This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer (raw, json) Hash identifier: hlonturRUNAl/DfBDZbCwvUF24uZflsD0H5bWcARrrU= Subject key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE3FBCB7D07D6EE39831E5E241FA21 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47703 IP: 91.236.228.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3f:bc:b7:d0:7d:6e:e3:98:31:e5:e2:41:fa:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d977120937500eb46696428962e510e02c348e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:c2:60:52:35:25:0f:62:67:6d:fe:ff:06: 2d:04:6f:e2:2e:c7:7e:05:b1:5a:15:a3:94:21:dc: 28:42:59:40:e9:3c:14:92:63:9b:82:57:a7:88:84: e6:6c:29:b2:69:9d:bf:30:42:e6:24:3c:d4:bb:b0: 5e:b1:5e:b0:ca:35:74:9d:38:e9:94:56:68:4a:7a: 6f:61:b1:f7:f5:4f:b9:b8:34:67:7c:43:b6:8f:25: 78:00:21:84:15:23:69:d2:68:c5:e2:df:85:f5:cb: b1:fa:6d:86:71:16:d5:17:3e:83:6e:8b:bd:64:e5: 9b:7f:ff:96:14:d5:3e:29:da:84:d5:b2:29:97:5b: f8:a2:30:55:f2:35:6f:4c:94:30:1f:d4:00:7b:f0: e9:53:86:2d:cb:fb:ee:4c:d0:34:8e:84:0d:4a:6d: 9d:6f:a2:87:31:b7:d8:6e:45:f0:21:28:8d:ff:93: 72:c2:3c:0a:2c:21:f6:62:4d:0c:af:a6:38:26:71: 04:ea:f7:63:a6:f5:d0:a6:09:2f:16:f1:45:9e:21: 7e:b6:36:f0:45:64:e9:12:15:c2:34:b7:c2:de:08: 7f:cc:c4:71:e2:b4:38:9e:cc:3e:eb:db:84:c4:a7: da:fd:de:b4:01:88:d5:d1:8d:bf:c5:56:a5:a8:48: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.228.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47703 Signature Algorithm: sha256WithRSAEncryption 04:70:7b:78:27:2e:ef:1a:a0:86:79:ad:2b:4c:90:cc:d4:53: 94:86:11:70:7f:e7:af:8e:19:54:94:87:86:e0:fe:c6:de:6f: 2d:52:f5:b2:55:12:53:b8:dd:34:ae:41:2b:f1:14:9b:0c:4f: 77:b7:e5:c7:56:07:4a:e3:d4:d2:10:89:b1:01:5f:da:76:31: 76:55:d8:e4:8f:28:1d:d4:83:5b:9e:53:34:ec:28:cb:ca:54: fd:9a:34:35:2a:70:ea:51:c4:4d:81:4b:39:53:f7:98:bd:19: 50:26:d4:67:36:fb:56:7f:f7:6c:b6:1c:95:f2:20:97:c0:f4: 1e:24:86:6a:a7:03:e0:07:f0:d7:fe:47:1c:b1:85:6a:be:b6: 0a:c1:9d:c7:86:25:01:26:d4:5d:59:75:1d:bf:1d:59:3e:95: a0:ce:ba:51:7f:0b:3c:6c:e9:89:73:94:1f:e0:bb:cd:84:16: 14:68:8c:b9:98:79:5c:91:3d:4a:57:81:13:f3:38:b9:b7:3c: 75:c9:d4:4c:ef:a8:5d:b4:6b:b4:aa:22:56:a4:ac:bb:4e:b1: c6:6e:3f:bf:0c:74:a4:1d:ec:d7:f2:88:04:f3:2a:ce:61:5b: 5c:91:8a:8a:f3:b2:2f:27:d8:bc:b1:52:6a:71:38:64:79:33: 18:17:f0:05 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87j+8t9B9buOYMeXiQfohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTc3MTIwOTM3NTAwZWI0NjY5NjQyODk2MmU1MTBlMDJjMzQ4ZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5jCYFI1JQ9iZ23+/wYtBG/iLsd+ BbFaFaOUIdwoQllA6TwUkmObgleniITmbCmyaZ2/MELmJDzUu7BesV6wyjV0nTjp lFZoSnpvYbH39U+5uDRnfEO2jyV4ACGEFSNp0mjF4t+F9cux+m2GcRbVFz6Dbou9 ZOWbf/+WFNU+KdqE1bIpl1v4ojBV8jVvTJQwH9QAe/DpU4Yty/vuTNA0joQNSm2d b6KHMbfYbkXwISiN/5NywjwKLCH2Yk0Mr6Y4JnEE6vdjpvXQpgkvFvFFniF+tjbw RWTpEhXCNLfC3gh/zMRx4rQ4nsw+69uExKfa/d60AYjV0Y2/xValqEj3RQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNl3Egk3UA60ZpZCiWLlEOAsNI5sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzllZWRi OS1lNTk0LTQxNWItYjg4YS1kZTM4MWRiNDM2ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvOWVlZGI5 LWU1OTQtNDE1Yi1iODhhLWRlMzgxZGI0MzZlYy8xLzJYY1NDVGRRRHJSbWxrS0pZ dVVRNEN3MGptdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+zkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC6VzANBgkqhkiG9w0BAQsFAAOCAQEABHB7eCcu7xqghnmtK0yQzNRTlIYRcH/n r44ZVJSHhuD+xt5vLVL1slUSU7jdNK5BK/EUmwxPd7flx1YHSuPU0hCJsQFf2nYx dlXY5I8oHdSDW55TNOwoy8pU/Zo0NSpw6lHETYFLOVP3mL0ZUCbUZzb7Vn/3bLYc lfIgl8D0HiSGaqcD4Afw1/5HHLGFar62CsGdx4YlASbUXVl1Hb8dWT6VoM66UX8L PGzpiXOUH+C7zYQWFGiMuZh5XJE9SleBE/M4ubc8dcnUTO+oXbRrtKoiVqSsu06x xm4/vwx0pB3s1/KIBPMqzmFbXJGKivOyLyfYvLFSanE4ZHkzGBfwBQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:52 2026 by rpki-client