This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer (raw, json) Hash identifier: EY50IzKlboUSBVQULW3UiFRxtS0QBqb1X4pX+bo8EyA= Subject key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE13A4E06E3F1FD31973B6765E4EC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39785 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:13:a4:e0:6e:3f:1f:d3:19:73:b6:76:5e:4e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:ad:06:dd:9a:9c:c3:f2:4e:8a:f8:a2:7b: cc:d5:96:59:6c:66:e5:a1:d8:cd:9d:6b:ac:fd:02: 64:1d:02:fa:59:3c:2a:14:13:9e:c5:3f:10:5f:e7: bd:8c:a3:c9:e1:cb:11:77:bc:5f:cd:1a:2c:03:1a: 52:5c:66:6e:24:e6:1e:1d:c2:f6:94:08:90:f7:6b: f0:a8:ce:ad:a4:a0:5a:67:17:f9:58:50:f6:dd:3b: ed:23:4a:d4:f6:15:11:02:b5:32:32:99:3a:12:94: 15:04:15:25:69:53:96:9f:3a:8b:3c:07:d3:3d:85: 5d:19:ed:21:0a:12:ab:bb:4d:59:61:6b:df:33:7c: ab:0d:01:24:36:df:d7:9f:f6:2f:68:eb:33:3a:74: cb:6f:a4:5f:35:7f:cd:05:81:49:6e:8d:fd:7f:df: 09:ef:ce:4f:e7:5d:79:f8:83:02:7c:18:6e:1e:e5: a5:6f:d9:e4:46:07:2b:05:3c:95:f8:21:56:8c:7c: ba:51:10:97:7d:59:30:07:4f:a4:37:ac:0c:21:c6: 07:fd:e7:d6:45:e9:5e:31:93:e4:5c:2c:3d:30:5e: 5a:03:4d:80:68:6f:4d:51:30:75:86:99:b2:e7:61: 6c:c2:49:91:32:ea:c0:e5:cc:e6:cd:8a:35:39:c6: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 39785 Signature Algorithm: sha256WithRSAEncryption 96:07:58:82:9a:b1:bb:81:b8:b3:65:1e:52:13:a4:3d:c7:c4: 3a:36:c3:7b:97:99:9b:c8:37:ff:1e:a8:2d:13:a9:45:9e:69: cd:b5:0f:9e:c9:9b:54:64:37:f6:a8:a1:48:3d:17:38:1f:c4: bb:a5:c2:20:cc:84:ce:fe:ef:37:1a:fa:8d:36:b9:d7:fe:64: 0f:ba:7d:8e:d0:a0:b7:6a:b8:77:a3:1d:95:5c:6d:fd:e1:51: 61:12:1d:cd:26:e7:b5:f7:cd:de:09:96:1f:73:f4:ac:05:c1: d6:48:36:0c:51:01:a1:55:9e:69:d2:94:54:7f:78:03:08:40: dd:84:70:9f:41:2b:d2:cf:ff:b9:10:02:7a:35:07:d0:7d:53: f7:b2:63:84:46:fe:57:21:1a:65:29:14:ec:d1:0a:11:65:4f: a8:27:3c:27:0a:e8:f6:fc:d4:04:9e:50:0d:ec:27:c5:d5:d2: 28:74:a5:fc:b9:d5:a8:68:7b:ef:ce:d1:ca:1c:1c:a2:1d:a2: 58:8b:f8:e8:6f:90:1c:b7:0e:cc:5c:c9:9c:74:f8:a6:52:4c: 0f:22:55:85:35:b6:f8:e4:d3:0c:b6:e9:ae:4e:13:b8:71:4d: 99:5d:a0:26:7b:86:94:7d:c3:22:68:06:c0:42:f5:5e:99:35: 15:6b:98:1c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87hOk4G4/H9MZc7Z2Xk7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmZlZjBkMGUzZjNhMTEzNDNiYjkxN2ZjYjc5MzNmNGU5ZGFlNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx+tBt2anMPyTor4onvM1ZZZbGbl odjNnWus/QJkHQL6WTwqFBOexT8QX+e9jKPJ4csRd7xfzRosAxpSXGZuJOYeHcL2 lAiQ92vwqM6tpKBaZxf5WFD23TvtI0rU9hURArUyMpk6EpQVBBUlaVOWnzqLPAfT PYVdGe0hChKru01ZYWvfM3yrDQEkNt/Xn/YvaOszOnTLb6RfNX/NBYFJbo39f98J 785P5115+IMCfBhuHuWlb9nkRgcrBTyV+CFWjHy6URCXfVkwB0+kN6wMIcYH/efW ReleMZPkXCw9MF5aA02AaG9NUTB1hpmy52FswkmRMurA5czmzYo1OcaROQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNv+8NDj86ETQ7uRf8t5M/Tp2uStMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzBhOGUy My1iNjMxLTQ0NDQtOTYyOS1lNjRjNGVjM2M5MTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMGE4ZTIz LWI2MzEtNDQ0NC05NjI5LWU2NGM0ZWMzYzkxOS8xLzJfN3cwT1B6b1JORHU1Rl95 M2t6OU9uYTVLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCbaTANBgkqhkiG9w0BAQsFAAOCAQEAlgdYgpqxu4G4 s2UeUhOkPcfEOjbDe5eZm8g3/x6oLROpRZ5pzbUPnsmbVGQ39qihSD0XOB/Eu6XC IMyEzv7vNxr6jTa51/5kD7p9jtCgt2q4d6MdlVxt/eFRYRIdzSbntffN3gmWH3P0 rAXB1kg2DFEBoVWeadKUVH94AwhA3YRwn0Er0s//uRACejUH0H1T97JjhEb+VyEa ZSkU7NEKEWVPqCc8Jwro9vzUBJ5QDewnxdXSKHSl/LnVqGh7787Ryhwcoh2iWIv4 6G+QHLcOzFzJnHT4plJMDyJVhTW2+OTTDLbprk4TuHFNmV2gJnuGlH3DImgGwEL1 Xpk1FWuYHA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:18 2026 by rpki-client