This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer (raw, json) Hash identifier: OzPDN5Z1XH9fMPykvJF5dO1zvyjDf2JJk0z9nYVaIeI= Subject key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC8C219AFBDB8042BEC52E7900A74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208764 IP: 185.244.92.0/23 IP: 194.169.51.0/24 IP: 194.169.53.0/24 IP: 194.169.159.0/24 IP: 194.169.182.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c8:c2:19:af:bd:b8:04:2b:ec:52:e7:90:0a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:76:14:af:0d:ce:d1:ad:dc:5c:bf:dc:5c: a3:72:e5:97:1d:4b:13:fd:ac:61:43:e1:be:d5:bd: 5b:9c:af:35:10:c5:f3:c5:22:f0:18:3d:75:77:b1: 28:dd:40:23:86:a3:21:e1:5c:15:35:48:7e:ed:54: f1:6b:8e:fd:ae:e7:63:66:d3:08:76:b5:97:ba:e6: c1:d4:eb:67:3c:df:36:af:9e:59:65:05:92:5f:34: ec:01:9c:e4:fd:23:17:65:ba:d5:e2:ac:55:b9:01: 9e:13:ad:5b:62:d0:ff:d2:30:d6:5f:d1:57:85:50: d6:df:d5:58:ff:f5:b8:40:b6:f5:e3:8c:a3:ff:8f: 8c:91:31:cc:42:e8:a8:4d:e2:0a:43:74:9c:8d:b4: a2:1d:7d:e8:b8:4c:45:fb:62:95:a1:48:77:ce:03: d0:8b:ba:52:6c:ec:49:57:f3:da:a3:93:36:85:b9: d9:88:70:14:f1:74:fb:90:46:70:1d:c4:4d:13:ed: 46:30:f6:c7:ca:fe:ca:4f:7e:c4:8a:2d:74:9b:86: 02:b1:e3:36:02:a8:39:17:e1:77:41:54:c3:74:f7: a1:bd:5b:55:2d:98:eb:91:63:07:72:85:2a:c2:9e: ff:d7:96:89:c6:73:21:ca:e3:2f:12:1c:4a:19:59: 31:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.92.0/23 194.169.51.0/24 194.169.53.0/24 194.169.159.0/24 194.169.182.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208764 Signature Algorithm: sha256WithRSAEncryption 5c:61:93:9e:a3:3f:ad:98:ec:d0:fa:16:c9:65:e7:bf:49:33: 7e:ac:7d:e9:71:16:ab:62:ec:ba:47:bb:78:e1:86:61:01:6e: 0d:3c:b6:76:0c:e5:c9:c0:c8:a7:c4:f5:eb:10:d8:df:9f:45: 40:10:f1:a9:0a:b9:d3:da:ad:78:da:6e:f1:07:86:f3:60:42: d4:ab:25:68:a2:21:0b:7f:4b:8d:e4:4c:10:2f:8f:0c:7f:18: 63:2d:71:97:9a:96:c9:13:d3:9c:5a:38:c0:50:45:08:66:5b: a1:b4:19:4b:73:c4:d2:95:f1:aa:88:23:b7:60:56:e0:88:63: f4:5c:35:a2:04:65:2c:a7:cb:40:f8:a5:a1:fa:45:96:e2:e9: 72:1f:a4:6a:7e:e0:9e:b4:ef:1e:5b:9c:e2:e3:0b:ec:44:bf: 7e:95:cb:d0:47:86:7f:56:5a:89:15:47:52:9c:88:c0:79:6e: 5b:64:fe:b2:fc:da:f1:56:6e:e5:6b:37:3e:84:9a:8e:02:d7: 8f:a4:72:e8:28:bc:0d:ef:e1:32:b4:f8:5d:9f:53:4f:86:ae: bf:f4:84:a0:88:1f:22:82:bb:91:61:d2:b2:06:56:e0:4c:c9: 51:7a:86:df:16:07:2c:d1:10:7f:d3:4c:a3:0a:ba:b8:d6:1e: 75:8e:ca:45 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt26sjCGa+9uAQr7FLnkAp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTQ5Y2FiYTNkNDMxNTYwN2Y0YTZkNjI3ZWNlMWVjZWE4Y2JjMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp12FK8NztGt3Fy/3FyjcuWXHUsT /axhQ+G+1b1bnK81EMXzxSLwGD11d7Eo3UAjhqMh4VwVNUh+7VTxa479rudjZtMI drWXuubB1OtnPN82r55ZZQWSXzTsAZzk/SMXZbrV4qxVuQGeE61bYtD/0jDWX9FX hVDW39VY//W4QLb144yj/4+MkTHMQuioTeIKQ3ScjbSiHX3ouExF+2KVoUh3zgPQ i7pSbOxJV/Pao5M2hbnZiHAU8XT7kEZwHcRNE+1GMPbHyv7KT37Eii10m4YCseM2 Aqg5F+F3QVTDdPehvVtVLZjrkWMHcoUqwp7/15aJxnMhyuMvEhxKGVkxYwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFNlJyro9QxVgf0ptYn7OHs6oy8MZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2ZlNjkw NC1lYjU2LTQ0OTMtOTI5Yy0xYTlkZjM4ZjU5MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvZmU2OTA0 LWViNTYtNDQ5My05MjljLTFhOWRmMzhmNTkwMS8xLzJVbkt1ajFERldCX1NtMWlm czRlenFqTHd4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQBufRcAwQAwqkzAwQAwqk1AwQAwqmfAwQAwqm2 MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvfDANBgkqhkiG9w0BAQsFAAOCAQEA XGGTnqM/rZjs0PoWyWXnv0kzfqx96XEWq2Lsuke7eOGGYQFuDTy2dgzlycDIp8T1 6xDY359FQBDxqQq509qteNpu8QeG82BC1KslaKIhC39LjeRMEC+PDH8YYy1xl5qW yRPTnFo4wFBFCGZbobQZS3PE0pXxqogjt2BW4Ihj9Fw1ogRlLKfLQPilofpFluLp ch+kan7gnrTvHluc4uML7ES/fpXL0EeGf1ZaiRVHUpyIwHluW2T+svza8VZu5Ws3 PoSajgLXj6Ry6Ci8De/hMrT4XZ9TT4auv/SEoIgfIoK7kWHSsgZW4EzJUXqG3xYH LNEQf9NMowq6uNYedY7KRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:40 2026 by rpki-client