This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer File: 2_9h1cWObqbsXPfubPNTpmOxs6g.cer (raw, json) Hash identifier: 3X188GCS29LLlfr3DAhjtBvTow73FmXPzVURwVMoGcs= Subject key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C805051B272E8994400BD9C1D000FBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213660 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:50:51:b2:72:e8:99:44:00:bd:9c:1d:00:0f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:33:31:26:89:21:d8:f4:0b:bf:a9:78:e5: 8a:ab:98:97:da:0a:f8:9b:30:33:30:0c:33:ab:48: 91:d0:41:69:cb:8f:0f:6b:a8:56:bf:a9:95:4a:bd: 16:42:ac:ae:d6:1b:40:8d:bd:9a:a5:05:ad:c1:85: b1:d2:76:01:71:d9:08:36:53:5c:3b:dc:5f:09:e2: 60:41:0c:1d:db:74:4b:76:7f:3b:6c:31:5b:1b:f8: ce:43:02:9f:ad:66:b7:5b:17:32:6a:67:60:ac:3c: 3a:a0:95:8b:4e:c0:8c:09:a5:18:13:87:29:f3:fd: d4:d6:df:55:d7:df:4a:b5:21:c3:bb:f3:fa:8e:d9: c0:c6:31:44:c0:ee:b8:57:5b:42:66:49:19:b0:89: 33:7d:83:22:91:7a:9b:ff:15:97:d8:53:0f:3a:d6: c1:2e:86:59:f2:22:57:83:02:ef:40:c7:f4:99:86: 20:0b:42:29:86:aa:46:65:65:67:6d:ab:8a:8e:64: 4f:8d:fb:5d:5a:55:49:40:f0:4e:b8:84:3c:e9:7f: 37:b6:fb:f4:4d:24:2a:03:73:4c:23:70:44:19:24: f1:75:e5:d8:ef:eb:34:b8:24:db:d3:62:44:3d:c4: 62:5d:9e:42:80:bf:21:1a:ef:a1:17:b5:fd:53:30: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213660 Signature Algorithm: sha256WithRSAEncryption 0f:5f:b6:0a:2c:1b:bb:95:e6:76:3f:92:19:02:d7:1d:ba:12: ee:59:ed:99:45:f5:a1:8f:e9:77:32:ee:97:ae:bc:92:8f:90: 14:c0:7e:9c:7d:e6:8a:c6:79:b2:b5:0e:3e:b2:02:80:2f:8c: b5:74:ed:e0:9b:e6:88:0f:c4:e6:62:68:5f:9b:83:ac:cb:16: e7:74:58:74:c6:a0:02:0d:32:8d:f4:78:2e:a2:6b:e9:30:d2: 2b:79:c8:4b:1f:da:3c:c5:e7:86:d0:f5:b2:d3:ad:5d:29:1c: 7d:19:1c:94:29:a1:02:11:2a:43:eb:29:22:75:81:1c:1e:a7: 0e:fe:3e:8b:c0:38:42:6f:47:15:93:77:bb:1a:76:cf:7a:8e: 20:85:e9:81:36:5c:69:c5:81:95:5f:9b:e2:fb:b1:f0:2d:39: 4e:bb:f2:9d:f6:79:af:a3:08:65:e0:6c:66:38:f3:e2:95:79: 91:dd:69:2a:3a:72:77:fe:d5:cb:74:39:e9:44:ae:5a:0c:d3: 56:ae:a9:fb:6a:c9:43:ea:1d:a9:9b:1c:14:51:6c:11:8d:e2: ac:f8:1e:d3:a3:45:aa:ed:7b:55:0f:fd:95:67:43:d6:83:42: 82:61:e1:f0:e4:6d:a8:f3:a6:d0:69:cb:f7:4e:06:60:f2:e0: 20:72:a2:f5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8gFBRsnLomUQAvZwdAA+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmZmNjFkNWM1OGU2ZWE2ZWM1Y2Y3ZWU2Y2YzNTNhNjYzYjFiM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW8zMSaJIdj0C7+peOWKq5iX2gr4 mzAzMAwzq0iR0EFpy48Pa6hWv6mVSr0WQqyu1htAjb2apQWtwYWx0nYBcdkINlNc O9xfCeJgQQwd23RLdn87bDFbG/jOQwKfrWa3WxcyamdgrDw6oJWLTsCMCaUYE4cp 8/3U1t9V199KtSHDu/P6jtnAxjFEwO64V1tCZkkZsIkzfYMikXqb/xWX2FMPOtbB LoZZ8iJXgwLvQMf0mYYgC0IphqpGZWVnbauKjmRPjftdWlVJQPBOuIQ86X83tvv0 TSQqA3NMI3BEGSTxdeXY7+s0uCTb02JEPcRiXZ5CgL8hGu+hF7X9UzBg4QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNv/YdXFjm6m7Fz37mzzU6ZjsbOoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2VlZDFk Ni02YTcyLTQ4MjYtODM5Yy1iOGIzNmY4OTU2YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZWVkMWQ2 LTZhNzItNDgyNi04MzljLWI4YjM2Zjg5NTZiNy8xLzJfOWgxY1dPYnFic1hQZnVi UE5UcG1PeHM2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCnDANBgkqhkiG9w0BAQsFAAOCAQEAD1+2Ciwbu5Xm dj+SGQLXHboS7lntmUX1oY/pdzLul668ko+QFMB+nH3misZ5srUOPrICgC+MtXTt 4JvmiA/E5mJoX5uDrMsW53RYdMagAg0yjfR4LqJr6TDSK3nISx/aPMXnhtD1stOt XSkcfRkclCmhAhEqQ+spInWBHB6nDv4+i8A4Qm9HFZN3uxp2z3qOIIXpgTZcacWB lV+b4vux8C05TrvynfZ5r6MIZeBsZjjz4pV5kd1pKjpyd/7Vy3Q56USuWgzTVq6p +2rJQ+odqZscFFFsEY3irPge06NFqu17VQ/9lWdD1oNCgmHh8ORtqPOm0GnL904G YPLgIHKi9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:54 2026 by rpki-client