39:09: 8e:4c:66:d4:8b:ed:aa:87:56:e7:5b:ea:b7:5f:78: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.220.0/24 194.49.100.0/22 IPv6: 2a13:ce00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210108 Signature Algorithm: sha256WithRSAEncryption 7a:45:7d:e1:08:b7:fa:46:f4:70:a0:e8:b0:a9:23:be:b8:30: 22:0c:be:41:65:52:93:0b:cd:ab:42:0d:85:1f:9a:33:b3:23: d8:6a:fa:8e:fb:16:5d:27:20:4a:c7:b3:9d:b4:99:f1:b8:e9: 3a:a3:f2:64:2c:7b:ea:b8:e0:42:47:b1:cf:86:b0:ee:8b:df: f4:f1:ff:17:89:42:c9:29:6c:f9:d5:38:00:7e:6d:48:5a:d7: bb:67:37:46:a3:be:2d:38:c9:36:9d:c1:5d:20:1a:0d:c3:9c: 3b:f9:e6:75:14:8f:c7:94:08:aa:1b:f4:49:43:00:c1:33:10: 26:62:26:a1:81:e4:2b:e1:2f:7d:aa:d7:dc:de:12:f1:3b:90: dc:bc:1d:a6:4f:d7:84:b2:85:05:f7:4c:2c:eb:4c:b4:e8:6a: 45:05:8d:cb:c2:36:7a:21:69:62:cb:8c:a7:88:07:07:40:63: ad:ee:91:0b:37:b1:90:8f:36:2b:d7:23:52:0e:7c:9d:7d:a1: 43:48:cb:b1:f3:06:cd:a2:ca:84:7c:9d:38:7c:cd:45:4b:a6: a1:64:62:af:29:d7:b0:f5:90:9a:80:a1:26:f3:c6:9d:1d:77: 53:93:e5:09:40:8b:f4:1b:97:b8:e3:a1:35:23:01:c4:a6:93: a9:74:6b:0c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZvBDG/Ee3bdZvRcklZb7icKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MDk0NjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTA3ODRmZDgxZDQ5ZWM0NDVhMDliMmQwNmY4ZTU2MGNkYWEwNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7jnbSHYxiWx+tEPPlNQlqEJqzvB tg/OU1TQLsV8UbbfyJvXq58UeMsNwNzT181bWJJkUxtRbMJK2U+lTeBB4osEDXod fR6phruZD312fSdLttn9w85mo3Xq0zvSbtQd/iA1GXF4zKIOCOLZscvMNVGQyluZ dkviFPDZamHuWDzeQsK8f0Kl/TV8YjwIQmmm62VjlkMug/ZEEB2g57hTwfeVGIgg LTkh6AN5OAhpmvQOcMfY9Gs8CPe05arOTxZgr421KgewjgH9D8OicHhTHSLF9a5a y8vSqI3Bam5ebE9ul0EZRlE5zCmW5CKMOQmOTGbUi+2qh1bnW+q3X3izXQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNkHhP2B1J7ERaCbLQb45WDNqgamMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2Y5MDk3 Yy0xMGMyLTRhZTYtOTRkZC0xNjEwYTBjOTkzYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZjkwOTdj LTEwYzItNGFlNi05NGRkLTE2MTBhMGM5OTNiNC8xLzJRZUVfWUhVbnNSRm9Kc3RC dmpsWU0ycUJxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuSbcAwQCwjFkMA0EAgACMAcDBQMqE84AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0vDANBgkqhkiG9w0BAQsFAAOCAQEAekV9 4Qi3+kb0cKDosKkjvrgwIgy+QWVSkwvNq0INhR+aM7Mj2Gr6jvsWXScgSseznbSZ 8bjpOqPyZCx76rjgQkexz4aw7ovf9PH/F4lCySls+dU4AH5tSFrXu2c3RqO+LTjJ Np3BXSAaDcOcO/nmdRSPx5QIqhv0SUMAwTMQJmImoYHkK+EvfarX3N4S8TuQ3Lwd pk/XhLKFBfdMLOtMtOhqRQWNy8I2eiFpYsuMp4gHB0Bjre6RCzexkI82K9cjUg58 nX2hQ0jLsfMGzaLKhHydOHzNRUumoWRirynXsPWQmoChJvPGnR13U5PlCUCL9BuX uOOhNSMBxKaTqXRrDA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:39 2026 by rpki-client