This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer File: 2YtaX7E4aD0ajMcBn3iXC65ngig.cer (raw, json) Hash identifier: KAdmvCLJVWu2vu9cQnGGncYVkX+StwAedUntO0v39i8= Subject key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA94A84B6E2B7954431B47133C95C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39265 IP: 193.5.192.0 -- 193.5.215.255 IP: 193.247.32.0/22 IP: 2001:67c:21c0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:94:a8:4b:6e:2b:79:54:43:1b:47:13:3c:95:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d98b5a5fb138683d1a8cc7019f78970bae678228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:72:66:ca:04:65:91:f4:df:20:2d:a9:45: 84:7e:f6:a9:6a:10:e1:81:8e:54:85:96:27:c3:78: b3:7e:7e:81:ac:57:b8:8a:c2:70:c7:c2:27:3b:c6: b2:6f:0f:28:2f:7d:10:27:4c:9b:0e:fd:f1:9a:f9: 7f:38:56:bf:4a:e4:d6:c4:62:6d:31:84:31:3b:bb: 79:75:98:cd:05:b5:b6:83:76:25:0a:f9:67:a2:db: 97:92:e8:fe:1e:3f:68:49:c1:e8:f8:ca:a6:8f:fc: 40:77:a1:22:46:e7:a8:40:91:e1:5a:7d:e6:0b:c5: 2c:4a:d5:25:1d:d1:19:b2:43:6b:a6:f5:6b:8f:b2: c5:77:a3:02:53:5e:e1:43:5d:67:af:d9:47:b0:35: 49:50:a6:66:70:50:4a:47:93:26:31:98:5d:16:f6: 94:dd:07:f2:fc:05:90:d0:c2:54:0d:04:ea:e8:b6: 91:19:88:87:50:7a:56:8b:64:38:c9:d4:27:21:45: ed:d6:78:55:20:30:b1:e3:96:a4:76:67:2e:48:a7: ce:30:76:3d:22:38:7d:e0:c5:7e:a4:a0:db:2c:8b: b9:56:b3:90:c4:76:29:6b:07:44:23:cb:ae:1e:34: 3c:5c:f8:39:0b:18:6b:73:34:29:e0:8b:a8:d3:86: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.192.0-193.5.215.255 193.247.32.0/22 IPv6: 2001:67c:21c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39265 Signature Algorithm: sha256WithRSAEncryption 01:17:fc:cd:4c:76:48:5e:fa:1b:07:bf:3d:34:57:72:6e:2e: 88:29:3b:ba:4a:92:df:80:b9:26:f3:52:f4:b2:e8:37:f4:45: 4a:5b:83:4d:b7:8f:50:32:2a:2f:10:4a:7c:3d:bf:85:b0:be: 95:73:37:81:af:a6:ae:eb:35:a2:84:a8:e3:1c:04:a2:cc:7c: b5:a4:df:18:e9:f1:78:9d:8d:de:a7:25:80:61:a8:f0:07:eb: b2:23:bc:5c:ef:da:15:aa:fe:e0:01:15:23:ba:92:b9:b7:9e: 65:b8:a6:5e:3f:77:50:9d:c4:d2:4c:07:55:1e:af:fe:f7:01: b7:72:23:81:e9:a9:e8:1b:27:26:84:2c:c1:e2:47:b9:9e:9a: ed:69:33:f6:f0:1a:00:2c:ee:13:6e:47:28:e4:6b:67:ec:3f: a9:db:c9:b7:c8:2a:94:a1:51:52:6a:98:0d:d0:2f:1c:a6:0d: 5d:39:43:27:2b:e4:a1:5a:89:c9:e8:ca:b7:db:d6:c8:04:20: d2:d5:5f:92:2e:fa:fe:c3:71:65:b4:64:f0:6f:22:5a:1a:f4: af:87:07:da:53:68:39:d1:42:e7:4e:02:64:c5:43:9d:f7:10: 46:97:ac:59:82:ce:56:19:45:82:b1:e9:13:2f:5e:99:08:25: f0:ef:6a:d3 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt9ypSoS24reVRDG0cTPJXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOThiNWE1ZmIxMzg2ODNkMWE4Y2M3MDE5Zjc4OTcwYmFlNjc4MjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+RyZsoEZZH03yAtqUWEfvapahDh gY5UhZYnw3izfn6BrFe4isJwx8InO8aybw8oL30QJ0ybDv3xmvl/OFa/SuTWxGJt MYQxO7t5dZjNBbW2g3YlCvlnotuXkuj+Hj9oScHo+Mqmj/xAd6EiRueoQJHhWn3m C8UsStUlHdEZskNrpvVrj7LFd6MCU17hQ11nr9lHsDVJUKZmcFBKR5MmMZhdFvaU 3Qfy/AWQ0MJUDQTq6LaRGYiHUHpWi2Q4ydQnIUXt1nhVIDCx45akdmcuSKfOMHY9 Ijh94MV+pKDbLIu5VrOQxHYpawdEI8uuHjQ8XPg5CxhrczQp4Iuo04bAlwIDAQAB o4ICvzCCArswHQYDVR0OBBYEFNmLWl+xOGg9GozHAZ94lwuuZ4IoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2UyZTk1 ZC0yY2I3LTQ2YmUtYTIyOC04MzE3YTgyODhkMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZTJlOTVk LTJjYjctNDZiZS1hMjI4LTgzMTdhODI4OGQxMC8xLzJZdGFYN0U0YUQwYWpNY0Ju M2lYQzY1bmdpZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD4GCCsGAQUF BwEHAQH/BC8wLTAaBAIAATAUMAwDBAbBBcADBAPBBdADBALB9yAwDwQCAAIwCQMH ACABBnwhwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAmWEwDQYJKoZIhvcNAQEL BQADggEBAAEX/M1Mdkhe+hsHvz00V3JuLogpO7pKkt+AuSbzUvSy6Df0RUpbg023 j1AyKi8QSnw9v4WwvpVzN4Gvpq7rNaKEqOMcBKLMfLWk3xjp8Xidjd6nJYBhqPAH 67IjvFzv2hWq/uABFSO6krm3nmW4pl4/d1CdxNJMB1Uer/73AbdyI4HpqegbJyaE LMHiR7memu1pM/bwGgAs7hNuRyjka2fsP6nbybfIKpShUVJqmA3QLxymDV05Qycr 5KFaicnoyrfb1sgEINLVX5Iu+v7DcWW0ZPBvIloa9K+HB9pTaDnRQudOAmTFQ533 EEaXrFmCzlYZRYKx6RMvXpkIJfDvatM= -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:08 2026 by rpki-client