This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.cer (raw, json) Hash identifier: 0T1lBBMqsOOk4kg1NtyEvEFD8rCIZlvygS7VXYxdNCs= Subject key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C73D12B0BDA9AFD8E945242A3669E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200585 IP: 185.89.232.0/22 IP: 2a03:8560::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:73:d1:2b:0b:da:9a:fd:8e:94:52:42:a3:66:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:d9:7a:dc:8e:4b:1e:4f:65:6a:2a:af:27: 35:42:04:ef:98:5c:a5:1b:63:f8:51:c2:b7:6b:dd: 07:45:11:83:35:c5:65:be:29:44:b7:6f:80:72:bc: ad:e7:ee:2b:de:a6:73:4b:e0:b2:e8:9f:22:14:3f: 57:07:59:e2:ff:56:58:05:8b:53:48:c1:af:69:33: dd:3b:65:9c:a1:3c:b1:14:cd:19:16:d2:c1:52:c4: 47:00:55:da:61:8c:c5:20:9c:ad:b8:b1:bd:95:56: d1:7e:82:9b:1c:35:f1:0b:0a:53:d0:5a:6f:62:19: f5:fb:f5:9b:45:cf:cc:60:9e:35:f3:71:bf:4c:05: 88:39:98:85:8b:f8:2e:e8:79:d6:c0:4e:f8:0e:3c: 86:ac:48:0c:59:ec:d2:1e:32:0f:ab:a3:f5:52:6b: 04:58:2d:f3:f8:64:16:d6:b7:47:a6:27:4b:2c:b7: 33:39:00:03:15:30:e3:a1:9f:af:3e:2a:c6:b0:6c: 21:39:7a:b0:8d:bc:86:22:5d:5d:dc:00:e5:09:fc: 7a:7b:a3:d0:c9:68:a2:a8:73:d2:9f:88:42:78:17: 93:56:31:97:eb:ff:28:ae:32:31:52:4c:01:93:2a: 27:62:81:06:e1:bf:a8:d4:a1:d6:e7:4b:f0:ab:68: 9c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.232.0/22 IPv6: 2a03:8560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200585 Signature Algorithm: sha256WithRSAEncryption aa:8b:11:e2:25:97:0b:3e:e2:67:13:92:24:68:bb:f5:c1:e8: 50:d0:68:05:8a:86:70:b0:22:b5:fd:58:9d:4f:ed:af:82:b7: 63:cb:3b:a1:17:58:e6:eb:7d:d2:83:92:7a:a3:f0:16:65:b4: d2:ba:69:1a:d8:51:44:40:91:1a:1a:61:f1:8b:76:29:bd:7b: 50:f4:cb:df:b5:b8:0b:fc:47:2c:54:eb:22:e3:a0:d9:62:bb: 59:eb:32:5f:de:07:36:01:e6:39:c4:60:5f:d2:da:b2:aa:fe: 6e:aa:3f:de:c9:4b:5e:da:07:f9:c9:0f:01:c5:c3:58:10:49: e8:c3:30:34:69:d9:48:e9:97:23:2a:09:44:bb:b2:29:b7:fc: d4:c6:a5:af:2b:51:b4:14:6f:af:0f:8c:ee:20:3c:f5:1d:85: 5e:7d:82:40:eb:ef:97:a4:82:ba:da:72:67:81:36:55:0f:f6: 94:41:70:01:bb:6c:f6:23:1d:f9:bb:cb:93:e8:13:a0:e7:38: 80:14:82:3e:66:44:c3:95:7b:c6:87:11:2d:e6:7c:26:99:17: 54:3f:1b:51:d4:f8:69:d1:61:35:65:10:ab:42:e3:a9:98:c5: f2:11:74:84:d0:fa:1d:3d:85:1a:2b:b3:77:28:03:5c:c8:58: df:99:11:50 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XHPRKwvamv2OlFJCo2aeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTJlNWNkZjRjNTRmZjg2OGNlODk1MzE1ZWFiNThmMmQ4ODY1MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmnZetyOSx5PZWoqryc1QgTvmFyl G2P4UcK3a90HRRGDNcVlvilEt2+Acryt5+4r3qZzS+Cy6J8iFD9XB1ni/1ZYBYtT SMGvaTPdO2WcoTyxFM0ZFtLBUsRHAFXaYYzFIJytuLG9lVbRfoKbHDXxCwpT0Fpv Yhn1+/WbRc/MYJ4183G/TAWIOZiFi/gu6HnWwE74DjyGrEgMWezSHjIPq6P1UmsE WC3z+GQW1rdHpidLLLczOQADFTDjoZ+vPirGsGwhOXqwjbyGIl1d3ADlCfx6e6PQ yWiiqHPSn4hCeBeTVjGX6/8orjIxUkwBkyonYoEG4b+o1KHW50vwq2icnQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNkuXN9MVP+GjOiVMV6rWPLYhlDCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzBjM2Mz MC00NTI3LTQ3MjItOTcxYi1mNWZlM2UxYjBhNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvMGMzYzMw LTQ1MjctNDcyMi05NzFiLWY1ZmUzZTFiMGE2My8xLzJTNWMzMHhVXzRhTTZKVXhY cXRZOHRpR1VNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVnoMA0EAgACMAcDBQAqA4VgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMPiTANBgkqhkiG9w0BAQsFAAOCAQEAqosR4iWXCz7i ZxOSJGi79cHoUNBoBYqGcLAitf1YnU/tr4K3Y8s7oRdY5ut90oOSeqPwFmW00rpp GthRRECRGhph8Yt2Kb17UPTL37W4C/xHLFTrIuOg2WK7WesyX94HNgHmOcRgX9La sqr+bqo/3slLXtoH+ckPAcXDWBBJ6MMwNGnZSOmXIyoJRLuyKbf81MalrytRtBRv rw+M7iA89R2FXn2CQOvvl6SCutpyZ4E2VQ/2lEFwAbts9iMd+bvLk+gToOc4gBSC PmZEw5V7xocRLeZ8JpkXVD8bUdT4adFhNWUQq0LjqZjF8hF0hND6HT2FGiuzdygD XMhY35kRUA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:51 2026 by rpki-client