This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.cer (raw, json) Hash identifier: mQRsqOeA+9gzZqaqxqQ4XYeelo2xBpnu453z0zoWka4= Subject key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79100CC524710985D55D1B260C178B92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35760 IP: 87.101.16.0/20 IP: 91.196.12.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0c:c5:24:71:09:85:d5:5d:1b:26:0c:17:8b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d999e5d64e44b1733c61737337ce82b4a6943a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f0:dd:9b:fb:07:b6:19:9d:7f:9f:4a:a8:86: 82:b4:23:b8:52:5d:fc:78:6c:bc:c8:80:85:f5:b5: c6:9a:b6:f3:ac:8b:91:97:60:d3:57:0c:06:f0:e9: af:a7:4e:57:8f:6f:f0:9f:a6:a1:14:ec:b6:5d:72: 2d:3b:4d:12:f1:40:28:26:e0:01:55:55:67:fd:1f: b4:5c:09:17:47:c2:1c:b3:53:32:5b:83:08:8a:91: d5:9b:a0:bf:32:d3:b4:5a:73:f4:69:06:2b:fc:dc: 19:a5:ac:c4:6f:38:cf:7e:71:2c:0a:7d:02:de:31: 0e:59:10:56:d7:22:19:db:85:31:7c:6e:d5:0b:d8: 04:41:e4:80:b9:47:94:af:ff:41:e9:22:7f:9a:90: 6d:b2:3c:19:f4:7d:11:f3:78:f2:ae:2d:b0:99:ff: 6f:3f:f1:8b:ea:10:80:e5:cc:94:4b:b1:30:0a:28: 22:51:b0:31:55:51:f4:5e:8b:ea:37:1e:fe:22:58: 8f:55:e5:33:c3:77:5c:70:9b:42:24:5a:1d:4f:e7: 66:ec:40:14:62:b0:20:51:35:c3:d5:2e:86:21:c3: ba:43:dc:31:14:47:92:4c:cf:57:f1:f2:93:0f:6b: 7f:99:a5:50:6d:be:1e:ce:72:ae:22:92:f0:bb:2f: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.101.16.0/20 91.196.12.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35760 Signature Algorithm: sha256WithRSAEncryption 2f:1e:06:0a:6c:b2:51:61:b5:e6:c8:96:58:a7:04:2b:eb:e7: 24:18:eb:d7:94:07:61:51:d7:b9:d3:ef:1e:5d:c2:93:c0:d0: db:6d:53:2f:32:4c:7f:fd:dd:a4:f2:9b:e8:8f:26:7e:f5:99: ed:36:d3:4b:89:36:2e:57:4c:a2:ca:20:a4:66:f0:90:99:7a: c0:55:99:8b:b1:b5:cd:c3:05:62:7c:f4:c2:82:92:8b:9f:1a: d6:62:90:43:59:94:d8:d6:91:46:b3:f3:83:03:ec:ec:7b:9d: eb:1c:b9:4e:0d:82:bb:f0:d5:6e:b4:2b:8d:ac:53:08:16:27: 91:c4:77:e7:07:1a:70:c3:19:57:30:b0:79:87:24:b3:85:2f: ce:af:ef:25:82:fb:30:ab:ff:2d:b8:46:6a:c9:2c:8f:e9:89: 4c:6a:60:d9:9d:2d:91:c3:e6:ca:51:22:39:e7:72:e9:f6:38: bb:54:bd:27:85:9d:a8:15:27:e1:5e:80:d9:a1:13:35:13:b9: 0b:28:4d:f6:f0:f6:8f:de:a3:eb:9e:cb:42:03:1e:f3:e5:0a: 03:af:f5:27:4c:87:a0:9b:47:6e:84:b9:80:98:77:dd:9f:b1: 0c:44:5b:69:35:27:67:30:3d:c9:18:4e:1f:72:e8:4e:f7:e6: ce:ee:a3:06 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5EAzFJHEJhdVdGyYMF4uSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTk5ZTVkNjRlNDRiMTczM2M2MTczNzMzN2NlODJiNGE2OTQzYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfDdm/sHthmdf59KqIaCtCO4Ul38 eGy8yICF9bXGmrbzrIuRl2DTVwwG8Omvp05Xj2/wn6ahFOy2XXItO00S8UAoJuAB VVVn/R+0XAkXR8Ics1MyW4MIipHVm6C/MtO0WnP0aQYr/NwZpazEbzjPfnEsCn0C 3jEOWRBW1yIZ24UxfG7VC9gEQeSAuUeUr/9B6SJ/mpBtsjwZ9H0R83jyri2wmf9v P/GL6hCA5cyUS7EwCigiUbAxVVH0XovqNx7+IliPVeUzw3dccJtCJFodT+dm7EAU YrAgUTXD1S6GIcO6Q9wxFEeSTM9X8fKTD2t/maVQbb4eznKuIpLwuy8Q7QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFNmZ5dZORLFzPGFzczfOgrSmlDpGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2YwMWY5 OS1iYzAxLTRiMzktOTM2Mi05ZjQ3Yzc0MTBkNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvZjAxZjk5 LWJjMDEtNGIzOS05MzYyLTlmNDdjNzQxMGQ0MS8xLzJabmwxazVFc1hNOFlYTnpO ODZDdEthVU9rWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQEV2UQAwQBW8QMMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCLsDANBgkqhkiG9w0BAQsFAAOCAQEALx4GCmyyUWG15siWWKcEK+vn JBjr15QHYVHXudPvHl3Ck8DQ221TLzJMf/3dpPKb6I8mfvWZ7TbTS4k2LldMosog pGbwkJl6wFWZi7G1zcMFYnz0woKSi58a1mKQQ1mU2NaRRrPzgwPs7Hud6xy5Tg2C u/DVbrQrjaxTCBYnkcR35wcacMMZVzCweYcks4Uvzq/vJYL7MKv/LbhGasksj+mJ TGpg2Z0tkcPmylEiOedy6fY4u1S9J4WdqBUn4V6A2aETNRO5CyhN9vD2j96j657L QgMe8+UKA6/1J0yHoJtHboS5gJh33Z+xDERbaTUnZzA9yRhOH3LoTvfmzu6jBg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:08 2026 by rpki-client