This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer File: 2VSrlORZUZTSw5sdP-aokfHrkrw.cer (raw, json) Hash identifier: Xcy8CzP09p9SaDn8OcSOUZVGqWZdd39GMNABOfzoGP8= Subject key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1361B3BD769DB5B5B317944D73CECD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49440 IP: 185.169.116.0/22 IP: 2a0b:9700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:61:b3:bd:76:9d:b5:b5:b3:17:94:4d:73:ce:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:05:91:8f:ab:40:35:79:7b:58:b2:ee:f3: 7a:6e:8a:e0:aa:00:69:fd:da:11:2c:a3:51:4e:40: 80:3f:9e:4c:77:90:fe:7e:c9:91:03:72:df:00:7a: 07:bc:8f:43:9f:45:26:d6:15:05:a3:bd:5c:86:85: fd:e9:33:f5:8d:66:8c:cd:34:ca:84:9c:b4:f4:ec: 23:da:66:c0:ce:d5:37:98:82:4d:c5:fe:9a:47:fe: ef:c8:64:fd:e4:c2:cc:42:a4:4b:4c:6a:7e:ba:ac: 93:89:9c:90:a1:4e:01:d4:58:c6:95:74:c7:81:00: 84:27:41:89:0b:bf:20:37:39:89:f8:a5:ce:2d:c3: 1c:bd:25:b6:19:2d:2f:48:9c:6c:74:c7:10:e4:83: 5f:3a:50:52:d5:54:51:97:aa:95:6a:13:95:c9:ec: dd:f7:e6:c6:9d:4f:61:8a:e2:24:3f:68:4d:31:b4: e7:00:de:f7:38:67:33:05:3b:27:7f:e0:33:1b:54: 3d:69:22:8f:7d:0a:50:1a:d3:78:73:68:d5:15:4b: 8c:93:10:01:a3:6b:0d:0f:dd:90:56:50:8a:30:74: 30:0a:48:87:f6:be:09:34:19:4d:13:b5:78:a3:c2: e1:99:e4:ce:18:ba:da:be:b0:a5:da:48:55:bc:7c: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.116.0/22 IPv6: 2a0b:9700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49440 Signature Algorithm: sha256WithRSAEncryption 70:63:91:da:36:46:0c:b9:ce:4b:ad:6d:91:27:be:49:83:49: ed:d4:34:fd:64:83:a5:57:9b:de:99:b0:3f:ee:96:46:c3:5c: b2:0b:b4:97:5c:b8:e6:08:92:cf:dc:6c:ba:e9:02:96:23:a4: 59:e4:c9:88:85:1c:e5:84:f1:88:05:00:ba:00:82:34:af:5f: 0d:db:4e:a6:e9:7c:97:cf:54:c3:f1:cd:5d:e3:b2:61:e8:96: 89:5f:81:34:91:80:f1:f5:ce:f9:ef:51:93:e9:33:e4:c9:47: 50:30:0d:b5:cd:6d:e7:d7:f8:da:08:b7:c1:c8:93:eb:62:9b: 70:b1:64:b0:6d:13:be:81:d9:4d:7a:b7:18:0a:2a:34:1e:e9: 3e:9c:5b:81:7f:fd:b3:56:eb:51:26:27:7c:7e:3a:94:44:8e: ac:1b:c9:87:48:21:02:75:80:d9:a5:cd:78:72:91:00:fe:d7: dd:a0:d9:c6:d0:5d:3d:c6:3e:a4:7e:03:2e:b5:f4:2f:a4:0f: e2:7a:c4:6b:4f:b4:76:66:72:61:76:b6:fc:34:52:f1:71:17: 54:4e:6e:fa:13:40:45:52:4b:64:68:7c:62:d5:84:66:cb:a9: c4:20:eb:90:80:b6:16:4c:5c:47:4c:d7:5f:5d:dd:44:dd:a2: 48:e9:9e:60 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/E2GzvXadtbWzF5RNc87NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTU0YWI5NGU0NTk1MTk0ZDJjMzliMWQzZmU2YTg5MWYxZWI5MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SAFkY+rQDV5e1iy7vN6borgqgBp /doRLKNRTkCAP55Md5D+fsmRA3LfAHoHvI9Dn0Um1hUFo71choX96TP1jWaMzTTK hJy09Owj2mbAztU3mIJNxf6aR/7vyGT95MLMQqRLTGp+uqyTiZyQoU4B1FjGlXTH gQCEJ0GJC78gNzmJ+KXOLcMcvSW2GS0vSJxsdMcQ5INfOlBS1VRRl6qVahOVyezd 9+bGnU9hiuIkP2hNMbTnAN73OGczBTsnf+AzG1Q9aSKPfQpQGtN4c2jVFUuMkxAB o2sND92QVlCKMHQwCkiH9r4JNBlNE7V4o8LhmeTOGLravrCl2khVvHy4ZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNlUq5TkWVGU0sObHT/mqJHx65K8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzY0NzQ4 NS02MzVlLTRhYzYtYjBiOS0zMzUxYzU3N2I0MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvNjQ3NDg1 LTYzNWUtNGFjNi1iMGI5LTMzNTFjNTc3YjQzMi8xLzJWU3JsT1JaVVpUU3c1c2RQ LWFva2ZIcmtydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCual0MA0EAgACMAcDBQMqC5cAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDBIDANBgkqhkiG9w0BAQsFAAOCAQEAcGOR2jZGDLnO S61tkSe+SYNJ7dQ0/WSDpVeb3pmwP+6WRsNcsgu0l1y45giSz9xsuukCliOkWeTJ iIUc5YTxiAUAugCCNK9fDdtOpul8l89Uw/HNXeOyYeiWiV+BNJGA8fXO+e9Rk+kz 5MlHUDANtc1t59f42gi3wciT62KbcLFksG0TvoHZTXq3GAoqNB7pPpxbgX/9s1br USYnfH46lESOrBvJh0ghAnWA2aXNeHKRAP7X3aDZxtBdPcY+pH4DLrX0L6QP4nrE a0+0dmZyYXa2/DRS8XEXVE5u+hNARVJLZGh8YtWEZsupxCDrkIC2FkxcR0zXX13d RN2iSOmeYA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:26 2026 by rpki-client