This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer (raw, json) Hash identifier: o8k7/c0ejO+yXtYcNkdEmn8kuzPmr+2gBY4bM76UYBs= Subject key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC435A1F562CD00B819F0A8BE03314705 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 16 Jan 2026 00:30:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.132.48.0/21 IP: 2a11:5600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c4:35:a1:f5:62:cd:00:b8:19:f0:a8:be:03:31:47:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 16 00:30:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d908647efb88210f016b6756d3766e9295944aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:fd:1a:da:fd:44:c3:60:8a:06:51:1e:0b: 74:53:16:4e:35:1c:76:7b:ba:f0:e2:b4:b9:99:3e: 96:c4:b4:1b:fc:45:65:5e:e9:e8:c2:f3:e0:30:b1: 2f:66:41:5e:1a:66:ab:9d:da:d6:d9:fa:65:5c:58: 4d:ab:be:bc:55:15:56:5d:42:b1:34:c9:b4:a1:39: 87:9c:0b:db:35:e8:64:c2:90:d8:2e:13:77:94:92: 47:9b:70:52:60:7c:84:fd:5d:66:2b:a6:8e:32:c4: 9f:6d:4b:a6:de:32:76:e7:c2:89:cb:7d:98:87:b0: d0:33:fc:de:ab:a0:6a:1a:89:f6:67:12:fa:18:45: 9d:ec:90:84:ef:b0:43:26:70:e9:a3:3b:ab:e6:2e: 12:43:b5:51:a8:4f:b4:71:5a:d5:82:fd:6e:97:84: c6:b8:2a:8a:2e:7f:b1:f3:2f:fe:46:ca:30:dd:38: 6d:6b:52:63:04:09:10:e0:44:e0:83:fb:8f:11:e5: bd:c9:50:22:ab:e6:b9:97:45:b9:0a:ee:bf:79:dd: 54:ed:c7:8b:a6:c4:0d:9a:56:7e:9a:a9:ea:77:2e: f4:36:7b:94:c0:85:7a:bf:72:02:f2:d3:8b:2e:92: 4c:68:6e:f4:df:c5:b4:4d:b4:c8:58:86:9c:85:59: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.132.48.0/21 IPv6: 2a11:5600::/29 Signature Algorithm: sha256WithRSAEncryption 82:c6:10:5f:79:6b:8d:69:c9:a4:d6:87:c5:03:b9:47:b9:14: 3a:b1:0f:39:41:62:a5:4d:95:77:5f:bc:90:ee:4b:23:02:ae: 47:24:d0:ae:40:5b:eb:ef:7e:59:fa:4f:d5:16:96:7f:2f:3c: 63:48:7c:17:05:3b:10:bd:87:39:34:6c:cb:73:f3:d0:94:15: 95:5b:7a:e8:49:e1:98:e4:1e:6c:53:0c:9e:67:e6:ac:cf:d7: eb:40:a6:5e:35:34:32:9a:08:12:23:1a:f8:19:a2:a6:74:cc: bd:d4:c0:0d:16:b2:ea:85:a1:da:f6:dd:21:88:65:fd:2c:55: a3:38:da:d5:f2:2d:7c:b4:54:b0:f6:ba:9e:74:f4:a0:31:64: fb:d2:34:c4:e1:a9:15:95:cc:c4:b9:cc:4f:cb:83:92:5d:34: cc:9b:a3:c5:0f:c6:54:9f:f3:d8:ba:88:aa:66:d2:98:6f:5f: 79:53:e6:bd:07:5e:8b:d0:52:cb:c5:67:db:fe:64:4b:94:ba: 82:d0:42:a1:83:3d:0d:f8:41:ef:ec:e9:f3:a0:80:cd:a4:22: a0:a6:d6:7e:32:53:25:9e:cc:6b:29:8c:72:c4:9a:19:ee:f1: d8:76:85:eb:e7:4f:c1:0b:97:d1:d3:a5:7a:50:b5:59:79:0d: 3e:39:b1:ac -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZvENaH1Ys0AuBnwqL4DMUcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE2MDAzMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTA4NjQ3ZWZiODgyMTBmMDE2YjY3NTZkMzc2NmU5Mjk1OTQ0YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvf9Gtr9RMNgigZRHgt0UxZONRx2 e7rw4rS5mT6WxLQb/EVlXunowvPgMLEvZkFeGmarndrW2fplXFhNq768VRVWXUKx NMm0oTmHnAvbNehkwpDYLhN3lJJHm3BSYHyE/V1mK6aOMsSfbUum3jJ258KJy32Y h7DQM/zeq6BqGon2ZxL6GEWd7JCE77BDJnDpozur5i4SQ7VRqE+0cVrVgv1ul4TG uCqKLn+x8y/+Rsow3Thta1JjBAkQ4ETgg/uPEeW9yVAiq+a5l0W5Cu6/ed1U7ceL psQNmlZ+mqnqdy70NnuUwIV6v3IC8tOLLpJMaG7038W0TbTIWIachVnI/QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNkIZH77iCEPAWtnVtN2bpKVlEqjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzAxOWQ1 ZS0wZDViLTQyMzEtYmRhZC00MzI2NWVmOTVkOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMDE5ZDVl LTBkNWItNDIzMS1iZGFkLTQzMjY1ZWY5NWQ5Mi8xLzJRaGtmdnVJSVE4QmEyZFcw M1p1a3BXVVNxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDsoQwMA0EAgACMAcDBQMqEVYAMA0GCSqGSIb3 DQEBCwUAA4IBAQCCxhBfeWuNacmk1ofFA7lHuRQ6sQ85QWKlTZV3X7yQ7ksjAq5H JNCuQFvr735Z+k/VFpZ/LzxjSHwXBTsQvYc5NGzLc/PQlBWVW3roSeGY5B5sUwye Z+asz9frQKZeNTQymggSIxr4GaKmdMy91MANFrLqhaHa9t0hiGX9LFWjONrV8i18 tFSw9rqedPSgMWT70jTE4akVlczEucxPy4OSXTTMm6PFD8ZUn/PYuoiqZtKYb195 U+a9B16L0FLLxWfb/mRLlLqC0EKhgz0N+EHv7OnzoIDNpCKgptZ+MlMlnsxrKYxy xJoZ7vHYdoXr50/BC5fR06V6ULVZeQ0+ObGs -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:35 2026 by rpki-client