This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.cer (raw, json) Hash identifier: b6ol2IYG6MKmhI8A9RzJWVqxahNfndmGpSTFytrz7ng= Subject key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F8EDF329C2D3B2DF06ADEBDE80C05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206519 IP: 185.184.84.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8e:df:32:9c:2d:3b:2d:f0:6a:de:bd:e8:0c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:1c:67:9d:ac:70:18:a7:f9:5b:c7:e1:0e: 23:c2:21:d5:7a:e2:f9:b0:f6:b7:c9:00:52:b6:22: 55:4f:b6:95:a5:5e:9b:e0:f8:da:3b:4e:8f:5e:a5: 0a:b8:59:a1:b4:80:39:62:cb:20:b8:da:d3:c8:69: 86:dc:80:d4:bd:e1:7c:78:e9:e8:2e:8f:28:cf:0d: c9:26:4a:b2:f7:ba:1e:01:0b:7b:1d:e6:7e:d2:e7: 11:99:e0:f5:84:39:cd:cc:4e:28:0f:30:d7:46:fa: 2b:f7:4f:5a:ec:6c:b1:83:e2:a2:31:41:61:7b:8a: 21:f7:bb:6e:ef:63:13:af:88:ef:b6:48:e5:4f:c0: 02:3b:7d:8d:29:be:29:35:61:93:fd:ba:60:56:e0: 84:64:fc:59:44:54:7b:0d:e1:86:b1:7e:19:4b:d1: fc:e7:ad:62:f4:c3:17:51:67:dd:c8:a1:20:ea:4d: e6:4b:c1:de:55:84:9c:fd:95:ab:a6:f7:5b:14:d3: ee:f9:7c:78:1c:d9:61:ff:ea:d4:2a:29:d6:92:0f: c1:97:a3:fa:aa:c4:44:15:ad:c6:30:6c:9c:37:b5: eb:0b:59:e1:42:d3:ea:88:6d:b9:2b:db:5c:d5:5b: 68:e1:65:64:45:47:43:00:80:a1:6f:5e:d0:87:64: f0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206519 Signature Algorithm: sha256WithRSAEncryption 84:35:5c:3c:d5:68:88:74:be:d3:5c:b8:df:77:5c:e7:7e:0b: 68:e8:12:1b:7e:2a:89:33:ee:64:f0:7c:9c:4c:d2:0b:12:43: 18:a1:31:e8:60:b9:6b:5e:4a:ec:43:96:d2:00:6f:3a:90:b0: 13:bf:84:d6:da:f6:fe:fd:10:c8:7a:7e:e4:bc:4c:d5:93:56: e6:a7:16:c6:f9:fd:d6:c3:bd:29:8d:b7:87:45:82:04:e6:03: b6:1f:a8:93:92:77:01:cb:c0:d8:db:6e:df:b0:fc:4e:1c:08: 4e:fd:ac:b3:eb:45:f9:62:02:51:85:e1:64:7c:af:54:f6:9a: 52:fb:ad:24:38:ef:b2:f7:6c:bb:61:d8:0f:3e:b2:4a:e9:3b: 27:d0:ee:8b:65:56:b3:14:17:c1:47:08:ac:0d:17:89:1f:76: 14:3a:a9:1c:35:df:1b:80:91:4c:0c:a5:a3:4f:14:28:9f:61: fe:2e:41:e2:4b:92:bd:6f:49:f5:6b:cb:49:92:ad:2e:c0:0b: bd:67:0a:3a:b3:62:c8:ca:e9:3c:d0:4a:66:0e:ee:bd:7f:bd: fe:d0:18:be:91:cb:7c:48:bd:a6:18:51:06:ef:f8:0d:0c:11: 44:02:c2:0a:02:6a:1f:c7:d8:b4:c6:ce:d7:91:61:48:d6:ce: 36:ff:0d:c1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8f47fMpwtOy3wat696AwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTg4NGY5MmFmZWI1OGZmYWIyNjQ4N2IyMzIwNWZlMGQ1ZGE4YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9UcZ52scBin+VvH4Q4jwiHVeuL5 sPa3yQBStiJVT7aVpV6b4PjaO06PXqUKuFmhtIA5YssguNrTyGmG3IDUveF8eOno Lo8ozw3JJkqy97oeAQt7HeZ+0ucRmeD1hDnNzE4oDzDXRvor909a7Gyxg+KiMUFh e4oh97tu72MTr4jvtkjlT8ACO32NKb4pNWGT/bpgVuCEZPxZRFR7DeGGsX4ZS9H8 561i9MMXUWfdyKEg6k3mS8HeVYSc/ZWrpvdbFNPu+Xx4HNlh/+rUKinWkg/Bl6P6 qsREFa3GMGycN7XrC1nhQtPqiG25K9tc1Vto4WVkRUdDAIChb17Qh2Tw3QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNmIT5Kv61j/qyZIeyMgX+DV2oqfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzdjYzNm OC0wMDhiLTQwN2MtYmVlZi03NjUzMzI0NWYyYmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvN2NjM2Y4 LTAwOGItNDA3Yy1iZWVmLTc2NTMzMjQ1ZjJiZS8xLzJZaFBrcV9yV1AtckpraDdJ eUJmNE5YYWlwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCubhUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMmtzANBgkqhkiG9w0BAQsFAAOCAQEAhDVcPNVoiHS+01y433dc534LaOgSG34q iTPuZPB8nEzSCxJDGKEx6GC5a15K7EOW0gBvOpCwE7+E1tr2/v0QyHp+5LxM1ZNW 5qcWxvn91sO9KY23h0WCBOYDth+ok5J3AcvA2Ntu37D8ThwITv2ss+tF+WICUYXh ZHyvVPaaUvutJDjvsvdsu2HYDz6ySuk7J9Dui2VWsxQXwUcIrA0XiR92FDqpHDXf G4CRTAylo08UKJ9h/i5B4kuSvW9J9WvLSZKtLsALvWcKOrNiyMrpPNBKZg7uvX+9 /tAYvpHLfEi9phhRBu/4DQwRRALCCgJqH8fYtMbO15FhSNbONv8NwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:16 2026 by rpki-client