This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer File: 2axioKJWftFz3CqtN25FXIW8trs.cer (raw, json) Hash identifier: 488SBnnMgrxzh/R7g5s4Si6M0NwM0pZUG3IDZikeZis= Subject key identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A220F3B0B90E9460FBEEF228B83545 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.131.176.0 -- 37.131.178.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:20:f3:b0:b9:0e:94:60:fb:ee:f2:28:b8:35:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:d6:8e:f2:e7:36:27:e8:a0:5f:95:9e:5f: f9:10:1b:eb:41:17:57:2c:b3:42:13:e5:db:c8:31: cb:3b:d6:6e:0d:79:e5:ba:d8:d4:7b:1e:60:be:69: da:b2:aa:10:09:18:7b:38:1d:76:a2:e7:8c:9f:36: 78:82:00:6f:29:57:4e:2c:69:63:dd:0d:eb:8a:d2: 3e:66:a4:05:9d:a9:64:a9:11:be:8c:b2:10:cc:8e: 84:cc:db:ee:f5:4f:5e:d8:52:11:5e:b3:85:35:b2: e6:21:de:2e:30:79:39:65:1b:e8:03:ad:46:a6:40: f1:29:29:25:b5:b2:1c:01:04:bf:e3:f5:01:8c:35: 28:c9:95:09:d8:f7:44:d7:61:f5:6c:2d:5a:98:ef: b3:47:fc:71:db:dd:00:c9:06:5a:40:ad:14:27:38: 9d:0f:f0:25:31:33:2c:92:9b:c3:72:04:41:80:9a: 1d:97:ac:5a:fa:8c:5f:f9:5e:82:cf:80:37:2c:79: f3:7a:b7:c1:d1:76:0e:1f:a0:48:d1:0f:84:ae:a9: bb:f4:b0:cb:2b:93:97:54:a2:2d:89:05:c8:d9:43: 5e:c4:60:05:35:52:68:e9:d4:32:ae:84:32:1f:b2: 12:10:45:7a:f2:49:3c:a0:5a:20:f9:2e:eb:29:0a: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.131.176.0-37.131.178.255 Signature Algorithm: sha256WithRSAEncryption 99:30:1b:94:f2:f0:a2:c9:15:30:08:cf:ff:90:b5:47:f1:43: a9:19:1e:38:ff:7d:42:e0:a9:72:da:a5:99:5e:d3:44:12:d8: 61:ef:45:9f:be:d6:9e:7d:12:c8:1d:72:4d:f7:1d:0e:2e:06: 68:f9:a8:71:01:8a:9d:b0:3b:bb:4d:9b:3c:e6:5a:af:bd:5e: 55:57:f0:e5:9b:7a:a6:e7:6d:dc:df:15:d3:d6:35:96:23:ff: 4d:fc:53:5d:aa:4b:95:9f:81:16:c3:35:cd:2f:bb:d4:f6:b0: 71:30:19:ca:a7:47:38:eb:24:f6:4f:ac:94:d3:8b:e7:84:a5: 85:9f:dd:01:49:59:58:0e:9f:6f:3b:28:9d:87:e1:24:f0:51: c9:b0:b1:7a:64:18:3f:88:99:f8:49:30:c3:be:c5:3d:38:14: c0:cd:c9:6a:44:e3:e9:ea:dc:2e:1e:64:cd:c5:01:66:63:ce: 14:af:05:06:35:b5:e6:d6:f1:61:69:eb:3f:9a:8b:71:a2:37: b8:23:cb:b7:34:3f:5c:e2:f2:6d:ae:c0:c7:43:22:22:4d:86: 8d:f9:07:26:fc:a3:96:97:4b:9e:d7:3f:08:2a:5b:12:ec:db: cc:ee:15:67:35:8e:5c:8c:92:97:63:93:a0:f7:d3:be:15:80: a4:c8:f1:03 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt4oiDzsLkOlGD77vIouDVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWFjNjJhMGEyNTY3ZWQxNzNkYzJhYWQzNzZlNDU1Yzg1YmNiNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ7WjvLnNifooF+Vnl/5EBvrQRdX LLNCE+XbyDHLO9ZuDXnlutjUex5gvmnasqoQCRh7OB12oueMnzZ4ggBvKVdOLGlj 3Q3ritI+ZqQFnalkqRG+jLIQzI6EzNvu9U9e2FIRXrOFNbLmId4uMHk5ZRvoA61G pkDxKSkltbIcAQS/4/UBjDUoyZUJ2PdE12H1bC1amO+zR/xx290AyQZaQK0UJzid D/AlMTMskpvDcgRBgJodl6xa+oxf+V6Cz4A3LHnzerfB0XYOH6BI0Q+Erqm79LDL K5OXVKItiQXI2UNexGAFNVJo6dQyroQyH7ISEEV68kk8oFog+S7rKQoVDwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFNmsYqCiVn7Rc9wqrTduRVyFvLa7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzVjZTg2 ZS0yN2QyLTQ4YzItODhiNS1mMTgxYjZlODBhNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNWNlODZl LTI3ZDItNDhjMi04OGI1LWYxODFiNmU4MGE2Mi8xLzJheGlvS0pXZnRGejNDcXRO MjVGWElXOHRycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAQlg7ADBAAlg7IwDQYJKoZIhvcNAQELBQAD ggEBAJkwG5Ty8KLJFTAIz/+QtUfxQ6kZHjj/fULgqXLapZle00QS2GHvRZ++1p59 Esgdck33HQ4uBmj5qHEBip2wO7tNmzzmWq+9XlVX8OWbeqbnbdzfFdPWNZYj/038 U12qS5WfgRbDNc0vu9T2sHEwGcqnRzjrJPZPrJTTi+eEpYWf3QFJWVgOn287KJ2H 4STwUcmwsXpkGD+ImfhJMMO+xT04FMDNyWpE4+nq3C4eZM3FAWZjzhSvBQY1tebW 8WFp6z+ai3GiN7gjy7c0P1zi8m2uwMdDIiJNho35Byb8o5aXS57XPwgqWxLs28zu FWc1jlyMkpdjk6D3074VgKTI8QM= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:00 2026 by rpki-client