This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer (raw, json) Hash identifier: 7JrDiuA1xJZrkudVM85M927P+bUjhX79EYIW4+cmq9Q= Subject key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3775D07B73AA7D8B4D0438CC0452F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.5.44.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:5d:07:b7:3a:a7:d8:b4:d0:43:8c:c0:45:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d97a77930122879a766470df8d660c98442a9932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ec:3e:b1:89:0f:b8:1b:23:99:e1:09:82:84: 7a:7d:08:e2:32:2c:8e:40:e1:12:25:a6:df:ee:9a: 64:6c:74:da:a1:38:30:98:4f:1d:d4:db:c3:d0:49: da:a5:da:19:e0:01:5a:d5:4a:88:69:5f:90:db:86: 2a:fa:51:e7:85:bc:eb:b9:c7:cb:5e:d9:2f:41:6b: 00:62:fe:0c:a8:c3:d6:9a:6d:0b:dd:84:58:f1:93: 30:e9:ae:5e:1e:18:0e:f4:77:60:43:e0:28:32:3d: c5:12:ae:40:6d:86:7e:77:97:e2:d2:46:3b:49:3f: 64:59:0a:1e:b3:cb:5a:2f:d0:3a:50:89:77:b2:fb: ab:9b:eb:1a:21:e1:89:20:e4:f7:71:79:93:01:7b: 7b:a5:89:2a:1c:9b:07:7a:76:2d:3f:58:e0:9f:8d: 68:ff:19:09:71:18:8b:a7:ed:d6:b9:b1:ed:99:0c: 4b:7f:87:df:32:43:f0:88:29:37:b0:a7:91:79:ad: 15:19:b7:59:15:a1:7e:60:e2:37:98:36:f0:15:da: e8:a1:63:65:bc:08:95:a4:7d:38:c2:54:a5:68:87: 23:f4:49:74:43:11:37:c2:ca:59:d8:4b:54:cf:80: 7b:14:ea:1f:86:dd:e7:88:3e:a1:4f:56:ea:1a:6b: 4e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.44.0/24 Signature Algorithm: sha256WithRSAEncryption af:7a:55:8e:0b:d6:5e:b5:b0:f9:26:e5:48:4c:7e:28:33:79: 00:a9:b7:31:1d:0a:ef:42:ff:35:5f:f7:ea:4f:cd:94:e4:cc: 49:28:7f:e0:53:65:da:ef:c8:8c:6e:4e:5f:a7:ef:50:45:cc: db:29:4b:9a:76:3e:20:5e:a9:7b:a1:a8:9c:92:c1:bb:f2:20: bd:d5:85:6c:82:2e:66:3d:54:40:0e:05:99:2f:b0:e6:67:44: 3b:3e:e8:d2:17:77:a0:bd:32:8f:71:e9:d8:b0:5e:0e:13:35: 08:13:77:89:49:f2:59:eb:af:1f:a2:9e:91:f0:94:24:62:0f: b9:0b:51:ad:48:9a:ca:e7:64:a5:32:b5:2f:17:ed:d9:7f:07: 98:7b:ef:82:70:f3:7e:36:e6:96:e3:de:81:6a:0f:c1:b5:a1: 37:28:02:51:f1:b5:27:2e:7a:57:cf:c7:a3:95:69:3c:2e:0a: 95:a8:fc:1b:0a:fc:aa:7e:01:6d:bd:c0:8c:dc:c4:b0:b4:ad: 03:4d:3e:a6:54:fc:d8:b9:85:3d:6c:44:a4:97:12:6d:84:58: bb:ec:ef:55:58:20:88:ee:4c:b4:00:4e:75:ed:2b:0d:4a:d9: ff:3f:7e:03:3a:a7:29:60:db:04:56:71:4c:38:92:2f:76:43: de:44:8e:a4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o3ddB7c6p9i00EOMwEUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTdhNzc5MzAxMjI4NzlhNzY2NDcwZGY4ZDY2MGM5ODQ0MmE5OTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++w+sYkPuBsjmeEJgoR6fQjiMiyO QOESJabf7ppkbHTaoTgwmE8d1NvD0EnapdoZ4AFa1UqIaV+Q24Yq+lHnhbzrucfL XtkvQWsAYv4MqMPWmm0L3YRY8ZMw6a5eHhgO9HdgQ+AoMj3FEq5AbYZ+d5fi0kY7 ST9kWQoes8taL9A6UIl3svurm+saIeGJIOT3cXmTAXt7pYkqHJsHenYtP1jgn41o /xkJcRiLp+3WubHtmQxLf4ffMkPwiCk3sKeRea0VGbdZFaF+YOI3mDbwFdrooWNl vAiVpH04wlSlaIcj9El0QxE3wspZ2EtUz4B7FOofht3niD6hT1bqGmtOmwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNl6d5MBIoeadmRw341mDJhEKpkyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzJhNDky Mi00MzRiLTQ3YjEtYjMwNC1jZDQ1OWE2NTcyMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMmE0OTIy LTQzNGItNDdiMS1iMzA0LWNkNDU5YTY1NzIxYi8xLzJYcDNrd0VpaDVwMlpIRGZq V1lNbUVRcW1USS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQUsMA0GCSqGSIb3DQEBCwUAA4IBAQCvelWO C9ZetbD5JuVITH4oM3kAqbcxHQrvQv81X/fqT82U5MxJKH/gU2Xa78iMbk5fp+9Q RczbKUuadj4gXql7oaicksG78iC91YVsgi5mPVRADgWZL7DmZ0Q7PujSF3egvTKP cenYsF4OEzUIE3eJSfJZ668fop6R8JQkYg+5C1GtSJrK52SlMrUvF+3ZfweYe++C cPN+NuaW496Bag/BtaE3KAJR8bUnLnpXz8ejlWk8LgqVqPwbCvyqfgFtvcCM3MSw tK0DTT6mVPzYuYU9bESklxJthFi77O9VWCCI7ky0AE517SsNStn/P34DOqcpYNsE VnFMOJIvdkPeRI6k -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:26 2026 by rpki-client