This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer (raw, json) Hash identifier: Pg21xQGDqP2dhWNAsg8xznsyLhTNNSGyAmc/UxDd8Iw= Subject key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E4C27598338E8D268709F14F3D54F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43456 IP: 185.93.172.0/24 IP: 185.164.48.0/22 IP: 185.171.16.0/22 IP: 2a14:fc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4c:27:59:83:38:e8:d2:68:70:9f:14:f3:d5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:71:90:fe:6f:44:09:1b:ec:be:1b:46:c1: 71:1d:44:4a:f5:61:93:dc:fa:c3:75:53:ff:18:46: 6c:ad:b0:84:25:a8:4c:cc:4c:8c:29:ec:0a:5f:bd: e1:0b:1d:fa:4f:be:0f:b0:8c:f0:d0:81:fb:43:8f: 68:4a:ab:bf:06:88:ac:d4:69:83:69:70:95:91:fc: c1:1b:aa:30:32:d5:c6:aa:b2:d4:00:6b:41:4c:cf: 93:65:bb:df:6d:ff:0f:dd:4f:32:13:c3:49:2f:db: 70:82:45:28:1c:fb:1d:8a:7f:9b:48:19:e7:3e:d6: f8:f8:86:31:40:0f:d0:a8:eb:cd:7a:3a:41:c1:95: 07:c4:6c:ab:d2:92:2d:fd:0c:30:70:ff:8f:c9:7a: 1b:ec:46:3f:c2:28:0d:97:8b:f8:ab:a4:55:3e:dd: bc:5b:9a:c5:3b:98:9a:d1:a8:8c:3a:dc:d1:9d:1d: ed:a0:1f:de:6b:54:ae:8b:5f:9b:0d:2c:d1:b3:4a: 6a:e1:9a:55:65:17:95:69:94:0b:43:b5:13:c7:60: 2f:31:ac:0c:35:e7:40:47:e8:61:ba:ab:f3:db:f9: 58:b7:27:5d:0f:4d:42:c3:dd:47:06:0b:96:22:84: 95:76:e6:bb:99:13:cf:d8:ce:e9:b9:d6:70:f4:99: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.172.0/24 185.164.48.0/22 185.171.16.0/22 IPv6: 2a14:fc00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43456 Signature Algorithm: sha256WithRSAEncryption 8f:1c:ef:7e:b7:66:da:fc:8d:24:bb:d3:4d:fa:0d:49:3d:06: d6:a8:4e:91:e6:08:95:42:01:da:4b:c2:09:46:d4:17:44:48: e9:47:97:44:96:53:cc:6b:12:4e:a4:07:f9:5d:f8:ac:ee:73: 0f:dc:cf:77:ab:2a:ac:52:63:08:97:51:ff:ef:2c:9a:50:52: e5:7a:03:3f:9d:17:6f:ea:7b:56:c2:ec:41:d5:03:b7:5e:f2: 72:9a:48:52:5b:03:0d:95:b1:3f:14:f0:d8:e3:80:f8:3e:f3: a2:f0:f4:a1:f8:c3:5d:4a:6e:8e:68:37:c8:9b:ca:1f:0b:7c: b9:c1:41:23:5e:62:47:6f:32:09:45:42:f4:c3:08:ad:1d:14: a8:e3:76:78:a7:39:d5:64:28:d1:00:c6:5a:5e:de:a6:9c:9a: 2f:bf:33:24:e4:a5:5c:f9:5d:82:03:94:e5:fe:ad:1b:47:8f: d2:be:73:83:1b:cf:74:b7:a4:5f:b1:a5:1b:78:51:9a:8e:63: f0:9c:1b:d0:99:38:87:48:a4:af:7f:5a:3d:e7:18:da:9c:cf: 23:92:e2:ab:c5:cc:66:c0:19:e1:b9:77:40:5a:1d:e6:f4:23: 42:5c:c1:a6:51:d6:1d:a0:30:2e:8c:fe:22:73:4b:92:8b:c1: 93:f7:ee:be -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5fkwnWYM46NJocJ8U89VPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTc3M2Q3MzNkMTg0NWM0MWQzZjlhMzYyYjU1Yjc0ZTY4NmY5YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0dxkP5vRAkb7L4bRsFxHURK9WGT 3PrDdVP/GEZsrbCEJahMzEyMKewKX73hCx36T74PsIzw0IH7Q49oSqu/Bois1GmD aXCVkfzBG6owMtXGqrLUAGtBTM+TZbvfbf8P3U8yE8NJL9twgkUoHPsdin+bSBnn Ptb4+IYxQA/QqOvNejpBwZUHxGyr0pIt/QwwcP+PyXob7EY/wigNl4v4q6RVPt28 W5rFO5ia0aiMOtzRnR3toB/ea1Sui1+bDSzRs0pq4ZpVZReVaZQLQ7UTx2AvMawM NedAR+hhuqvz2/lYtyddD01Cw91HBguWIoSVdua7mRPP2M7pudZw9JmKEQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNl3PXM9GEXEHT+aNitVt05ob5wCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzM3NDEx ZS0yYjg5LTQwNzktOGNmYy0wMWEyOWY1ZjZkZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMzc0MTFl LTJiODktNDA3OS04Y2ZjLTAxYTI5ZjVmNmRkZS8xLzJYYzljejBZUmNRZFA1bzJL MVczVG1odm5BSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAuV2sAwQCuaQwAwQCuasQMA0EAgACMAcDBQMq FPwAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCpwDANBgkqhkiG9w0BAQsFAAOC AQEAjxzvfrdm2vyNJLvTTfoNST0G1qhOkeYIlUIB2kvCCUbUF0RI6UeXRJZTzGsS TqQH+V34rO5zD9zPd6sqrFJjCJdR/+8smlBS5XoDP50Xb+p7VsLsQdUDt17ycppI UlsDDZWxPxTw2OOA+D7zovD0ofjDXUpujmg3yJvKHwt8ucFBI15iR28yCUVC9MMI rR0UqON2eKc51WQo0QDGWl7eppyaL78zJOSlXPldggOU5f6tG0eP0r5zgxvPdLek X7GlG3hRmo5j8Jwb0Jk4h0ikr39aPecY2pzPI5Liq8XMZsAZ4bl3QFod5vQjQlzB plHWHaAwLoz+InNLkovBk/fuvg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:26 2026 by rpki-client