This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.cer (raw, json) Hash identifier: tF4psRaFLFXph87L9Ks5TKMkOpOmXJvhSeutEe6ch5g= Subject key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1D768AFD6DF0A75E9384AB976FB4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15566 IP: 62.77.128.0/22 IP: 2a02:2950::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1d:76:8a:fd:6d:f0:a7:5e:93:84:ab:97:6f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:d2:2f:f4:87:bb:40:96:61:3f:6e:06:98: 4d:50:9f:17:64:53:3b:6b:1a:ce:37:2a:54:9b:9c: 36:2c:89:bb:a9:01:8c:e7:58:d9:1f:30:60:e3:09: 17:ba:75:50:7f:bc:62:71:b4:b1:43:23:31:5d:ac: 4a:ea:52:37:11:5a:08:9b:95:f2:64:01:bb:9f:1f: 81:44:44:c8:8f:87:d2:56:20:4b:cf:89:47:12:74: eb:01:e0:69:e0:7f:ea:08:dc:a8:62:67:ec:e8:88: 21:1c:38:0e:2d:98:9f:12:54:a7:4d:c9:f9:ea:1b: 09:58:f4:ff:3b:d5:fb:81:49:70:17:c0:5c:17:4e: f4:36:1c:00:43:17:e6:6c:7d:fd:59:36:7e:8b:35: c6:4b:6a:67:3e:af:f7:c2:f6:90:bc:00:fc:7a:f5: 78:cd:be:a9:71:34:a4:f1:23:5f:56:82:31:b4:b8: 77:3c:de:7b:4f:6d:06:6e:10:a0:d4:aa:e0:fe:3d: 14:55:80:55:08:14:0c:a2:f7:a1:f1:92:04:3f:81: 1c:cf:ad:d8:4d:e3:d8:e3:e7:12:c8:59:99:b8:29: fa:b3:26:a5:0e:21:d4:4f:c7:b4:d9:d6:0d:01:89: 4c:2e:5d:cd:e4:b8:d4:61:c3:fb:e6:94:d5:57:18: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.128.0/22 IPv6: 2a02:2950::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15566 Signature Algorithm: sha256WithRSAEncryption b1:b3:07:c8:94:4d:c6:58:26:b0:21:d4:fa:b7:f8:72:7a:f1: e1:3e:9d:26:46:ea:66:61:0b:a8:a8:c5:fb:f7:24:69:93:c2: 04:a0:95:ad:8a:6d:31:7e:9f:9a:d0:66:b0:e6:0f:8c:66:49: b9:f1:fa:41:7a:f9:e3:33:09:b1:ce:84:55:76:3e:58:0e:d8: 34:d2:9d:4e:11:45:19:7a:0b:f0:26:29:43:f9:02:72:f1:64: a2:d5:c0:58:4b:1d:33:2b:6d:9d:f2:cc:70:0d:19:1e:3f:ae: 07:15:5f:bc:b0:1a:8a:75:ba:25:99:82:f0:34:b8:c3:ac:69: a5:0d:7b:45:78:a1:c7:e5:12:97:4c:da:7b:9b:a3:22:d4:9f: 74:55:3a:76:ef:82:fc:ab:1b:ab:6f:bc:37:a0:fb:13:be:82: 72:e2:2e:4b:87:ae:c7:86:24:15:dd:12:e2:be:db:80:51:b4: c3:48:27:00:98:2d:ff:6b:d2:b2:ec:46:15:2a:10:d2:75:18: c9:c6:cd:3a:7d:49:d4:67:de:fe:19:86:a5:9f:ce:72:0b:2f: 4f:99:51:ea:7f:38:86:ca:4b:11:89:ee:0d:1c:ce:62:2b:ce: 2c:94:8c:93:05:2a:8d:cd:08:0e:3f:c2:6d:23:19:0b:8e:0a: 8a:70:5e:8d -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt26x12iv1t8Kdek4Srl2+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTRmMjM4YzVjNzRlYjlhNzVhNDZlMmJjNjc0MTFlOGRjMjJkOTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+PSL/SHu0CWYT9uBphNUJ8XZFM7 axrONypUm5w2LIm7qQGM51jZHzBg4wkXunVQf7xicbSxQyMxXaxK6lI3EVoIm5Xy ZAG7nx+BRETIj4fSViBLz4lHEnTrAeBp4H/qCNyoYmfs6IghHDgOLZifElSnTcn5 6hsJWPT/O9X7gUlwF8BcF070NhwAQxfmbH39WTZ+izXGS2pnPq/3wvaQvAD8evV4 zb6pcTSk8SNfVoIxtLh3PN57T20GbhCg1Krg/j0UVYBVCBQMoveh8ZIEP4Ecz63Y TePY4+cSyFmZuCn6syalDiHUT8e02dYNAYlMLl3N5LjUYcP75pTVVxinVwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFNlPI4xcdOuadaRuK8Z0EejcItmCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2Q5ZDli Ni1jM2JlLTRjNWQtYWRlYS00YmM4NGM3OWZjNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvZDlkOWI2 LWMzYmUtNGM1ZC1hZGVhLTRiYzg0Yzc5ZmM1OC8xLzJVOGpqRngwNjVwMXBHNHJ4 blFSNk53aTJZSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCPk2AMA0EAgACMAcDBQMqAilQMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjzOMA0GCSqGSIb3DQEBCwUAA4IBAQCxswfIlE3GWCaw IdT6t/hyevHhPp0mRupmYQuoqMX79yRpk8IEoJWtim0xfp+a0Gaw5g+MZkm58fpB evnjMwmxzoRVdj5YDtg00p1OEUUZegvwJilD+QJy8WSi1cBYSx0zK22d8sxwDRke P64HFV+8sBqKdbolmYLwNLjDrGmlDXtFeKHH5RKXTNp7m6Mi1J90VTp274L8qxur b7w3oPsTvoJy4i5Lh67HhiQV3RLivtuAUbTDSCcAmC3/a9Ky7EYVKhDSdRjJxs06 fUnUZ97+GYaln85yCy9PmVHqfziGyksRie4NHM5iK84slIyTBSqNzQgOP8JtIxkL jgqKcF6N -----END CERTIFICATE-----Generated at Tue Feb 10 05:31:27 2026 by rpki-client