This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer File: 2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer (raw, json) Hash identifier: VeN+SxomYYgMlRyCfy3Nj06NffpG/Gy3+DcB7hlU78U= Subject key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113F4AFF47BF911F89F7AC74DC41C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211431 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3f:4a:ff:47:bf:91:1f:89:f7:ac:74:dc:41:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:3a:7e:cc:1e:92:98:b5:09:da:ca:34:a7: f4:15:17:36:05:0d:84:15:63:2f:07:22:6b:67:fd: 83:e9:1e:81:cc:8c:83:99:f8:e8:7f:0f:6f:0c:66: f6:57:64:b7:6d:14:b3:5d:3a:00:ff:93:95:ee:0b: de:ea:81:77:89:8b:ea:de:0b:e7:d6:4e:78:4f:48: 57:a8:4d:6f:d0:c0:c3:0c:9f:a4:b7:41:22:16:f3: 61:29:0d:ca:30:f8:e5:38:24:31:a7:ee:6e:fe:f5: d5:4d:4d:e1:1e:ed:e8:77:b4:8e:a5:84:9b:e1:ed: ab:c0:06:ce:b4:8d:9b:d9:5a:60:5c:d3:c7:48:41: 31:4a:d7:92:fd:1a:91:81:1d:7f:35:fe:5c:33:c5: 57:09:e8:f4:8c:0a:6a:62:09:de:77:08:17:bc:8a: 82:dd:9b:64:37:a6:5f:f8:2c:8a:ae:65:1c:dc:7a: 16:d0:f8:7c:98:e2:10:de:6b:b1:42:18:ba:c3:be: 09:09:7f:08:3a:31:01:6e:93:fc:4f:93:74:c3:b5: 4f:b8:33:2a:a8:3d:52:b3:c3:35:1f:9d:f9:84:fe: 75:9b:e8:39:6b:94:41:ef:61:17:2b:f3:ff:ec:52: 42:86:6f:b6:a8:26:ab:4a:18:0f:2c:37:14:f7:7d: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211431 Signature Algorithm: sha256WithRSAEncryption af:fe:62:db:e7:15:6d:0e:ab:4d:25:f8:90:87:41:9e:a2:76: 9b:f3:c4:43:18:ae:ab:fd:67:51:b1:42:4d:10:c3:49:97:98: 01:96:10:8a:31:a8:1b:81:0f:34:e5:fa:5f:d1:0e:39:af:22: c4:3b:93:17:a1:a4:1e:36:9f:2f:cb:a1:15:c0:c0:1d:56:39: ef:46:35:80:d8:69:76:97:0a:0a:cc:a7:16:70:3e:df:79:af: 4c:af:2f:7b:e7:6e:5a:36:77:77:35:f6:2e:85:a8:df:ad:77: 86:99:42:ae:4b:7e:57:d6:67:72:fc:d6:7d:be:95:93:60:ae: 43:34:40:ae:16:b3:fe:d2:51:7d:54:c8:84:dd:c3:99:79:db: 26:50:2f:b2:88:fe:d1:94:b9:59:1c:19:b8:6b:03:22:e4:0f: 96:bd:51:21:a9:d2:ea:2a:cb:91:dd:84:39:99:48:4d:63:2a: 13:f5:42:84:ac:58:df:19:09:e9:93:af:ea:7f:b6:07:22:13: 98:17:09:9e:d5:7b:36:42:b2:7f:08:90:ad:f4:48:34:95:95: dc:70:bf:86:44:9f:3f:76:07:01:74:f9:0b:af:8d:3b:86:fc: 13:25:4b:2b:30:bf:1e:e3:54:56:bf:c5:3c:97:b2:c9:37:a0: 4d:ed:9c:f9 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt5ET9K/0e/kR+J96x03EHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTNlZjA3MDFlOGNhNmVkMGEwZTZkNDZhMzhiOGQ4Y2YzMDkxMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ic6fswekpi1CdrKNKf0FRc2BQ2E FWMvByJrZ/2D6R6BzIyDmfjofw9vDGb2V2S3bRSzXToA/5OV7gve6oF3iYvq3gvn 1k54T0hXqE1v0MDDDJ+kt0EiFvNhKQ3KMPjlOCQxp+5u/vXVTU3hHu3od7SOpYSb 4e2rwAbOtI2b2VpgXNPHSEExSteS/RqRgR1/Nf5cM8VXCej0jApqYgnedwgXvIqC 3ZtkN6Zf+CyKrmUc3HoW0Ph8mOIQ3muxQhi6w74JCX8IOjEBbpP8T5N0w7VPuDMq qD1Ss8M1H535hP51m+g5a5RB72EXK/P/7FJChm+2qCarShgPLDcU932+3wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFNk+8HAejKbtCg5tRqOLjYzzCRKFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M5OTI2 NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzk5 MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdkLzAvRDkzRUYwNzAxRThD QTZFRDBBMEU2RDQ2QTM4QjhEOENGMzA5MTI4NS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOecw DQYJKoZIhvcNAQELBQADggEBAK/+YtvnFW0Oq00l+JCHQZ6idpvzxEMYrqv9Z1Gx Qk0Qw0mXmAGWEIoxqBuBDzTl+l/RDjmvIsQ7kxehpB42ny/LoRXAwB1WOe9GNYDY aXaXCgrMpxZwPt95r0yvL3vnblo2d3c19i6FqN+td4aZQq5LflfWZ3L81n2+lZNg rkM0QK4Ws/7SUX1UyITdw5l52yZQL7KI/tGUuVkcGbhrAyLkD5a9USGp0uoqy5Hd hDmZSE1jKhP1QoSsWN8ZCemTr+p/tgciE5gXCZ7VezZCsn8IkK30SDSVldxwv4ZE nz92BwF0+QuvjTuG/BMlSyswvx7jVFa/xTyXssk3oE3tnPk= -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:14 2026 by rpki-client