This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer (raw, json) Hash identifier: JcmXg67olMtjmRg6LKGjKkYtolvS7RTz0mObuLqQYDA= Subject key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AAF63DAA556A42494FE74F5AD1E82 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.101.179.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:af:63:da:a5:56:a4:24:94:fe:74:f5:ad:1e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:2f:64:fb:ba:62:55:18:49:22:a6:04:30: e4:57:78:85:8c:64:66:c9:13:96:fa:9c:dc:c8:0e: d0:6a:21:3a:53:5d:14:17:b9:8a:14:c1:bd:47:a5: 7d:a1:45:b9:6d:9d:68:e0:17:d5:e8:19:24:d4:ff: a8:1b:36:c3:08:e9:b9:15:91:1b:c7:98:12:9e:6c: c8:e1:d6:b5:19:00:a1:ff:90:0d:fe:8a:cf:e3:5d: e8:3b:23:e3:8c:c3:25:bb:e3:41:f0:7e:81:05:1f: 4c:78:72:7b:10:60:d1:8e:15:97:1c:b0:37:48:dc: 5a:d2:65:f5:97:12:8d:e7:d0:13:f8:04:2e:c6:26: 44:95:16:f6:1d:a7:b5:91:d2:de:83:f9:2e:57:75: c3:c7:ce:33:11:1f:8e:6f:0d:7c:6c:86:98:e6:ad: 15:d3:03:a4:33:ad:7d:b5:a1:d3:af:46:c2:cf:1d: b5:c6:3e:c3:4d:02:3c:f8:60:35:20:25:0f:6c:98: d8:b0:38:a2:28:ea:17:91:77:93:33:79:56:5f:2a: 2c:ae:1a:8c:7c:18:67:e4:5e:f8:38:f9:d7:d3:97: 76:a1:58:41:a4:68:ca:bc:04:4a:fb:4b:89:05:88: 6d:1b:b6:9a:73:91:47:5e:2d:07:af:4e:38:5c:e4: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.179.0/24 Signature Algorithm: sha256WithRSAEncryption 14:8c:81:86:6f:6f:60:82:7f:58:cf:df:29:5e:c2:a8:73:15: a9:6e:42:9c:25:46:8d:ae:92:f1:d5:43:5b:4f:46:30:98:f7: 7b:4b:a3:bd:65:1e:a8:c1:09:56:4b:aa:07:86:c5:cf:2c:89: 82:93:43:f6:99:22:7e:fe:ea:c4:f2:e0:49:53:ef:65:db:fc: 26:c7:2c:b1:3b:e7:6f:68:c2:82:c3:cb:35:54:92:18:d5:8b: 0f:90:82:8a:57:a4:fc:11:3d:3d:a6:c1:06:43:70:a9:24:2d: 7b:25:db:2d:b7:fe:3b:6c:31:04:38:73:fd:a8:8b:2f:1c:19: 0c:25:4f:ac:df:0b:c9:c4:39:ad:4d:f4:09:7b:69:56:db:d7: af:19:10:d8:93:d8:a4:1c:8a:f4:70:7b:a5:0c:9f:40:f3:73: 87:70:09:b4:f5:5d:ae:39:70:d3:d6:c9:56:6c:a0:ee:9d:0c: bc:3d:8b:14:f2:82:8c:8d:a1:7e:f6:24:6f:b5:9d:c2:d9:8b: 63:50:ac:5b:e8:2c:fd:73:5b:38:45:91:31:42:ed:0d:5b:7a: e8:4c:71:20:aa:93:11:64:6d:74:b6:a2:b6:da:37:1d:24:7f: 40:93:b5:da:58:ff:41:10:bc:48:a9:ca:a2:10:30:31:6c:38: 65:6c:7b:ee -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9Wq9j2qVWpCSU/nT1rR6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTNlMzAyYzIxYTlkZGE2NzUwOWZjOGYxM2RhZjRjNjJhY2ZmMGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnwvZPu6YlUYSSKmBDDkV3iFjGRm yROW+pzcyA7QaiE6U10UF7mKFMG9R6V9oUW5bZ1o4BfV6Bkk1P+oGzbDCOm5FZEb x5gSnmzI4da1GQCh/5AN/orP413oOyPjjMMlu+NB8H6BBR9MeHJ7EGDRjhWXHLA3 SNxa0mX1lxKN59AT+AQuxiZElRb2Hae1kdLeg/kuV3XDx84zER+Obw18bIaY5q0V 0wOkM619taHTr0bCzx21xj7DTQI8+GA1ICUPbJjYsDiiKOoXkXeTM3lWXyosrhqM fBhn5F74OPnX05d2oVhBpGjKvARK+0uJBYhtG7aac5FHXi0Hr044XOT3ZwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNk+MCwhqd2mdQn8jxPa9MYqz/DuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzBmM2E4 Ny01ZWExLTQ2NzEtOTBiNy1hZTE3NTk5MTZkZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMGYzYTg3 LTVlYTEtNDY3MS05MGI3LWFlMTc1OTkxNmRmMC8xLzJUNHdMQ0dwM2FaMUNmeVBF OXIweGlyUDhPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWWzMA0GCSqGSIb3DQEBCwUAA4IBAQAUjIGG b29ggn9Yz98pXsKocxWpbkKcJUaNrpLx1UNbT0YwmPd7S6O9ZR6owQlWS6oHhsXP LImCk0P2mSJ+/urE8uBJU+9l2/wmxyyxO+dvaMKCw8s1VJIY1YsPkIKKV6T8ET09 psEGQ3CpJC17Jdstt/47bDEEOHP9qIsvHBkMJU+s3wvJxDmtTfQJe2lW29evGRDY k9ikHIr0cHulDJ9A83OHcAm09V2uOXDT1slWbKDunQy8PYsU8oKMjaF+9iRvtZ3C 2YtjUKxb6Cz9c1s4RZExQu0NW3roTHEgqpMRZG10tqK22jcdJH9Ak7XaWP9BELxI qcqiEDAxbDhlbHvu -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:50 2026 by rpki-client