This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer File: 2ZaAKfEkCW6rlV35t6gciMszOgU.cer (raw, json) Hash identifier: rNskmRNHbPCMqC0GKziyG5Rhutdl4OFnXE7v7FcQkvc= Subject key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B4C009CB0256695C2F449EC7AF9BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.176.218.0/23 IP: 193.177.180.0/23 IP: 194.53.212.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4c:00:9c:b0:25:66:95:c2:f4:49:ec:7a:f9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9968029f124096eab955df9b7a81c88cb333a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:a3:b8:64:d6:da:0d:38:8f:78:0e:95:f0: b1:00:d1:01:b3:d8:a0:57:1f:98:32:7e:53:17:a4: 60:9c:27:3a:d6:79:2d:4d:e4:45:2e:f6:82:f5:a4: 95:f4:7e:8e:bf:1c:23:02:50:13:21:f9:be:0c:7b: 06:af:fa:5d:36:c6:f9:b6:61:bd:b8:64:8d:74:d9: 06:13:0b:31:51:ad:89:56:b5:a4:79:fb:c4:28:b0: 27:26:cd:55:8b:29:41:d9:8d:56:b6:fc:f6:68:5a: 3b:92:7d:70:e1:b8:76:04:6d:47:3b:26:90:40:b9: 20:59:4b:a6:a6:92:65:34:fb:81:dd:5b:d6:7a:50: 8f:a5:7b:db:fd:cc:ba:c8:36:ef:77:46:ab:c9:62: f3:5e:7b:c3:cb:cc:05:7d:1d:fd:e1:00:d4:22:76: b4:33:75:f3:7d:9f:6a:6b:2e:b5:ea:ea:a1:4a:c6: 41:df:01:88:bd:f5:b2:5c:e7:59:76:ba:cd:fc:70: 85:18:56:55:da:56:57:6c:79:5f:19:73:ea:a1:fa: ed:94:f8:74:a7:87:e6:7b:cc:fc:03:fe:e9:de:b5: 5a:49:b0:b3:cf:3d:8f:6f:33:3d:46:9f:66:2b:82: ab:44:5c:eb:84:be:8a:d5:5c:eb:e4:ad:23:1e:c0: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.218.0/23 193.177.180.0/23 194.53.212.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:7a:7a:ce:a2:0b:08:45:6b:b2:72:bb:ac:85:ee:a4:9a:b6: 4d:aa:d1:8e:05:4e:76:67:5e:dc:2e:f6:af:27:08:47:45:b5: 11:84:f0:ea:73:a4:c4:a9:6f:c4:c2:af:dc:f3:54:d0:a7:e0: e2:ab:8e:e6:88:2c:1c:eb:04:5d:fc:d6:54:e2:a8:65:29:97: 52:af:ff:48:7c:03:ae:ff:e1:b1:a3:ef:19:b2:c0:90:3e:96: 96:e4:94:9b:1e:c7:21:05:ee:ae:98:bf:81:83:62:2a:3c:c8: ca:c2:60:03:b5:f3:13:e3:e8:19:a0:d6:4b:97:5f:c5:a7:fd: df:9f:cc:c4:9f:f2:8c:e2:5b:29:e8:4a:56:44:54:92:15:d2: 79:69:ee:c5:4f:92:27:72:00:51:80:c9:d7:40:d3:83:00:4b: 7d:e6:1d:82:f3:d0:49:60:77:2f:24:82:d4:89:bf:88:b8:1d: 8c:f1:52:5d:17:af:30:55:a4:89:6c:af:3c:bc:c5:1e:2b:b0: 5e:e2:ee:83:69:f1:cc:fa:c2:e2:84:ca:33:33:ff:b4:d5:9d: 99:66:e1:97:4d:36:19:a8:e8:fe:88:d4:02:8e:81:17:82:5b: d4:7f:bc:b7:f8:89:43:a7:57:6e:1a:4f:f4:91:f8:e4:22:26: eb:8a:d5:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt6W0wAnLAlZpXC9Ensevm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTk2ODAyOWYxMjQwOTZlYWI5NTVkZjliN2E4MWM4OGNiMzMzYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYWjuGTW2g04j3gOlfCxANEBs9ig Vx+YMn5TF6RgnCc61nktTeRFLvaC9aSV9H6OvxwjAlATIfm+DHsGr/pdNsb5tmG9 uGSNdNkGEwsxUa2JVrWkefvEKLAnJs1ViylB2Y1Wtvz2aFo7kn1w4bh2BG1HOyaQ QLkgWUumppJlNPuB3VvWelCPpXvb/cy6yDbvd0aryWLzXnvDy8wFfR394QDUIna0 M3XzfZ9qay616uqhSsZB3wGIvfWyXOdZdrrN/HCFGFZV2lZXbHlfGXPqofrtlPh0 p4fme8z8A/7p3rVaSbCzzz2PbzM9Rp9mK4KrRFzrhL6K1Vzr5K0jHsDEZQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFNmWgCnxJAluq5Vd+beoHIjLMzoFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzI3YTFi Yy1iMjU4LTQwNWYtOWY5My02ZWVhMTIyMDU3MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMjdhMWJj LWIyNTgtNDA1Zi05ZjkzLTZlZWExMjIwNTcyMC8xLzJaYUFLZkVrQ1c2cmxWMzV0 NmdjaU1zek9nVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBwbDaAwQBwbG0AwQBwjXUMA0GCSqGSIb3DQEB CwUAA4IBAQAPenrOogsIRWuycrushe6kmrZNqtGOBU52Z17cLvavJwhHRbURhPDq c6TEqW/Ewq/c81TQp+Diq47miCwc6wRd/NZU4qhlKZdSr/9IfAOu/+Gxo+8ZssCQ PpaW5JSbHschBe6umL+Bg2IqPMjKwmADtfMT4+gZoNZLl1/Fp/3fn8zEn/KM4lsp 6EpWRFSSFdJ5ae7FT5IncgBRgMnXQNODAEt95h2C89BJYHcvJILUib+IuB2M8VJd F68wVaSJbK88vMUeK7Be4u6DafHM+sLihMozM/+01Z2ZZuGXTTYZqOj+iNQCjoEX glvUf7y3+IlDp1duGk/0kfjkIibritUn -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:18 2026 by rpki-client