This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer (raw, json) Hash identifier: sKDxmvL3XbhCl4gG7cPHYKTwdSxQhy8y6CNUyrmXdNQ= Subject key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF9D0E91344E8056D8D56280FE6BBD37A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 10:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.217.188.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:d0:e9:13:44:e8:05:6d:8d:56:28:0f:e6:bb:d3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 10:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:87:5a:2b:97:36:ba:d3:ae:a0:b4:b8:b8: eb:47:99:cc:90:1c:b9:e6:91:0d:90:24:e7:39:2d: 2c:aa:e0:c1:d5:b0:c0:fc:98:f4:5f:06:99:34:04: 46:b7:0b:ac:a1:e6:97:f9:b0:65:11:53:ff:e5:a2: d5:39:08:81:42:16:4f:1e:a8:ba:e0:cf:fc:4e:c3: 24:cd:6b:0b:9a:eb:1c:2d:c2:17:fc:b2:8c:b5:ef: ba:39:04:e7:69:c5:9f:43:25:79:b0:88:10:dc:12: 78:82:b7:d7:b9:92:fa:6e:5c:14:2d:9c:20:82:5f: 8b:b8:f1:9e:0a:90:62:c0:30:5d:76:80:49:01:59: 5c:e0:a3:1d:2d:2c:ff:3f:75:c6:c8:a8:5b:ee:30: a9:10:1c:8e:31:ba:02:55:47:27:3f:6a:4c:42:04: 34:6e:45:2a:e0:93:40:a7:55:57:0f:56:1e:47:bf: 41:48:03:19:7d:e6:84:3b:8a:b3:e7:71:5d:4f:a5: 9b:32:75:82:ce:b3:7d:98:83:27:97:9f:f3:be:bc: 50:54:9a:51:f9:3d:3b:7f:f3:a1:99:20:be:fd:ae: 29:cb:72:a2:82:a4:1b:9e:75:a1:b8:86:79:81:17: 99:d3:f7:bc:59:01:ce:e9:b7:ac:05:1d:77:43:8f: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.188.0/24 Signature Algorithm: sha256WithRSAEncryption 90:13:84:49:ee:c9:ae:9f:af:fc:b7:e8:cc:35:5a:4c:1b:84: d0:26:63:e6:38:16:0f:61:3b:c5:a9:84:b1:2c:0d:b8:78:40: b5:11:9c:84:f6:47:77:71:94:82:c1:13:51:fd:cd:25:ce:c0: f7:df:d1:91:1d:ab:27:b8:87:f4:e0:6f:5f:22:1d:94:fc:6b: 5a:32:e1:a9:0e:00:07:fd:fe:cb:8f:69:f4:93:03:6d:0d:1b: 93:c4:47:ce:ae:93:18:5b:2a:98:d3:3a:e4:ef:39:28:7a:78: 12:0c:a8:de:2d:50:31:c3:47:d7:dd:90:be:7b:ad:ce:83:92: 44:90:24:f7:1a:2e:c7:8d:30:4b:88:93:4d:0a:71:eb:df:a2: 4f:35:fa:bd:56:38:0c:c6:38:cd:2e:ee:60:2e:ec:fe:39:52: cf:63:10:01:32:50:24:07:19:9c:22:87:fa:74:02:5f:10:6d: c2:d0:75:23:2e:ca:41:06:e7:88:a2:5a:b9:7a:d0:22:4a:9c: 1a:6c:49:51:ae:40:85:e8:ac:cd:18:4e:c8:17:1f:92:fc:a0: 4e:16:21:43:7e:39:82:ff:cb:a2:f1:b8:0e:5a:15:1a:20:00: 9f:70:d5:de:88:a0:37:5a:a5:e7:8a:cc:29:39:66:1a:a3:9b: 7e:d1:e6:d3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv50OkTROgFbY1WKA/mu9N6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZhNThkZjlhYTQ3Y2NkMjEwMjFlYjJjNmJmMDZiM2I0NTkwYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwOHWiuXNrrTrqC0uLjrR5nMkBy5 5pENkCTnOS0squDB1bDA/Jj0XwaZNARGtwusoeaX+bBlEVP/5aLVOQiBQhZPHqi6 4M/8TsMkzWsLmuscLcIX/LKMte+6OQTnacWfQyV5sIgQ3BJ4grfXuZL6blwULZwg gl+LuPGeCpBiwDBddoBJAVlc4KMdLSz/P3XGyKhb7jCpEByOMboCVUcnP2pMQgQ0 bkUq4JNAp1VXD1YeR79BSAMZfeaEO4qz53FdT6WbMnWCzrN9mIMnl5/zvrxQVJpR +T07f/OhmSC+/a4py3KigqQbnnWhuIZ5gReZ0/e8WQHO6besBR13Q49BiwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNlqWN+apHzNIQIessa/BrO0WQwIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2JkZWRl OC03MzVkLTRhMDUtODM4Yy0yZDQ5YzliYzk4MmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvYmRlZGU4 LTczNWQtNGEwNS04MzhjLTJkNDljOWJjOTgyZC8xLzJXcFkzNXFrZk0waEFoNnl4 cjhHczdSWkRBZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9m8MA0GCSqGSIb3DQEBCwUAA4IBAQCQE4RJ 7smun6/8t+jMNVpMG4TQJmPmOBYPYTvFqYSxLA24eEC1EZyE9kd3cZSCwRNR/c0l zsD339GRHasnuIf04G9fIh2U/GtaMuGpDgAH/f7Lj2n0kwNtDRuTxEfOrpMYWyqY 0zrk7zkoengSDKjeLVAxw0fX3ZC+e63Og5JEkCT3Gi7HjTBLiJNNCnHr36JPNfq9 VjgMxjjNLu5gLuz+OVLPYxABMlAkBxmcIof6dAJfEG3C0HUjLspBBueIolq5etAi SpwabElRrkCF6KzNGE7IFx+S/KBOFiFDfjmC/8ui8bgOWhUaIACfcNXeiKA3WqXn iswpOWYao5t+0ebT -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:15 2026 by rpki-client